Binance reports $6.3 billion theft in massive cyberattack

Binance disclosed this week that cybercriminals stole more than $6.3 billion from investor accounts, marking the largest cyber heist in history. The theft occurred on Thursday at 4:05 p.m. Eastern. Hackers accessed the trading accounts of cryptocurrency investors and moved the digital assets within approximately 20 minutes. The exchange has since frozen about $3 billion in stolen cryptocurrencies while it works with partners to trace the remaining funds.

Experts attribute the attack to a sophisticated unit within the North Korean military known as TraderTraitor. Ari Redbord, global head of policy at crypto research firm TRM Labs, described the incident as the largest bank robbery in human history. He noted that the speed and scale of the transfer reflect advanced technical capabilities. Redbord stated that the funds are likely to be used for weapons proliferation and other destabilizing activities rather than simple commercial profit.

TraderTraitor is also responsible for the previous record cyber heist, which involved a $1.5 billion theft from crypto exchange Bybit last year. The North Korean military maintains teams of professional hackers that have built extensive cyber capabilities. The current attack has raised new concerns within the financial sector, which critics often describe as the Wild West of finance due to its rapid growth and varying standards of oversight.

Binance has stated it will pay back customers who were victims of the breach, though the specific mechanism for reimbursement is not yet clear. Amanda Fischer, policy director and chief operating officer at financial consumer advocacy group Better Markets, pointed out that current regulations do not strictly bind exchanges to pay investors in the event of a hack. Fischer compared the structure to traditional stock markets, where brokers are audited and regulated by the Securities and Exchange Commission and carry insurance to make customers whole.

In traditional finance, investors keep funds with a broker rather than the exchange itself, providing an additional layer of regulatory protection. Fischer noted that the regulatory framework for crypto is weaker than what investors enjoy in other US markets. Smaller exchanges may struggle to cover losses if similar attacks occur, potentially leaving individual traders to bear the financial consequences. The collapse of FTX in 2022 serves as a recent example of how exchanges can dip into customer funds during financial distress.

FTX, then the largest crypto exchange, collapsed after using customer funds to cover internal losses during a period of market volatility. Founder Sam Bankman-Fried was sentenced to 25 years in prison for fraud among other charges. Fischer warned that the incentive to use client funds can cascade into catastrophe for investors. The Binance heist has intensified calls for stricter scrutiny of how digital asset exchanges are structured and regulated.

Binance is currently working to recover the remaining stolen assets and determine the exact method used to access the accounts. The exchange continues to cooperate with other partners in the industry to secure the funds. The incident has prompted a broader review of security protocols across the cryptocurrency sector as firms assess their vulnerability to similar state-sponsored attacks.