Follow live updates as Binance says $6.3 billion in assets have been stolen in a major hack. Around $3 billion in stolen funds have been frozen.
The attacker behind Binance’s $6.3 billion hack did not simply use one engineer’s permissions to carry out the breach, co-CEO Richard Teng said Friday.
In an X post, Teng said the incident involved “a more complex attack process” and was not a single “one-click” action.
Teng reiterated that preliminary findings pointed to a compromised DevOps engineer’s laptop, which may have allowed the attacker to access an internal service and submit unauthorized withdrawals. He said investigators had found no evidence of a wallet private-key leak.
Binance would cover all losses using its SAFU fund and company funds, he said.
Chainalysis co-founder and CEO Jonathan Levin said the Binance hack was likely carried out by North Korean hacking group TraderTraitor, citing links to a previous hack.
In a post on X, Levin put the theft at $6.4 billion, slightly above Binance’s estimated $6.3 billion impact. He said industry partners had frozen approximately $3 billion and Chainalysis was continuing to track the funds.
In a separate post, onchain investigator ZachXBT said the stolen funds from the Binance attack and the earlier Bitget exploit were commingled in the same address on Friday, after arriving via THORChain.
“This indicates the same actor is likely behind both incidents,” he said.
“The Bitget exploit was attributed to DPRK-linked TraiderTraitor, which had overlap with other previous exploits such as Kelp DAO,” he added.
Source link
