Binance suffered a hack in which cryptocurrencies worth up to 5.4 billion euros were stolen. The attackers apparently used a compromised developer laptop to trigger unauthorized withdrawals. Binance reported that it had discovered “further vulnerabilities” during the attack.
The Compromised Engineering Laptop and System Vulnerabilities
The attack began when unauthorized actors gained access to Binance systems through a compromised DevOps engineer’s laptop, executing unauthorized withdrawal transactions. According to public cryptocurrency wallet analysis conducted by blockchain firm TRM, the vast majority of the funds vanished in roughly 20 minutes. Binance initially pointed to the compromised workstation of an engineer. However, an updated company statement released on Friday morning revealed that subsequent investigations uncovered that the “complex attack” went beyond that.
Chainalysis observed automated money laundering patterns. Instead of executing straightforward address-to-address transfers, the perpetrators moved assets back and forth across different addresses. The attackers used automation to obscure the trail of the funds, as Chainalysis wrote on X. TRM and Chainalysis both attributed the attack with “high confidence” to the North Korean hacking group TraderTraitor.
Defensive Asset Freezing and Secure Asset Fund Interventions
Binance halted withdrawal services. The exchange confirmed that customer funds remain “secure” and announced that all losses will be covered via its Secure Asset Fund for Users and internal corporate reserves. More than 5.45 billion euros in company capital has been earmarked to address the incident.
Blockchain analysis firms, industry partners, and law enforcement agencies coordinated countermeasures. Collaborative freezing protocols successfully locked down approximately 3 billion US dollars worth of assets. Binance stated that customers can continue to deposit money as usual. The company had previously stated that it expected to resume withdrawals within 45 hours.
Ecosystem Fallout and Market Reaction Across Global Exchanges
Major cryptocurrency markets dropped in early trading following the news. Bitcoin retreated roughly 3.2 percent, while Ethereum fell about 3.8 percent. The timing compounded a month marked by high-profile security incidents across the broader economy.
Industry leaders exchanged public reactions on social media platforms. Changpeng Zhao, co-founder and former CEO of Binance, acknowledged the incident on X while noting that competitors had stepped up to offer assistance. Coinbase CEO Brian Armstrong emphasized the necessity of industry cooperation.
The incident coincided with separate disruptions across the digital economy. Polymarket temporarily suspended trading operations after users reported unauthorized withdrawals before bringing markets back online. Das KI-Coding-Unternehmen Cursor teilte am Freitag auf X mit, dass ein Sicherheitsvorfall mit einer „bösartigen Version“ von Claude Code bis zu 5000 Nutzer betroffen habe, und erklärte, man habe daran gearbeitet, die Schadsoftware „unschädlich zu machen“.””
