$6.3 B Stolen in 20 Min? How Do We Know It Will Stop With Crypto? - mindmatters.ai
On October 29, over $6 billion was stolen from Binance, the world's largest cryptocurrency exchange, in one of the largest internet heists in history.
The attackers never stole Binance's private keys. Instead, they manipulated the exchange's own systems to approve the theft. According to Harsh Notariya at Yahoo! Finance, the hackers breached a DevOps engineer's laptop and used a service container to submit fake withdrawal orders.
The FBI believes the hackers are from North Korea, who developed a relationship with the engineer rather than relying solely on technological exploits. Binance is now dealing with the aftermath of this unprecedented breach, leaving many questions about the security of ordinary banks.
Human Vulnerability
The hackers approached the Binance engineer through a fake headhunting firm. The engineer completed a video interview with a fraudulent HR representative who shared personal photos and videos to build trust. During a second interview conducted on a social chat app, the engineer was instructed to download an 'assignment' containing a malicious code repository onto his work computer.
The largest cryptocurrency theft in history is essentially a story about how people and processes are the weakest links in security systems. Cryptography was not compromised and remains a key security measure.
Banking System Risks
Cybersecurity expert Bogdan Księżopolski warns that similar vulnerabilities exist in banks, payment companies, and hospitals. Attackers often use fake recruiters, planted contractors, or employees, with visual identities during online interviews potentially falsified using deepfakes.
The criminals target vulnerable employees, building trust and waiting for the right moment to strike. Financial institutions without multiple cyberchecks for unusual transactions are particularly vulnerable, including trusted national banks with justified faith in their employees.
Prevention Measures
Singapore's Centre for Cybersecurity Institute recommends requiring a second approver on a separate device for unusual payments, implementing limits on how much can leave in an hour, and setting alerts for automated accounts performing new actions.
The Ethereum wallet in the Binance heist emptied in under four minutes, necessitating immediate response capabilities. Organizations must decide who can freeze accounts or stop payments at any hour and maintain emergency contacts in their incident response plans.
The incident highlights that digital transactions of all kinds now face risks that were rarer before the world moved online. While we can enjoy the benefits of digital finance, robust protections must be implemented to prevent similar breaches.
Related
