Binance heist reveals uphill battle against hackers
An elite North Korean hacking group’s US$6.3 billion theft from Binance is renewing scrutiny of a longstanding weakness in the cryptocurrency industry: hackers may need to compromise only one employee to get inside, while inconsistent security practices can allow them to turn that foothold into a massive theft.
A North Korean hacking group orchestrated a staggering $6.3 billion theft from Binance, reigniting discussions about the cryptocurrency industry's persistent security vulnerabilities. The October 29 heist, experts say, was the largest cryptocurrency heist ever, carried out in minutes following months of meticulous planning and preparation, according to Binance's initial investigation.
Cybersecurity experts argue that the attack highlights weaknesses in exchanges' defenses against sophisticated social engineering and inadequate internal controls to limit the damage once an employee's computer or credentials are compromised.
Jonathan Alexander, chief technology officer at S&P Global's OpenZeppelin, a blockchain security provider, emphasizes that while social engineering is a well-known threat in the industry, the bigger concern is why exchanges lack stronger internal safeguards and circuit breakers to prevent attackers from escalating access and moving assets once they breach an engineer's computer.
Inconsistent security practices across the industry and a mindset among some cryptocurrency advocates that security controls conflict with the decentralized ethos of blockchain also contribute to the problem, Alexander adds.
The Binance attack is one of a series of major cryptocurrency hacks since 2021 that have resulted in over $22.3 billion in stolen funds, according to blockchain intelligence firm Chainalysis. This surge in losses has sparked debate over the need for more consistent standards governing access, transaction controls, and other defenses.
Cybersecurity experts believe that the current best practices in cybersecurity are insufficient to counter the threats posed by attackers who only need to succeed once. They anticipate that the Binance heist will lead to increased investment in cybersecurity measures, including safeguards for internal AI tools and agents that could be exploited if compromised.
Cryptocurrency exchanges face unique challenges as they present attractive targets for hackers seeking to identify wallets holding large sums of transferable digital assets. Employees, particularly engineers and tech workers with access to control systems, are prime targets for elaborate social-engineering operations. Alexander predicts that the Binance heist will spur greater investment in cybersecurity, including advanced safeguards to protect against future attacks.
The fragmented US regulatory system, which varies depending on where exchanges operate and the state licenses they hold, further complicates the issue. Unlike traditional banks, cryptocurrency exchanges in the US do not operate under a single federal cybersecurity regime, leaving them vulnerable to inconsistent security practices.
Written by urgent.news from New Straits Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
