Crypto industry confronts stark security challenges after US$6.4b Binance hack

Binance, the world's largest cryptocurrency exchange, recently suffered a major hack resulting in a loss of over US$6.4 billion. The stolen funds remain in the hands of alleged North Korean hackers. Tim Way, the global head of banking initiatives at Fireblocks, emphasized the need for a multilayered approach to security and risk management in the face of increasingly sophisticated vulnerabilities.

He pointed out that once assets are on the blockchain, they are difficult to recover, making robust security measures essential. Binance customers withdrew US$3.64 billion from the platform after it resumed operations, but the exchange's CEO does not believe there is a widespread trust issue. However, customers are now focusing more on understanding the security controls of the platforms they invest in.

Yixuan Huang, a senior solutions director at blockchain regulatory technology company RigSec, highlighted the challenges in freezing stolen assets on public blockchains like Ethereum. She noted that passive signing should be updated to intent-verified signing to verify not only who can sign but also what can be signed, making the system more secure.

This update would help prevent AI from falsifying "who" but not "what" can be signed. Hardware solutions were also suggested as a high-security alternative, as software vulnerabilities are easier for AI to exploit.