How did the biggest crypto heist in history just happen?

On October 29th, Binance, the world's largest cryptocurrency exchange, experienced the biggest ever cryptocurrency heist. In a coordinated attack lasting just 20 minutes, $6.36 billion of the exchange's reserves were drained. The breach is believed to have originated from a North Korean-linked hacking group called TraderTraitor, who were also behind a $1.5 billion hack of the Bybit crypto exchange in February 2025.

Despite cryptocurrency's founding principle of decentralisation, a single point of failure can lead to devastating consequences. It is suspected that the attack may have been facilitated by a compromised laptop belonging to an engineer at Binance. TRM Labs, a cybersecurity firm, suggests that preparations for the attack may have begun several days prior.

The investigation into the breach is ongoing, with TRM Labs stating there may have been "additional points of breach." Alan Woodward, a cybersecurity expert from the University of Surrey, UK, expresses his disbelief at how such a breach could occur, suggesting that the engineer's laptop was the weakest link in Binance's security. He notes that it is highly unlikely that a single laptop could compromise an entire exchange without a more extensive security breach.

Clive Summerfield, a cybersecurity professional from FARx, adds that the incident highlights the precarious nature of major financial hubs in the crypto world to single points of failure. He emphasizes the importance of robust operational security measures, cautioning that once crypto is transferred, it's gone.

The Binance incident also underscores the centralisation of cryptocurrencies, which can be both a blessing and a curse. While cryptocurrencies Tether and Circle have frozen billions of dollars worth of stolen coins, hindering hackers' attempts to transfer about half the stolen funds, the centralised nature of these platforms puts them at risk.

Major platforms like Binance are akin to banks, with a small number of privileged individuals controlling vast sums of money. Unlike traditional banks, once crypto is transferred, it becomes nearly impossible to recover.