Overview of Binance and the Biggest Crypto Heist Ever
This episode of The Journal covers the record-breaking hack of Binance, the world’s largest crypto exchange, in which roughly $6.3 billion in crypto was stolen in a matter of minutes. The episode explains how the breach happened, how Binance responded, why investigators believe North Korean hackers were responsible, and why the incident is a major setback for crypto’s push toward mainstream legitimacy.
What Happened
- Binance detected a massive breach on a Thursday afternoon, while its leadership team in Abu Dhabi was in the middle of the night on an emergency call.
- The theft escalated extremely fast:
- About $1 billion was initially seen disappearing
- Then $3 billion
- Within roughly 20 minutes, about $6 billion had been drained
- The total stolen amount was reported at $6.3 billion, making it one of the largest crypto thefts ever and arguably the biggest heist in history by value.
How the Hack Worked
Simple but effective infiltration
- The hackers did not rely on an exotic technical exploit.
- According to Binance, they gained access by:
- Planting malware on multiple computers
- Luring an employee through a fake job interview
- Getting the employee to download a malicious file disguised as an assignment
How the funds were moved
- Once inside, the hackers transferred crypto out of Binance wallets into external wallets they controlled.
- They then split the money across many accounts and rapidly moved it through thousands of transactions to make tracing harder.
Binance’s Response
- Binance brought in cyber investigators immediately.
- Because part of the stolen crypto was in stablecoins, the company was able to freeze some of it.
- Roughly $3 billion was frozen, but about $3.3 billion still escaped.
- Binance also:
- Paused customer withdrawals to stop further losses
- Reassured users that their funds were safe
- Promised to cover all losses from company funds
- Withdrawals later resumed, and Binance said the platform stabilized after the initial shock.
Who Was Behind It
- The FBI published wallet addresses linked to the attack.
- U.S. authorities and crypto investigators said the hack was carried out by North Korean actors, specifically a state-sponsored cybercrime unit.
- The transcript notes that North Korea has a long record of crypto thefts and that cybercrime may help fund its missile program.
- North Korea denied responsibility and called the accusation “absurd rhetoric.”
Why This Matters
Major reputational damage for Binance
- Binance is the largest crypto exchange in the world, handling enormous volumes of trading.
- The fact that even Binance could be breached undermines confidence in crypto exchanges generally.
A warning for the broader crypto industry
- The episode argues that if users don’t feel safe storing assets on the biggest and best-resourced exchange, confidence in the whole sector takes a hit.
- Unlike banks, crypto exchanges are not regulated to maintain the same kind of mandatory reserve protections for customer losses.
- That means users at smaller exchanges may not be protected if a similar hack happens to them.
A setback for mainstream adoption
- The hack is portrayed as a blow to crypto’s efforts to become more accepted by regulators and ordinary consumers.
- It raises a core question: How safe is crypto, really?
Key Takeaways
- The Binance hack was unusually large, fast, and coordinated.
- The attack used social engineering and malware rather than a highly sophisticated technical breach.
- Binance moved quickly to freeze assets and cover customer losses, but the stolen funds were mostly unrecoverable.
- U.S. officials attributed the attack to North Korea.
- The incident damaged trust in crypto exchanges and may slow the industry’s push toward mainstream legitimacy.
Notable Insight
- The episode emphasizes how much easier crypto theft can be compared with traditional bank robbery: no physical entry, no weapons, and potentially far larger sums stolen remotely through automation.