EXPLORINEER
en

VN — VnExpress

Hacker 'tested for 36 hours, withdrew $6.3 billion from Binance wallets in 20 minutes'

Blockchain1 min read

Hackers reportedly stole about 6.3 billion USD from Binance user wallets in about 20 minutes. The attack was prepared for at least 36 hours before it happened.

What happened

A hacker group broke into the system Binance uses to approve transactions. This let them order withdrawals from many wallets. Most of the money left in about 20 minutes, starting at 8:05 p.m. on October 29 (UTC time). Binance confirmed the attack affected about 6.3 billion USD. Binance says user funds are safe and it will cover all losses.

Key numbers and facts

  • About 6.3 billion USD was affected.
  • The main theft took about 20 minutes.
  • The hackers moved 233.46 million XRP from 5 Binance wallets in four minutes.
  • They moved 18,270 Bitcoin from a Binance hot wallet by 8:20 p.m.
  • The hackers prepared the attack for at least 36 hours, with small test transfers first.

Background

A hot wallet is a crypto wallet connected to the internet, so it is easier to attack. Binance's SAFU fund was set up in 2018 to protect users in emergencies. It now holds Bitcoin worth about 1 billion USD. Three hacks in crypto history have been worth over 1 billion USD. This attack may become the largest ever at a crypto exchange.

Why it matters

This is one of the biggest crypto thefts ever. It shows that even the largest exchanges can be attacked through their internal systems. Some experts say the attack looks like past attacks linked to North Korean hackers, but Binance has not named the culprit, and North Korea often denies such claims.

What to watch

  • Whether Binance finds the full cause of the breach.
  • Whether Binance repays all losses through its SAFU fund and company funds.
  • Who is behind the attack, and whether investigators name a group.
  • How the stolen money moves and whether it can be traced or recovered.

Glossary

Binance
A large cryptocurrency exchange where people buy, sell and trade digital money.
SAFU
Secure Asset Fund for Users, a Binance fund created in 2018 to protect users in emergencies.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

BlockchainZDNet Korea

Card Industry Moves Into Stablecoin Payments, but Foreign Issuers' Asset-Freeze Power Is a Variable

Korean card companies are expanding stablecoin-based payment services, and foreign issuers' authority to freeze assets is emerging as a new issue to review. After a hack on Binance reportedly drained more than $5.7 billion in crypto assets, including stablecoins issued by Tether and Circle, issuers froze related assets, showing they can control transfers independently of exchanges. Financial industry sources said safeguards such as asset freezing and related control systems need review before full-scale adoption.

BlockchainITmedia

About ¥100 Billion Stolen From Binance, North Korean Hacker Group "TraderTraitor" Suspected

Blockchain analysis firms TRM Labs and Chainalysis have each said that the North Korean hacking group TraderTraitor is likely behind the theft of about $6.3 billion in crypto assets from Binance, the world's largest crypto exchange. Binance said the attacker may have compromised an engineer's laptop to carry out unauthorized withdrawals, and it has suspended all deposits and withdrawals. TRM Labs and Chainalysis reported that about $2.7–2.8 billion in assets have since been frozen.

BlockchainThe Verge

Binance hackers stole $6.3 billion in record-breaking crypto heist

Binance disclosed that $6.3 billion in crypto funds was stolen from the platform in what is believed to be the largest cryptocurrency hack on record. The exchange said user funds are safe, about $3 billion of the affected assets has been frozen, and it has committed to covering losses. Blockchain analysis firms TRM and Chainalysis attribute the attack to North Korean group TraderTraitor, which Binance has not named.

BlockchainITmedia

teppay: Why Only My Number Card for Identity Verification? We Asked JR East

JR East's code payment service teppay, launched October 20, accepts only the My Number Card for electronic identity verification (eKYC), rejecting driver's licenses, passports, and health insurance cards. JR East said it adopted public personal authentication via the card to ensure secure verification, reduce impersonation risk, and unify verification procedures.