Crypto exchanges call for quick moves to bolster defenses after Binance heist

Crypto exchanges are taking swift action to strengthen defenses and promote industry-wide information-sharing following a massive $6.3 billion hack of Binance, raising concerns about their vulnerability as they become increasingly embedded in mainstream finance. Coinbase implemented changes to its systems that store cryptocurrency keys offline as a precaution, while Kraken is monitoring industry incidents to apply lessons to its defense strategies.

However, industry experts and executives argue that urgent action is needed, given the potential risks posed by digital assets integration into the financial system, as promoted by President Donald Trump's regulators. Chris Perkins, Franklin Templeton's head of crypto, emphasized the importance of addressing security issues promptly.

Binance, the world's largest crypto exchange, suspended withdrawals after the attack, which analysts attributed to North Korean hackers, and pledged to use company funds to cover losses. The complex attack might have begun with a compromised software engineer's laptop, allowing hackers access to withdrawal systems. Binance later discovered additional breaches and struggled to track the extent of the attack due to malware designed to erase traces.

Rival crypto exchanges, such as Kraken and OKX, acted swiftly to reinforce their systems and reassure customers that their tokens were secure.

Despite the significant loss, industry executives maintain confidence that Binance has sufficient resources to absorb the losses without broader financial repercussions. Bitcoin and Ether, the second-largest cryptocurrency, experienced a decline in value, but both recovered some ground on Friday. Josh Riezman, GSR's chief legal and strategy officer, forecasted that the industry would not suffer material losses, even though Binance faces the immediate challenge of dealing with the exploit.

The Binance hack, reminiscent of previous attacks linked to North Korea, involved social engineering tactics, such as tricking employees into revealing sensitive information or granting access to systems, which security experts advised companies to address through employee training.