Remix.run Logo
▲ Binance-hacker-1029 – $5.6B stolen from Binance(arkm.com)
275 points by Tiberium an hour ago | 150 comments
▲scrlk an hour ago | parent | next [-]

Their insurance fund (SAFU) is completely wiped out, it's only $1 billion in BTC: https://www.binance.com/en/academy/glossary/secure-asset-fun...

The name of the fund was originally inspired by this meme: https://www.youtube.com/watch?v=DelF6zEHXpE

FWIW, at the end of every crypto bear market, a CEX usually blows up (eg FTX)...

▲schleck8 43 minutes ago | parent | next [-]

> As of 2026, the SAFU fund comprises crypto assets valued at approximately US$1 billion, held entirely in Bitcoin

And decreasing, since BTC is dropping as we speak. Always a good idea to hedge a currency with the currency itsself

▲anonymous908213 29 minutes ago | parent | prev | next [-]

> Changpeng Zhao (CZ), former CEO of Binance, tweeted "Funds are safe"

Seems like the issue here is that he became former CEO. Funds are not safu without him...

▲lxgr 44 minutes ago | parent | prev | next [-]

Do you mean bull market?

▲scrlk 29 minutes ago | parent [-]

It's a (weak) bear market capitulation signal - max fear when people think everything is broken.

▲dist-epoch 18 minutes ago | parent | prev [-]

The insurance fund is not for covering hacks.

Binance is making so much money, covering this hack is peanuts for them.

▲Tiberium an hour ago | parent | prev | next [-]

About $2.4 billion out of this is already frozen by Circle and Tether. Some of the big ones:

- 971.15M USDT (Ethereum): https://etherscan.io/tx/0x7baba482077843514d9c72bac0110ba091...

- 823M USDC (Ethereum): https://etherscan.io/tx/0xc954c86f118e8e410e6a3eb9e3b38ff4a9...

- 312.73M USDT (Tron): https://tronscan.org/#/transaction/71b0ec0fe873fe820c37cc3ec...

- 175M USDT (Ethereum): https://etherscan.io/tx/0x0c07a5e428ce233a3bcb40f257ad899594...

▲schleck8 an hour ago | parent | next [-]

If your crypto was stolen in this, atleast you can rest assured that your money will be put to good use. In North Korea that is, by the military. I'm sure at this point Kim himself has Bitcoin merchandise with how often they make massive heists

▲NoidFonsense an hour ago | parent [-]

If your crypto was stolen in this, it wasn't your crypto. It is simply cryptocurrency that has been reallocated from an exchange to a more competent party, as the free market intended.

▲ebiester 5 minutes ago | parent | next [-]

So what happened with all of those with hardware wallets that have been pwned?

There apparently is no such thing as “your crypto” with how many security problems there are.

▲method_capital 33 minutes ago | parent | prev | next [-]

Code is law!

▲cryptoegorophy 19 minutes ago | parent | prev [-]

not your keys not your coins...

▲rwmj an hour ago | parent | prev | next [-]

I thought the point of crypto was no takesies-backsies?

▲michaelt 10 minutes ago | parent | next [-]

That hasn't been true for years.

Back in 2016 a then-huge Ethereum smart contract called "The DAO" [1] had a loophole that let an attacker extract a third of all the funds.

But a lot of the developers and miners had either lost money themselves, or had friends who'd lost money, or felt the embarrassing incident was devaluing their own Ethereum holdings. So they decided to allow takesies-backsies.

There's probably a philosophical lesson there about power and who the rules really apply to.

[1] https://en.wikipedia.org/wiki/The_DAO

▲toyg an hour ago | parent | prev | next [-]

Those who cannot understand the monetary system are doomed to reimplement it.

▲manofmanysmiles 30 minutes ago | parent [-]

Do you understand the monetary system? If so, what specific steps do you suggest I take to acquire a similar understanding?

Edit: the downvotes are suggesting I'm missing something. I think my communication style could be improved.

▲HFguy 8 minutes ago | parent | next [-]

If you want to quick primer to read tonight I suggest “The Economic Organization of a POW Camp by Radford”. Will be free download.

▲toyg 22 minutes ago | parent | prev | next [-]

Going to school and reading up on how and why we got where we are...?

Some people (particularly criminals and oligarchs) might not like them, but most of the structures around financial movements exist for very practical reasons, often stemming from the will to uphold the rule of law. Obviously nothing is perfect (the US have an excessive level of control, VISA/Mastercard are de-facto monopolies, etc etc), but one cannot seriously think that the way to fix things is to reimplement everything from scratch in a wild west of shady unaccountable operators...

▲iugtmkbdfil834 9 minutes ago | parent | next [-]

<< one cannot seriously think that the way to fix things is to reimplement everything from scratch in a wild west of shady unaccountable operators

One absolutely can, but I think things have to first get sufficiently difficult for ordinary folks to even notice. Fortunately ( sarcasm tag here for otherwise perfectly normal individuals, who may be missing some caffeine in their organism ), given that the war is coming along with various related national security restrictions, we may soon be able to experience that particular slice of fun.

▲manofmanysmiles 9 minutes ago | parent | prev [-]

My intuition is saying: the system arose naturally and intelligently over a long period of time, and even with its flaws has a lot of "load bearing legacy code" that few people understand, and new "engineers" think they'll just rewrite the whole thing from scratch and delete the "junk DNA" to use another metaphor. A little time passes and the beautiful clean rewrite collapses because of "totally unforeseeable circumstances" and the "old broken legacy system" is used to save the day. Somewhere a senior "monetary engineer" rolls over in his grave...

Any recommendations for books? Or even podcasts?

I don't have zero understanding. It sounds like you have a deeper understanding than I do.

▲toomuchtodo 19 minutes ago | parent | prev [-]

Regulations provide recourse if fiat or securities are stolen. Ownership is not possession, but shared agreement via legal frameworks.

Crypto is Chesterton's Fence at scale collectively.

(cybersecurity and risk management consultant to traditional financial services firms, thoughts and opinions always my own)

▲aidenn0 3 minutes ago | parent | prev | next [-]

Most crypto is "majority rules" where the majority is either "majority of the currency" (proof of stake) or "majority of the mining power" (proof of work).

In this case, iFinex has the explicit ability to freeze funds in Tether.

▲Jhsto 41 minutes ago | parent | prev | next [-]

Doesn't apply for USDT and USDC which can freeze funds with a court order.

And like the DAO hack on Ethereum showed, if most people who run blockchain software decide that something never happened, they can revert transactions that way.

▲Hamuko 35 minutes ago | parent [-]

>And like the DAO hack on Ethereum showed, if most people who run blockchain software decide that something never happened, they can revert transactions that way.

Isn't that a pretty integral part of the blockchain? 51% attacks were even featured on the HBO show Silicon Valley.

▲xaksnTMu2 an hour ago | parent | prev | next [-]

That was already proven false after ETH fork on 2016-07-20, that rolled back funds stolen in DAO hack.

▲NoidFonsense 39 minutes ago | parent [-]

don't bet against the house. eventually you have to cash the chips out for real money, and the house might throw out the old chips.

Unless the house is monero or something and you want a lifetime supply of drugs.

▲hgoel 4 minutes ago | parent | prev | next [-]

Turns out that even crypto's rules only apply if you're poor.

▲basch 8 minutes ago | parent | prev | next [-]

It’s always been that the voters determine reality.

▲jml7c5 29 minutes ago | parent | prev | next [-]

The value in USDT and USDC comes from the fact that they can (theoretically) be redeemed for real US dollars. One thing the issuers can do is announce "we will never accept redemption requests for these particular stolen coins", making them more or less worthless.

▲eagerpace 44 minutes ago | parent | prev | next [-]

Centralized decentralization

▲stackghost 37 minutes ago | parent | prev | next [-]

The idiots that wanted no takebacks are the same ones who lacked the critical thinking ability to foresee this exact situation.

▲iugtmkbdfil834 8 minutes ago | parent [-]

No takebacks make perfect sense UNTIL you hand over your keys to a third party;p

▲qwbar 42 minutes ago | parent | prev [-]

Well, Tether was started by an Epstein friend and first handled by the CIA Deltec bank in the Caribbean. Now it is handled by Lutnick's Cantor & Fitzgerald and is in Bukele's El Salvador.

Don't mess with Tether, it is practically state owned.

▲bflesch 12 minutes ago | parent [-]

Interesting, so it ties into the NSA vs CIA war? Some nerds from NSA/MIwhatever launched crypto, then the CIA trust fund nepo kids hijacked/weaponized it through tether

▲chairhairair an hour ago | parent | prev | next [-]

So much for anti-centralization.

▲dumberquestions 27 minutes ago | parent | next [-]

No one really considers crypto held in exchanges as decentralized, I guess some might but it's pretty standard knowledge.

▲method_capital 22 minutes ago | parent | prev | next [-]

We're talking about Binance, a centralized exchange.

▲Analemma_ 38 minutes ago | parent | prev [-]

I keep saying this: don't bother trying to dunk on crypto people with accusations like this. To a first approximation, nobody in crypto actually believes in the stated principles of anti-centralization, freedom, etc. It's entirely about number go up and always has been. Your charge of hypocrisy just bounces straight off people who never cared about the politics.

▲wolvoleo 28 minutes ago | parent [-]

In the beginning of crypto people believed in it. But as the numbers went up and up and up it attracted the wrong people. And the original people left.

Now the traditional banking system is basically rebuilt in crypto. The banks are busy the exchanges. The EU even talk about making it illegal to store money in your own wallet.

▲RobotToaster 15 minutes ago | parent | prev | next [-]

That doesn't sound very decentralised.

▲reddalo 32 minutes ago | parent | prev | next [-]

Frozen? What are they going to do, fork the blockchain?

▲Marazan 7 minutes ago | parent [-]

USDT and USDC are both centralised crypto currencies with a single source of truth.

▲kolanos 42 minutes ago | parent | prev | next [-]

> About $2.4 billion out of this is already frozen by Circle and Tether. Some of the big ones:

How does freezing crypto work in this context?

▲redox99 37 minutes ago | parent | next [-]

The smart contract for those tokens supports freezing. Tether just calls the freeze function on that address.

▲wmf 33 minutes ago | parent | prev [-]

Most crypto assets are operated by a smart contract that controls every transfer. So the contract can decide to not perform certain transfers.

▲ceejayoz 21 minutes ago | parent [-]

Not your keys, not your crypto.

Keys? Hahaha, still not your crypto.

▲sergiotapia 32 minutes ago | parent | prev [-]

I thought crypto was built specifically to prevent these 'freezing' actions? wtf

▲iillexial 4 minutes ago | parent [-]

Does anyone on this website realize there are different types of crypto coins?

▲glimshe an hour ago | parent | prev | next [-]

At least they are safe from governments and their "fiat money"!

▲anonym29 21 minutes ago | parent [-]

The purchasing power of one US dollar is 62% of what it was in 2008 when BTC was invented, and is on track to be worth half of what it was in 2008 by 2032, the same year that the social security trust fund is on track to go insolvent and see benefits automatically cut by 22%, which surely will not be papered over with more money printing :)

https://www.in2013dollars.com/us/inflation/2008?amount=1

▲echoangle 17 minutes ago | parent | next [-]

So 3% yearly Inflation? The target is 2% so not too bad. You don’t want your actual currency to gain value just by waiting.

▲BuyMyBitcoins 2 minutes ago | parent | next [-]

I understand the rationale around targeting inflation and seeking to actively avoid deflation. That being said, I wish the inflation target was less than 1%.

Eventually, possibly within my lifetime, a Big Mac meal is going to cost $50.

▲anonym29 9 minutes ago | parent | prev [-]

>You don’t want your actual currency to gain value just by waiting

You might not, I do.

Tell you what: you go short btc/usd, I'll go long btc/usd, and let's circle back in 10 years and see who did better.

▲echoangle 6 minutes ago | parent | next [-]

I mean as someone managing a state. If there’s a guaranteed way to make money by holding your currency, you’re not really incentivized to invest your money in semi-risky endeavors. Why would I fund a company to make me some single digit returns if I can just hold the money? If the central bank would actively enforce a deflationary currency, nobody would invest anymore.

▲ForHackernews 4 minutes ago | parent | prev [-]

Why do cryptobros always refuse to admit investing exists? Forex and crypto trading are always zero sum, but you don't have to choose between dollars under your mattress or bitcoin on a thumb drive, you can actually invest in productive assets.

SPY has outperformed BTC over the last 5 years, and with far less volatility.

▲krackers 7 minutes ago | parent | prev | next [-]

>$1 in 2008 is worth $1.56 today

That's an odd way of phrasing it, since the $1 is still worth $1, and a naive reading would make you think it's "worth more" when the buying power has actually reduced.

Wouldn't it be clearer to say $1 today only buys you 64% of what you could have bought in 2008.

▲mihaelm 2 minutes ago | parent [-]

Tbh both ways of phrasing are fine to me. $1.56 today will get you as much as $1 in 2008, looking at it simplistically.

▲glimshe 19 minutes ago | parent | prev [-]

Sure, but you could also have used this dollar to buy oil, gold, stocks, bonds etc

▲method_capital 16 minutes ago | parent | next [-]

Sure. Since the invention of say Bitcoin, which of those assets would you have preferred to own and why?

▲rozap 10 minutes ago | parent [-]

hindsight is the best hedge fund

▲anonym29 11 minutes ago | parent | prev [-]

Compare a purchase of any commodity, bond, precious metal, or ETF/mutual fund in 2008 to BTC's performance since 2008. Or 2009, or 2010, or 2011, or 2012, or 2013, or 2014, or 2015, or 2016, or 2017, or 2018...

▲ChoosesBarbecue an hour ago | parent | prev | next [-]

Molly White (she runs web3isgoinggreat) seems to think this is real [0]

[0]: https://bsky.app/profile/molly.wiki/post/3mz27m5slcc2o

▲dickfickling an hour ago | parent | prev | next [-]

So, what's the most likely outcome here? Maybe Circle/Tether/etc freeze some or most of it, but say the hacker gets a billion dollars. Are they able to launder it thoroughly enough that they can eventually turn it into fiat and live like a king?

▲Eji1700 11 minutes ago | parent | next [-]

Curious if this finally pops tether. I kinda doubt it, but to my very mild research on the subject I feel like binance was a big part of the equation. Of course so long as the market exists it'll need a stable, and it's got the inertia, so maybe it just won't matter.

▲gfh687564 8 minutes ago | parent [-]

why would it pop tether? if anything, it makes tether more profitable, as they can collect the yield on the treasuries and not have to return the principal dollars which are frozen.

think of it this way - if someone steals your iphone, and you lock it, does apple pop? No, apple sells you another one. locked devices are good for apple because it causes more demand.

▲motionlessveloc an hour ago | parent | prev [-]

You misspelled "turn it into more nuclear weapons in North Korea", where Kim Jong Un is already living like a king.

▲zapataband1 33 minutes ago | parent [-]

Yeah totally not israeli hackers using it to kill more palestinians. it has to be scary kim.

▲10111001 24 minutes ago | parent | next [-]

> Yeah totally not israeli hackers... it has to be scary kim.

The Israelis don't have any problem acquiring hard currency. North Korea does, and has an established MO of stealing crypto and running online moneymaking scams like ransomware.

▲zapataband1 20 minutes ago | parent [-]

Oh no? Moneymaking scams? Wait till you hear how many children israel has killed in the last few years

▲tommica 24 minutes ago | parent | prev | next [-]

Could be Claude!

▲Cyph0n 29 minutes ago | parent | prev [-]

Well, looking at the way NK is demonized, you would think it was on a genocidal rampage, invading neighboring countries, and eliminating heads of sovereign states in pursuit of its Greater NK project.

▲wat10000 18 minutes ago | parent [-]

They’re demonized because they’re an awful regime that horribly oppresses their own people.

Of all the reasons to demonize a government, that seems like a pretty good one. Why the snark?

▲1a527dd5 39 minutes ago | parent | prev | next [-]

Related?

https://ohey.ca/research/polymarket-debugbear-wallet-drainer...

https://x.com/DebugBear/status/2115866496643535293

▲reddalo 24 minutes ago | parent | next [-]

Maybe: https://www.binance.com/en/square/post/10-29-2026-suspected-...

As of now, DebugBear webite has been taken offline: https://www.debugbear.com/

And they just posted on Twitter: https://x.com/DebugBear/status/2115930681398239278

▲hoppp 31 minutes ago | parent | prev [-]

I don't think so. Both happened the same time but unrelated. Just a good haul for hackers end of the year.

▲darkwi11ow an hour ago | parent | prev | next [-]

The hack is publicized for at least a hour, but from reporting I saw they still continue to drain funds as for now. I wonder why large CEX do not have any safety measures for this kind of hacks, they could withdraw everything to newly generated wallets and minimize damage that way. It is certainly not the first time CEX wallets get hacked.

▲drum55 an hour ago | parent | next [-]

You don’t even have to do that, have deposits go to offline keys directly, that way there’s only ever cold > hot wallet movement and a big deposit can’t cause your hot wallet to be too risky.

▲darkwi11ow 44 minutes ago | parent [-]

The point of cold wallet is to minimize movements, if there is high frequency of funds moved from a wallet then it is likely can not be called cold any more. Plus CEX in any case still needs to have large buffer of funds on some wallet to support day trading.

▲nostrademons 28 minutes ago | parent [-]

You can move money into a crypto wallet without that wallet needing to do anything, or being online at all, or even having a private key that physically exists anywhere in the universe. It's just a public/private keypair; send it to the public key of a private key that's offline and it still exists on the blockchain, you just can't do anything until the matching private key comes online.

The point of a cold wallet is to keep the private key physically offline. That way you know it cannot be stolen by electronic means, because the physical device containing the key needed to authorize transactions is locked up and not powered on. Then you only power it on during very specific, audited times and conditions when it's needed to fund the hot wallet, which does all the actual automated trading and transfers.

GP's point is to have all incoming transactions to an exchange go to a cold wallet, which becomes a one-way sink, and then periodically the exchange powers up the cold wallet to sign transactions transferring assets to the hot wallet, which then funds all outgoing transactions. This isn't a bad architecture, though I'm not sure it'd save all that much here.

▲vessenes 31 minutes ago | parent | prev [-]

There are lots of measures in place at these exchanges - the rub is that cold storage is by design slow. To service withdrawal requests in a timely fashion a percent is kept “warm” or hot and used to process withdrawals. Usually this is where the leaks happen.

▲vldszn an hour ago | parent | prev | next [-]

Polymarket also reported a security incident: https://news.ycombinator.com/item?id=50295883

▲layerv-ai-qurl 41 minutes ago | parent | prev | next [-]

This is a really insane hack in comparison to the other ones we've seen. Genuinely Binance was so big that this is a real big wtf moment for crypto. If they can get hacked then what about all the other exchanges?!

▲wolvoleo 27 minutes ago | parent [-]

So was Mt Gox. No lessons were learned. No lessons will be learned this time.

▲int32_64 11 minutes ago | parent | prev | next [-]

CZ claims losses will be covered. https://x.com/cz_binance/status/2115932500006756686

▲wnevets 41 minutes ago | parent | prev | next [-]

Web3 is doing great!

▲tgtweak 21 minutes ago | parent | prev | next [-]

CZ saying it is confirmed, and that he expects accountholders to be made fully whole... I guess you can do that when 2.8BN is frozen by centralized stablecoins.

[1] https://x.com/CZ_BINANCE/STATUS/2115915423174853077

▲at1as 27 minutes ago | parent | prev | next [-]

I think it's been clear for a while now that if you intend to hold crypto, you should probably do it at the biggest, most boring, most regulated institution you can find.

Same goes with startup banks - if you exceed FDIC limits, make sure the difference is in a large institutional bank. Nearly learned this one the hard way.

Trying to save a few basis points in txn fees in very volatile industries comes at a huge risk premium

▲zetanor an hour ago | parent | prev | next [-]

Not your keys, not your coins, I suppose.

▲aliasxneo 21 minutes ago | parent | prev | next [-]

There were more today, as well. Polymarket, for example: https://news.ycombinator.com/item?id=50294287. What a finale to Black October.

▲ChromeUltron 15 minutes ago | parent [-]

that journo meme needs to die ASAP

▲exaroth 18 minutes ago | parent | prev | next [-]

What I don't get is why the attackers didn't exchange at least some of USDC/USDT to ETH, looks like it took ~1hr for Circle/Tether to lock the wallet.

▲bilalq 29 minutes ago | parent | prev | next [-]

Coinbase also had a security incident recently due to a leak from Amplitude. It's surprising how little media attention that got: https://x.com/CoinbaseSupport/status/2115274731310002356

▲EwanToo an hour ago | parent | prev | next [-]

https://x.com/binance/status/2115918888429133902?a=jScJVx4TN...

▲DavCreator an hour ago | parent | next [-]

https://xxcancel.com/binance/status/2115918888429133902

▲iagiagiag 20 minutes ago | parent [-]

https://github.com/einaregilsson/Redirector

▲iagiagiag 18 minutes ago | parent | prev [-]

"reports of a potential security issue"

Losing $5b is indeed a potential security issue.

▲wewewedxfgdf 21 minutes ago | parent | prev | next [-]

It's essentially impossible not to be hacked isn't it?

When so much money is at stake (almost) everyone will have a price including insiders.

▲masfuerte 13 minutes ago | parent [-]

If you're concerned you can literally print your crypto keys onto a piece of paper. Maybe encrypted with a passphrase. It might get stolen or lost but its not getting hacked.

▲K0IN 29 minutes ago | parent | prev | next [-]

wait, someone took the stealmybitcoin.com poc code to the next level!

https://news.ycombinator.com/item?id=50224916

▲Havoc 19 minutes ago | parent | prev | next [-]

wow. Naive perhaps but I would have thought that binance and coinbase would have insurance funds equal to the exposure of their hot wallets.

idk to me that just seems intuitively like something you'd need to have to be credible? Cold is a different story...but how can hot not be covered?

▲brohee 12 minutes ago | parent [-]

What in the history of crypto let you think any kind of sensible practices are followed? It's been a clown show since it started, and no end in sight...

▲motionlessveloc an hour ago | parent | prev | next [-]

CZ has confirmed that this "looks like a hack on Binance": https://www.fxstreet.com/cryptocurrencies/news/breaking-bina...

▲Jupe an hour ago | parent | prev | next [-]

Crypto is a real-life honey pot for cryminals.

▲acombandrew 36 minutes ago | parent [-]

can it still be called a honeypot if they get real $?

▲hoppp 34 minutes ago | parent | prev | next [-]

Happy Halloween to the hackers.

I bet they are celebrating.

Congratulations. Nice haul.

▲Yajirobe 37 minutes ago | parent | prev | next [-]

How do you move $5B dollars just like that wow

▲kjuulh 44 minutes ago | parent | prev | next [-]

The name of the hacker is a bit on the nose lol.

I can't understand how you could let this happen. If they stored everything in fat hot wallets, that just seems like a recipe for disaster. Especially with the "features" of crypto. Math for the most part, doesn't care about your feelings, or money for that matter.

▲eterm 14 minutes ago | parent [-]

Hot vs Cold wallets are a social construct. People talk about wallets being "online" or "offline" but if the keys are compromised there's no such thing.

▲kjuulh 8 minutes ago | parent [-]

I know, but if something is split up and stored in a vault somewhere the likely hood of a vulnerability napping the wallet falls. Defence in depth and risk analysis.

▲moralestapia 14 minutes ago | parent | prev | next [-]

Explain "frozen" to me while keeping in mind the whole point of Bitcoin was to avoid single entities controlling the cash flow ...

▲0xc0c0c0 30 minutes ago | parent | prev | next [-]

I would be surprised if they were not able to track this down?

fundsu were not in fact safu

▲liendolucas 11 minutes ago | parent | prev | next [-]

Can someone explain how is it than once you pull something like this you effectively get real money?

What are the countermeasures, is something frozen blocked marked as invalid?

I'm completely ignorant on anything related to cryptocurrencies.

▲cryptoegorophy 20 minutes ago | parent | prev | next [-]

hope its just a hack and not quantum computer advancements.

▲6thbit 44 minutes ago | parent | prev | next [-]

If true I think we're looking at the biggest heist in history.

Current largest was ~1B

▲motionlessveloc 38 minutes ago | parent | next [-]

Bybit was hacked for $1.5B last year.

https://en.wikipedia.org/wiki/Bybit

▲echoangle 11 minutes ago | parent [-]

Guess they said by(e) to their bit(coin)

▲rwmj 37 minutes ago | parent | prev [-]

1MDB heist was $4.5bn so this would indeed be bigger.

▲6thbit 17 minutes ago | parent [-]

that one was over (years?) time, wouldn't call that a heist really

▲aussieguy1234 24 minutes ago | parent | prev | next [-]

Given AI assisted hacking is now a thing, it's probably not safe to keep your crypto in any centralized exchange anymore.

Better general security yes, but the incentive to hack them is quite large and now more hackers have the ability to pull it off.

Same with any purpose built wallet you didn't make yourself: https://www.forbes.com/sites/digital-assets/2026/10/23/ledge...

▲nodesocket an hour ago | parent | prev | next [-]

Crypto is the biggest target for blackhats to utilize AI on. Huge amounts of money, no central authority or country and methods of wiping tracks.

What I never get is how they plan of converting the stolen crypto to cash eventually. No exchanges are gonna take the coins.

▲arch-choot 2 minutes ago | parent | next [-]

To be fair, USDC & USDT are centralized by Circle and Tether respectively, and they can freeze funds.

Less true for ETH (though in the past it forked after DAO hack to revert the txns), and I think never for BTC / XMR.

▲alkhatib an hour ago | parent | prev [-]

Could they be making money by manipulating the market? Knowing the price of crypto will fall after it gets publicity?

▲nodesocket 38 minutes ago | parent [-]

I suppose they could play the super long game and deposit many many small amounts into "shady" online crypto casinos, play a few hands of blackjack and then withdraw. Clean coins.

▲xgulfie 36 minutes ago | parent [-]

They let you play blackjack on online crypto casinos? The one casino game that you can famously beat the house on?

▲paavope 28 minutes ago | parent | next [-]

Online casinos AFAIK tend to shuffle the deck after every deal which makes card counting impossible. Then it just becomes like any old casino game where with optimal play the house has a small edge still

▲knollimar 25 minutes ago | parent | prev [-]

Don’t you only win with a small finite #of deck shoe? I’d assume online casinos just make all cards independent

▲nodesocket 20 minutes ago | parent [-]

There are live dealers with shoes of real cards with most online crypto cainos. Though, who knows if they are cheating somehow. My point was, the attacker doesn't have to bet the entire deposit. Just make it seem like they are playing.

▲rvz 27 minutes ago | parent | prev | next [-]

Hopefully expect to see the same schadenfreude sentiment on Crypto when the $10TN data center build out crashes the market and takes everyone with it.

▲Oarch an hour ago | parent | prev | next [-]

RIP cryptography?

▲GolfPopper 42 minutes ago | parent [-]

Nah. Probably not even RIP cryptocurrency exchanges.

▲formvoltron 16 minutes ago | parent | prev | next [-]

first world problems. geez

▲EricHolden12 43 minutes ago | parent | prev | next [-]

inside job /exit strategy.

▲emsign 39 minutes ago | parent [-]

Nah. Stuff like this can make crypto crash. People get cold feet. Not good for the price.

▲londons_explore 9 minutes ago | parent [-]

Only down 3% today, which is pretty much nothing for something that regularly sees 20% swings

▲K0IN an hour ago | parent | prev | next [-]

Claude I want to be a billionaire fast, make no mistakes.

▲EGreg an hour ago | parent | prev | next [-]

how do we know? it could be nonsense...

▲evdubs an hour ago | parent [-]

https://x.com/cz_binance/status/2115915423174853077

> It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m).

▲DavCreator 43 minutes ago | parent [-]

https://xxcancel.com/cz_binance/status/2115915423174853077

▲freecodeio an hour ago | parent | prev | next [-]

oof

▲ourcat 26 minutes ago | parent | prev | next [-]

"Not your keys?

... Not your coins."

▲6thbit 16 minutes ago | parent [-]

implying the keys were the hacker's ?

▲Zambyte 2 minutes ago | parent [-]

Well at some point they were.

▲ReptileMan an hour ago | parent | prev | next [-]

Please let it be rogue AI agents for maximum lulz.

▲emsign 38 minutes ago | parent [-]

The beast eats itself.

▲anonym29 30 minutes ago | parent | prev | next [-]

Yet another reminder of the first rule of crypto: Not your keys, not your coins.

▲gukov 23 minutes ago | parent [-]

About that (Coldwallet)...

▲anonym29 7 minutes ago | parent [-]

A big problem for anyone who trusted their security to a commercial provider with a less audited codebase than the BTC core wallet software.

▲vldszn 38 minutes ago | parent | prev [-]

Per Changpeng Zhao (former Binance CEO):

This seems to be caused by DebugBear compromise: https://x.com/debugbear/status/2115866496643535293?s=46&t=_R...

it appears to be an injection attack on the front end. injecting incorrect tx, but showing a valid tx for the user to sign.

Link: https://x.com/cz_binance/status/2115880474375749834?s=46&t=_...

UPD: This is related to the Polymarket security incident, not Binance. Sorry, I missed that.

▲hoppp 32 minutes ago | parent [-]

I think that's a different hack. Polymarket mostly.

▲vldszn 29 minutes ago | parent [-]

true, missed this