Binance Suffers $6.3 Billion Crypto Theft, Promises Full Compensation

Binance, the world's largest cryptocurrency exchange, has confirmed a record-breaking cyber theft totaling approximately $6.3 billion, marking the biggest crypto heist to date. The stolen amount surpasses previous incidents, including the Bybit hack, which involved a quarter of this sum.

Industry experts emphasize that this breach highlights vulnerabilities in exchange operations and human factors rather than flaws in blockchain technology itself. A coordinated effort has led to the identification and freezing of about $3 billion in assets linked to the hackers, restricting their ability to move the stolen funds.

Initial investigations by Binance revealed that the attack originated from a compromised laptop belonging to a DevOps engineer. This breach enabled the attacker to access a service container and execute unauthorized withdrawal transactions. Subsequent inquiries uncovered multiple breach points, contradicting earlier findings that suggested only a single compromised device was involved. Binance stated that there is no evidence indicating any leakage of wallet private keys.

The Abu Dhabi Global Market's Financial Services Regulatory Authority in the UAE has acknowledged the incident and is actively monitoring developments. In response, Binance has allocated over $6.34 billion from company reserves to cover the financial impact of the hack.

Georgy Kucherin, a senior security researcher at Kaspersky GReAT, noted that the Binance incident, alongside a separate breach at the prediction platform Polymarket involving a compromised third-party DebugBear script, demonstrates how exchanges are vulnerable through both internal systems and external dependencies. He pointed out that technical personnel remain a critical weak point, as even skilled engineers can unintentionally introduce malware into systems.