hack or exploit

Live News: Binance hack rattles crypto as Intel plunges and AI spending fears hit tech

61Importance
no updates 6h+Status
10News media
20Pieces
Published
Updated
Since then
19 new reports
Also mentions
BTCETHTRX

Binance said the cyberattack affecting it was far larger than initially understood, and later described a wider breach while working toward a Sunday restart for withdrawals. Other coverage tied the exploit to North Korea-linked actors, described how the attackers got in, and showed that the fallout quickly reached policymakers and onchain tracing efforts.

Key claims & sources

✓
Binance later said it had found a wider breach connected to the exploit and was aiming to restart withdrawals on Sunday.
✓
Binance said on Thursday that digital assets worth $6.3 billion had been affected by the cyberattack it was handling.
✓
A few hours after the hack, the Digital Chamber sent an urgent letter to congressional leaders asking for rules on customer-asset segregation, qualified custody, bankruptcy protections, and independent audits.
✓
Chainalysis said the exploit was likely carried out by North Korea-linked TraderTraitor.
✓
Chainalysis said about $2.8 billion had been frozen so far.
✓
Binance said 90% of the stolen assets had been replenished, with less-liquid tokens making up the remaining shortfall.
✓
Binance said hackers began the intrusion with a fake job interview.
✓
Binance said attackers used an internal AI tool to reach wallet engineers, and that persistent onchain permissions complicated containment.

What it means

Binance operates the world's largest centralized exchange, holding customer assets in hot and cold wallets rather than letting users self-custody. North Korea-linked groups have hit exchanges before, including the 2022 Ronin Bridge theft, and Chainalysis has repeatedly traced such operations to state-sponsored units. This attack, Binance says, began not with a code flaw but with a fake job interview used to approach an employee, echoing social-engineering tactics Pyongyang-linked actors have used against other crypto firms.

Users with funds on Binance faced a freeze on withdrawals while the exchange traced the breach, and some holdings in less-liquid tokens remain short even after Binance says it replenished 90% of what was stolen. Compliance teams and other exchanges now move to flag and block hacker-linked addresses, with Chainalysis reporting roughly $2.8 billion already frozen. Engineers and recruiters across the industry face new scrutiny of hiring pipelines and internal AI tools, the entry points Binance says attackers exploited to reach wallet staff.

Binance's pledge to make users whole shows the advantage custodial exchanges can offer in a crisis, since self-custodied victims of a hack have no counterparty standing behind their losses. But the same episode reopens the custody question the Digital Chamber raised directly with Congress: without mandatory asset segregation, qualified custody and independent audits, customers depend on a single company's balance sheet and goodwill rather than enforceable protections, a gap the FTX collapse already exposed.

Binance's targeted Sunday restart of withdrawals is the immediate marker of whether containment has worked, alongside its progress closing the remaining shortfall in illiquid tokens after reaching 90% replenishment. Separately, the Digital Chamber's letter to congressional leaders sets up a legislative test: whether lawmakers move on segregation and custody rules before the next major exchange breach, or whether, as after previous hacks, the push fades once withdrawals resume and attention moves on.

Market reaction i

BitcoinBTC it is the asset of the company or protocol in the event
first headline
-0.7% 2 h before
-0.7% 4 h after
$77,941price at publication
12data points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

+8 h 11 m
Oct 30 16:48
+8 h 11 m
Oct 30 16:48
BBC News — World echo
Picks up what was published, with no new facts
+8 h 17 m
Oct 30 16:53
Cointelegraph context
Its angle: cointelegraph, reimbursement, including
+9 h 4 m
Oct 30 17:41
BBC News — Business adds
Adds $4.7B, with quotes
+10 h 8 m
Oct 30 18:44
Financial Times echo
No new facts: unprecedented, minutes, korean
+11 h 40 m
Oct 30 20:16
Crypto Briefing context
Its angle: intersection, involvement, national; with quotes
+12 h 44 m
Oct 30 21:20
+13 h 7 m
Oct 30 21:44
NPR — Business echo
No new facts: cryptocurrencies, staggering, suspect
+15 h 12 m
Oct 30 23:48
Crypto Economy context
Its angle: digitalchamber, authorization, incorporating
+15 h 19 m
Oct 30 23:55
Blockchain.News adds
Adds $2.8B, with quotes
+16 h 34 m
Oct 31 01:10
Crypto Briefing adds
Brings into the story: TRX
+1 d 6 h
Oct 31 15:36
Cointelegraph context
Its angle: replenished, replacement, shortfall
+3 d 2 h
Nov 2 11:33
+4 d 6 h
Nov 3 14:38
Crypto Briefing echo
No new facts: necessitating, engineering, vigilance; with quotes
+4 d 6 h
Nov 3 14:53
+4 d 6 h
Nov 3 14:57
The Defiant adds
Sharpens the figure: $6.3B

Thefts of a similar size

WhenWhat happenedFigure
5.9 years ago LuBian · Weak key generation incident $3.5B
5.5 years ago Thodex · Scam incident $2.5B
5.4 years ago Africrypt · Scam incident $2.3B
6.4 years ago Wirecard · Scam incident $2.1B
5.2 years ago BitConnect · Scam incident $2B

4280 incidents stored · 0 were as large as this one or larger ($6.3B)