🚨 The Breach: $6.3 Billion (Not $5.6B)
The final, confirmed loss figure is **$6.3 billion**. Early reports cited $5.6 billion, but Binance's official investigation and on-chain trackers (Arkham, TRM) have settled on the higher number.
· The Cause: Binance's investigation points to a compromised DevOps engineer's laptop that gave attackers access to an internal service container. The attackers used this to submit unauthorized withdrawal transactions.
· No Private Key Leak: Binance explicitly stated there is no evidence of a private key leak. The breach was operational (accessing withdrawal systems), not cryptographic.
🧊 Frozen Funds: ~$3 Billion (Roughly Half)
The rapid response from stablecoin issuers is the only reason the damage wasn't total.
· Tether (USDT): Froze ~$1.567 billion.
· Circle (USDC): Froze ~$823 million.
· Total Frozen: ~$3 billion in stablecoins.
· What Remains Unfrozen: Assets without an issuer-controlled freeze mechanism, such as Bitcoin (BTC), Ethereum (ETH), and Tron (TRX), remain in the attackers' wallets.
🕵️ North Korea Blamed (TraderTraitor)
Security firm TRM Labs attributed the attack to TraderTraitor, North Korea's premier hacking unit. This is the same group linked to the $1.5 billion Bybit hack in 2025. TRM cited "robust on and off-chain intelligence" for the attribution.
📉 Market Fallout
The market reacted sharply, but not as a full-blown FTX-style collapse.
· BNB: Dropped as much as 10% over two days, hitting around $710.
· Bitcoin: Fell about 2% to ~$79,400.
· Ether: Fell about 3% to ~$2,280.
· Liquidations: Over $620 million in liquidations occurred in a single hour as the news broke, with 97% of them being long positions.
📢 The Official Response
· CZ (Changpeng Zhao): Confirmed it "does look like a hack" and said user funds are safe. He thanked Tether and Circle for their fast freezes but noted his comments are not a formal reimbursement pledge from the exchange.
· Binance: Pledged to cover all losses from its SAFU fund and company reserves. It temporarily suspended deposits and withdrawals, but has since resumed deposits. Withdrawals remain suspended while security checks are completed. The U.S.-focused Binance.us was unaffected.
· Elon Musk: Trolled CZ on X, leading CZ to reply that it was a "bad time to troll."
🎯 The Brutal Bottom Line
The $6.3 billion is gone from Binance's wallets, but the exchange has the balance sheet to cover it. The **~$3 billion frozen in stablecoins** is a massive win for the good guys, but the unfrozen BTC and ETH (roughly $3.3 billion) are likely gone forever. The core lesson remains the same: centralized hot wallets are a single point of failure, and the only assets that were recovered were the ones with a centralized issuer who could hit the freeze button.
No comments:
Post a Comment