Binance Reportedly Hit by $6.3 Billion Hot-Wallet Theft; Lazarus Link Unconfirmed
Summary
The article reports that attackers stole $6.3 billion from Binance’s hot wallet and that about $3 billion in assets was frozen. It attributes the suspected attack to Lazarus based on researchers’ assessments; a forensic report was pending.
Key points
- The article says attackers stole $6.3 billion in cryptocurrency from Binance’s hot wallet; the incident is not independently confirmed in the supplied content.
- It says Binance froze withdrawals and worked with other exchanges to freeze about $3 billion in assets, which the article says may be recoverable.
- The article says the attack undermined the hot wallet’s multisignature protections and that attackers used specialized wiper software to obscure activity.
- Researchers are cited as pointing to North Korea-linked Lazarus Group, also known as TraderTraitor; the article says a forensic report was still pending.
- The article says Binance would cover customer losses using its Secure Asset Fund for Users (SAFU).
- The author urges financial institutions to strengthen cybersecurity practices and resilience, warning that AI tools could increase attackers’ capabilities.
Article Details
- Victim Organization
- Binance
- Incident Type
- Cryptocurrency theft involving compromise of Binance's hot wallet and undermining of its multi-signature protection
- Data Types Exposed
- Cryptocurrency tokens (stolen)
- Affected Data Size
- $6.3 billion worth of cryptocurrency tokens reportedly stolen
- Operational Impact
- Binance froze withdrawals and initiated its crisis response. Other exchanges reportedly helped freeze about $3 billion in stolen assets; the article says the remainder had begun laundering.
- Claim Status
- confirmed
Threat Actors
Jade SleetThe article identifies TraderTraitor as another name for Lazarus Group and reports that analysts believed the group was likely behind the attack; attribution is not confirmed.Lazarus GroupResearchers reportedly highlighted data pointing to Lazarus Group as likely responsible, and analysts believed the attack was state-sponsored; attribution is not presented as confirmed.