Live News: Binance hack rattles crypto as Intel plunges and AI spending fears hit tech
- Published
- Updated
- Since then
- 19 new reports
- In
- Exchanges
Binance said the cyberattack affecting it was far larger than initially understood, and later described a wider breach while working toward a Sunday restart for withdrawals. Other coverage tied the exploit to North Korea-linked actors, described how the attackers got in, and showed that the fallout quickly reached policymakers and onchain tracing efforts.
Key claims & sources
What it means
Binance operates the world's largest centralized exchange, holding customer assets in hot and cold wallets rather than letting users self-custody. North Korea-linked groups have hit exchanges before, including the 2022 Ronin Bridge theft, and Chainalysis has repeatedly traced such operations to state-sponsored units. This attack, Binance says, began not with a code flaw but with a fake job interview used to approach an employee, echoing social-engineering tactics Pyongyang-linked actors have used against other crypto firms.
Users with funds on Binance faced a freeze on withdrawals while the exchange traced the breach, and some holdings in less-liquid tokens remain short even after Binance says it replenished 90% of what was stolen. Compliance teams and other exchanges now move to flag and block hacker-linked addresses, with Chainalysis reporting roughly $2.8 billion already frozen. Engineers and recruiters across the industry face new scrutiny of hiring pipelines and internal AI tools, the entry points Binance says attackers exploited to reach wallet staff.
Binance's pledge to make users whole shows the advantage custodial exchanges can offer in a crisis, since self-custodied victims of a hack have no counterparty standing behind their losses. But the same episode reopens the custody question the Digital Chamber raised directly with Congress: without mandatory asset segregation, qualified custody and independent audits, customers depend on a single company's balance sheet and goodwill rather than enforceable protections, a gap the FTX collapse already exposed.
Binance's targeted Sunday restart of withdrawals is the immediate marker of whether containment has worked, alongside its progress closing the remaining shortfall in illiquid tokens after reaching 90% replenishment. Separately, the Digital Chamber's letter to congressional leaders sets up a legislative test: whether lawmakers move on segregation and custody rules before the next major exchange breach, or whether, as after previous hacks, the push fades once withdrawals resume and attention moves on.
Market reaction i
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 5.9 years ago | LuBian · Weak key generation incident | $3.5B |
| 5.5 years ago | Thodex · Scam incident | $2.5B |
| 5.4 years ago | Africrypt · Scam incident | $2.3B |
| 6.4 years ago | Wirecard · Scam incident | $2.1B |
| 5.2 years ago | BitConnect · Scam incident | $2B |
4280 incidents stored · 0 were as large as this one or larger ($6.3B)