Binance Hack: What We Know So Far
Binance, the world's largest cryptocurrency exchange, has been hit by what is believed to be the largest crypto hack ever at $6.3bn (£4.7bn).
Crypto is a type of digital asset with no physical existence. People access and manage it using digital wallets on their smartphones or computers.
Richard Teng, Binance's co-chief executive officer, stated they are collaborating with authorities to understand the incident and will cover all losses.
Here's what we know:
Binance:
- Founded in China in 2017, Binance is the world's largest cryptocurrency exchange by trading volume.
- It has hundreds of millions of registered users globally.
- Under scrutiny in recent years due to concerns over money laundering and connections to terrorist organizations.
The Hack:
- Occured on Binance's global centralized exchange, Binance.com.
- Binance.us, catering specifically to US residents, was not affected.
- Initial investigation suggests the hack began with a compromised DevOps engineer's laptop, granting the attacker access to a service container and enabling unauthorized withdrawal transactions.
- The attack was a "more complex process" than a simple click, involving multiple steps.
Expert Analysis:
- Raghu Nandakumara from cybersecurity platform Illumio suggests the engineer was possibly "talked into taking a test" and malware landed on their laptop, providing the attacker with direct access to production systems and ultimately, user wallets.
- Dr. Clive Summerfield emphasizes the vulnerability of even highly secured systems when human access can be compromised.
Source:
BBC News