ReportedamountStatement 39
Binance reported that approximately $6.3 billion was impacted in an apparent hack.
The world's biggest cryptocurrency exchange reported Thursday that approximately $6.3 billion was impacted in an apparent hack.
Blockchain intelligence firms link North Korea to $6.3B hack on Binance
Capture history
Newest first. The raw hash is the SHA-256 of the stored copy exactly as fetched. We keep the copy privately and publish its hash. The text hash is of the text extracted from it, which is what is compared between captures.
| Captured (UTC) | Fetched via | HTTP | Raw sha256 | Text sha256 | Text changed |
|---|---|---|---|---|---|
| firecrawl-web08 | 200 | edffa6139d564704dd42ff0e81b0d9fa175ff0220e864d5ba6a5ea88355ec2d9 | 457b0670476911fe30c167fcc0e1a3a0f2fbceba6bd3d4b3bc31adb4b3eb22bc | No |
Changes between captures
No text changes detected between captures of this source.
Claims quoted from this source
ReportedattributionStatement 45
TRM attributed the attack to TraderTraitor, which it described as North Korea's elite hacking unit, with high confidence.
TRM, in a post on its website Thursday, attributed the attack to TraderTraitor, which it described as North Korea's elite hacking unit. "We make this judgment with high confidence," the firm said.
ReportedresponseStatement 51
Changpeng Zhao posted that user funds are safe, but added that the theft does look like a hack on Binance.
Zhao posted Thursday on X that "User funds are safe!" but added that the theft "does look like a hack on Binance."
ReportedrecoveryStatement 41
Binance announced that it was beginning to recover assets for users on Friday.
It said Friday that it was beginning to recover assets for users.
ReportedfreezeStatement 40
Binance stated that it worked with blockchain partners to freeze roughly $3 billion in affected assets.
Binance said it worked with blockchain partners to freeze roughly $3 billion in affected assets.
ReportedwithdrawalsStatement 42
Binance stated that withdrawals have been suspended and are expected to resume in the next day or two.
The cryptocurrency exchange said deposits were unaffected, while withdrawals have been suspended and are expected to resume in the next day or two.
ReportedresponseStatement 43
Binance stated that it will cover all losses.
It said it will cover all losses.
Reportedroot causeStatement 44
Binance stated that an initial investigation suggested the incident may have involved a compromised laptop, but a subsequent investigation uncovered additional points of breach.
The company said on X that an initial investigation suggested the incident may have involved a compromised laptop, but that a subsequent investigation uncovered additional "points of breach."
ReportedamountStatement 46
TRM stated that an attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes.
"An attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes," TRM said.
ReportedamountStatement 47
TRM stated that the hack would make it the largest cryptocurrency theft on record.
That would make the hack the largest cryptocurrency theft on record, it said.
ReportedattributionStatement 48
TRM stated that several features of the attack match earlier North Korea-linked heists, including the Bybit hack.
"Several features of this attack match earlier North Korea-linked heists, including the Bybit hack," TRM said.
ReportedattributionStatement 49
Jonathan Levin, co-founder and CEO of Chainalysis, wrote that the Binance hack was likely done by DPRK group TraderTraitor.
Blockchain analysis company Chainalysis also believed the Binance hack was "likely done by DPRK group TraderTraitor," its co-founder and CEO Jonathan Levin wrote on X.
ReportedresponseStatement 50
A Binance spokesperson said the company is working closely with law enforcement partners to confirm the identity of the criminals and bring them to justice.
Asked about the potential ties to North Korea, a Binance spokesperson said only that the company is "working closely with our law enforcement partners to confirm the identity of the criminals and bring them to justice."
ReportedresponseStatement 52
The speaker said that he does not manage Binance anymore but, as a shareholder, expects all user funds will be fully covered.
He added that while he doesn't manage Binance anymore, "as a shareholder, I expect all user funds will be fully covered."
Theoryroot causeStatement 53
The speaker said this looks like one signature that gave the attacker a never-expiring, full-access token to a Binance hot wallet.
"This looks like one signature that gave the attacker a never-expiring, full-access token to a Binance hot wallet," he said, referring to cryptocurrency wallets that hold users' "private keys," or unique authorizations, digitally and which are connected to the internet.
Reportedroot causeStatement 331
NPR reported that Kok Tin Gan of NyxLab said the event raises questions about why stronger approval controls were not in place.
The event, meanwhile, also raises questions about why stronger approval controls were not in place, said Kok Tin Gan, cofounder and CEO of cybersecurity firm NyxLab.