Binance-hacker-1029 – $5.6B stolen from Binance (arkm.com)

1344 pointsby Tiberium12 hours ago824 comments

Tiberium 12 hours ago

About $2.4 billion out of this is already frozen by Circle and Tether. Some of the big ones:

- 971.15M USDT (Ethereum): https://etherscan.io/tx/0x7baba482077843514d9c72bac0110ba091...

- 823M USDC (Ethereum): https://etherscan.io/tx/0xc954c86f118e8e410e6a3eb9e3b38ff4a9...

- 312.73M USDT (Tron): https://tronscan.org/#/transaction/71b0ec0fe873fe820c37cc3ec...

- 175M USDT (Ethereum): https://etherscan.io/tx/0x0c07a5e428ce233a3bcb40f257ad899594...

kolanos 12 hours ago

> About $2.4 billion out of this is already frozen by Circle and Tether. Some of the big ones:

How does freezing crypto work in this context?

redox99 12 hours ago

The smart contract for those tokens supports freezing. Tether just calls the freeze function on that address.

hackernud3s 11 hours ago

Isn't it already too late at that point? The tokens would have moved already.

petu 11 hours ago

Moved where? Moving to a different wallet wouldn't prevent freezing. It's 5B, impossible to cash out or exchange for different crypto quickly.

hackernud3s 10 hours ago

right but too late to call freeze on the original wallet address as per gp's post. I would imagine it got distributed to many wallets and attempts to tumble by the time Tether could move on it.

FabHK 4 hours ago

here's an interesting article by DataFinnovation arguing that blacklisting crypto is doomed to fail.

https://medium.com/chainargos/losing-the-blacklisting-race-e...

tehlike 4 hours ago

they took loan against it.

no-name-here 4 hours ago

Excluding wash and artificial activity, supposedly stablecoins trade 400M/h so if it took 2h to notice and lock they might have been able trade about half a billion without overwhelming existing volumes?

https://finance.yahoo.com/markets/crypto/articles/stablecoin... (I didn't verify per-stablecoin volume, or actual volume at those hours, or typical volume for those exact hours, which a better analysis would have done.)

mcintyre1994 3 hours ago

I think the idea is that they freeze them indefinitely, and then they no longer count against the centralised reserves, since they can never cash out. Now they can mint the equivalent amount back to Binance and remain solvent.

grey-area 3 hours ago

And how do they ‘mint’ 2 billion without affecting the price of tether and without finding 2 billion to back it?

If they can mint with no impact doesn’t that mean they can just print money?

mcintyre1994 3 hours ago

Because if they permanently freeze 2 billion in a wallet, that Tether can never move or cash out, so their liabilities go down 2 billion. They can mint an equivalent amount to a non-frozen wallet without affecting their reserve ratio.

And yes they can print money, you have to trust their reserves that are off chain.

Zanfa 2 hours ago

It’s been years since anything Tether minted was plausibly 100% backed by real assets. Both times they’ve been forced to show the books, they only had fractional backing. And they’ve minted tens of billions of tokens since.

grey-area 2 hours ago

And yet people like the parent and those with billions invested in Tether seem to believe that it's all backed and fully solvent and minting new money from thin air is completely reasonable.

It's remarkable to me how long this scam has lasted and how much confidence people have in it, in spite of the very shady characters involved and the likelihood of fraud.

cowlevel 11 hours ago

And it's impossible to mix them because Ethereum is even anonymous than Bitcoin.

reenorap 3 hours ago

Can they forcibly reverse the transaction so that Binance gets their money back?

shakow 2 hours ago

No. The last time this happened, it led to the Ethereum/Ethereum classic split, and that was 10 years ago.

However, the stablecoins are not “real” cryptocurrencies like e.g. BTC or ETH, but are built as smartcontracts on top of ETH, basically using it as a big replicated database. So they might(?) just manually “give back” the money to Binance, as in freezing money in the stolen account forever and “printing” an equal amount to Binance's credit.

Or, to put it in another way, no need to reverse an erroneous SQL transaction if you can just create a new one that fixes the data you altered.

wmf 12 hours ago

Most crypto assets are operated by a smart contract that controls every transfer. So the contract can decide to not perform certain transfers.

ceejayoz 11 hours ago

Not your keys, not your crypto.

Keys? Hahaha, still not your crypto.

cowlevel 11 hours ago

Unless it's Monero, the only currency to be declared illegal in most countries because it's too much like cash.

ShinyLeftPad 5 hours ago

Like cash except you can use it at crazy scale, so worse than cash when crime is considered.

thereforegrin 4 hours ago

That's why it's paramount for LEOs to go after people doing the bad deeds instead of simply banning a whole monetary ecosystem, just because it's easier to do.

If you ban a coin, instead of persuing the actual criminal, then you're both doing a disservice to honest users of the coin and leaving the bad actor to do harm to society in some other way.

There are only 8B people in the world - they all fit into a "box" of 2k by 2k by 2k of humans.

It really isn't that hard to know who's doing bad things to others, especially with current technology.

ShinyLeftPad 4 hours ago

No, it's exactly why that works.

Criminals used to meet in person to discuss crime (because mail/phones can be intercepted) and meet in person to move cash. It was a hard limiting factor on what they can get away with. With e2e messengers and anonymous crypto both of those "issues" are fixed.

Do you know anyone who uses it for legit purposes? I don't. I bet you ban a coin like that and you kill orders of magnitude more crime revenue compared to .001% of honest users using it to send money home and save a few dollars on the transaction.

intended 3 hours ago

It really is hard, because time isn’t addressed in the idea.

It is an evolutionary process, with incentives are high enough for both sides to keep finding solutions.

radlad 2 hours ago

Monero is legal in most countries.

l0ng1nu5 an hour ago

It doesn't, the hacker already loaned against it to get eth so they froze saves assets.

reddalo 12 hours ago

Frozen? What are they going to do, fork the blockchain?

Marazan 11 hours ago

USDT and USDC are both centralised crypto currencies with a single source of truth.

hocuspocus 10 hours ago

In other words, they are essentially casino chips, not cryptocurrencies.

levanten 3 hours ago

If people dont know, they should look up DAO hack and Ethereum hard fork.

sergiotapia 12 hours ago

I thought crypto was built specifically to prevent these 'freezing' actions? wtf

iillexial 11 hours ago

Does anyone on this website realize there are different types of crypto coins?

littlecranky67 2 hours ago

I am always amazed how little knowledge and cargo culting of 2017-era bitcoin knowledge is prevalent on HN. Whatever you monetary feelings towards crypto is, the technical aspects are fascinating. But most of the time HN gets it wrong.

Dagonfly an hour ago

TBH, the more you know about the technical aspects the less fascinating it gets.

Smart contracts and stablecoins by extention sound technologically interesting, but at the end you always rely on trusting people.

The core of the financial system is about managing trust and therefore a social issue, not a tech issue. It'd be nice if more tech nerds would internalize that tech can't solve social issues on it's own

littlecranky67 an hour ago

Stablecoins are centralized and of course rely on trust - you need someone to exchange whatever asset they promise to guard for your tokens. I find them fascinating (in conjunction with the lighnint/taproot assets over bitcoin) and not necessarily unsafe.

In the freebanking era that the US had (before the FED was founded) every bank emmitet their own dollar. And, of course, there were banks over-issuing and bank runs left people without their assets. But that was before we had free flow of information and the internet. In todays world you can monitor and trade stablecoins, market cap, exchange rates in a freebanking system in sub-seconds. Any erosion in trust will immediately result in price fluctuations. We need a digital freebanking era, and it is a shame the genius act fell through. Exporting the dollar to people without access to banking would benefit the US (but I get that it currently mostly benefits trumps family).

xdennis 8 minutes ago

> cargo culting

I don't think you're using that term right. Not knowing how something works doesn't mean you're cargo culting.

People are not so knowledgeable about the other coins because the whole point of magic internet money is that it can't be controlled by anyone. If your entire account exists in some box somewhere under the control of some entity, how is that any different from a bank (which also mostly doesn't operate on cash but just moves bytes around)?

codedokode 10 hours ago

USDT is implemented as a contract written in Solidity, working over other network like ETH, and it has a blacklist managed by admins. Once address is added to a blacklist, you cannot spend anything from it.

nicman23 3 hours ago

yeah bitcoin indeed was

RobotToaster 11 hours ago

That doesn't sound very decentralised.

tjwebbnorfolk 5 hours ago

nothing about crypto is decentralized. it's verified by enormous mining farms, who contribute hashes to centralized pools, all stored on one central ledger, and interfaces with the fiat/legit financial system only by using that very financial system.

oh, and three acounts hold like 25% of all btc in circulation.

crypto can do some things, but decentralization isn't one of them. just ask Coinbase

USD tether is barely crypto at all, it's a wrapper around treasury bonds which the US govt. regulates

insane_dreamer 4 hours ago

which is why - sadly - there's not really any point to crypto anymore (other than as a speculative instrument driven mostly by fomo)

blagie 4 hours ago

The stated point is to prevent central banks from printing currency / inflation. The claim is that crypto today worth 1% of the world's BTC will be worth just under 1% of the world's BTC in 2300, at least barring e.g. progress in quantum cryptography, a sunspot taking out digital infrastructure, or similar.

That's probably socially harmful, but it is the claim.

johncolanduoni 2 hours ago

Inflation is increasing prices, which has causes other than central banks putting more money into circulation. When Bitcoin’s value drops, prices in Bitcoin increase so it experiences inflation regularly.

johanyc 4 hours ago

Stable coins are not decentralized

wyager 3 hours ago

Stablecoins only use the accoutrement of blockchain as smoke and mirrors to distract and confuse regulators, not because they actually benefit from it at a technical level. They aren't really decentralized at all and could just as easily be a database, except for the regulatory thing

extraextra 11 hours ago

What's the point of even stealing the stablecoins? They're controlled by private companies that can easily freeze them

Am I missing something here? Seems like a waste of time

wmf 10 hours ago

In this case it looks like the attacker managed to swap some stablecoins into ETH before they were frozen.

no-name-here 4 hours ago

> waste of time

It seems like it took some number of minutes and scored billions, and at that point it was a matter of whether/how much they could trade out before it was locked. I don’t know how many minutes or hours it took to lock? If they managed to trade 1% before blocking, that would be an extra tens of millions. If 10% that would be hundreds of millions, etc.

extraextra an hour ago

Fair enough

Rodmine 3 hours ago

It reveals what they are to the public. It's fake crypto with all the downsides of crypto but none of the upsides.

globuous an hour ago

Apparently [1], he managed to put them as collateral on a lending platform. That allowed him to borrow ETH. The way it works is that if you don't pay back the loaned ETH, the lenders can take the collateral. Except that here the collateral is itself frozen. So apparently, the ETH as now safe in the hacker's wallet and the lenders just lost a bunch of money.

I wonder why not swap them? And had he, would it have bricked the swap pool?

[1] https://x.com/czesmaill/status/2115988477905080716

extraextra 42 minutes ago

That's smart

Ntrails 41 minutes ago

I'm not clear whether the stablecoin providers will then be "creating" new coin to make binance whole - without which you've still fucked binance

jwpapi 11 hours ago

Freezing crypto is so disgusting to me I don’t know…

Like the whole point of crypto to me I money without central governance.

I never liked stable coins or the concept of it and it’s mainly a huge fraud, so freezing just adds on top.

hoppp 11 hours ago

Stablecoins are fiat on-chain and they are legal so they need to have the freezing mechanism in the smart contract otherwise they could go to jail.

So crypto + legal company means not really following bitcoin ideology anymore

paulpauper 10 hours ago

governments, banks freeze currency all the time

maccam912 7 hours ago

At least a motivated person could audit the smart contracts on this. It isn't like it's a surprise when it turns out it's possible to freeze these coins.

casualscience 5 hours ago

That's not the whole point at all. And there are truly wild west cryptos, but most people want some trustworthy regulatory body, whether it's a government or not, backstopping their funds when they get large enough.

For instance to unwind a 5 billion dollar robbery

dools 5 hours ago

That’s why crypto is so dumb

afroboy 4 hours ago

But without crypto we couldn't helped people in Gaza during the genocide. It has it benefits just not for the privileged white guy.

dools 3 hours ago

I’m pretty sure crypto benefits privileged white guys quite a bit. I can think of one in particular…

Morromist 4 hours ago

"people want some trustworthy regulatory body"

Have you talked to Crypto-enthusiasts before? They very much don't want that.

nkrisc 2 hours ago

I’m pretty sure cryptocurrency enthusiasts are a small minority of cryptocurrency users.

cedilla 28 minutes ago

But if I am the victim of a $5k or $50k robbery, I'm out of luck. Yay.

ajross 5 hours ago

> Freezing crypto is so disgusting to me I don’t know…

The feature literally appears to have just saved over two billion USD from being stolen! I mean, fine, "disgusting" is subjective. But the need for the feature is real and quantifiable (and very large) and it did what it advertised.

thereforegrin 4 hours ago

it cuts both ways - it's fine when 2B of heist money gets frozen, but much less "fine" when your paycheck gets frozen because you've attended a political rally the ruling party/class does not like.

tjwebbnorfolk 4 hours ago

this isn't crypto, it's US dollars with a techno-wizard sheen on the top for no reason

DonHopkins 4 hours ago

It's so sad that it's inconvenient for you to commit fraud and tax evasion and pyramid schemes and rug pulls.

My heart goes out to you, along with these two definitely not Nazi salutes.

codedokode 10 hours ago

Probably not everyone knows, but USDT has a "black list", and admins can prevent any address holding USDT from spending. The black list is implemented in USDT contract.

So USDT is not truly decentralized and your money can be frozen for any reason or no reason at all.

smoovb 7 hours ago

The U.S. government is the largest beneficiary of this service. More than $2.1 billion in USDT connected to or requested by U.S. authorities out of over $4.4 billion in total illicit USDT freezes globally.

varenc 7 hours ago

It's tethered to the USD. It seems expected that the government in charge of USD is doing the most blacklisting.

FabHK 5 hours ago

Arguably any fiat-collateralised stablecoin is ipso facto centralised and trusted (someone needs to 1) issue the coins only against fiat collateral and then 2) hold onto that collateral reliably and 3) return it upon presentation of the coin), and at step 3 they can always say "no, we won't give it to you".

eru 3 hours ago

Your point has nothing to do with fiat.

It applies equally well to a fiduciary coin with a promise that 1 gcoin = 1g of gold or whatever.

FabHK 2 hours ago

Indeed.

However, it does not necessarily apply to algorithmic stable coins (Terra) or crypto-backed overcollateralised coins (DAI). That's why I said "fiat-backed".

rustyhancock 2 hours ago

Why couldn't a privacy focus coined, like Monero, be a stablecoin?

You don't need to see where the coins are and move to promise $1 of going for every coin.

cherryteastain an hour ago

Probably the founders/employees of the company issuing/redeeming the token would be arrested very quickly. Tornado Cash people got arrested for much less.

designerarvid 3 hours ago

Turns out that there are quite good reasons to have a centralised currency after all. Who would’ve known.

nicman23 3 hours ago

yeah the issue is if you built it they will co opt it

intended 3 hours ago

All systems can be bent, broken, or subverted.

nicman23 3 hours ago

not bitcoin-core in the past 14 years of being a public network

eru 3 hours ago

Huh? You can trace bitcoins forever, and people would probably pay extra for some vanity bitcoins; and probably pay less or nothing for some bitcoins that are legally questionable.

eimrine 2 hours ago

Your answer does not answer anything. The discussion is about whether or not to have the trusted third-party. Pro-ttp said that ttp protects from criminals. Anti-ttp said that ttp can make your own money dissappear because ttp is bending the rules. You said nonsence, your examples are not showing any rules or contracts about digital property which are being bent. Why any bitcoin criticism from anyone is always so weak?

ZiiS 2 hours ago

All bitcoins are legally questionable; but no: ones that can be traced to contract killings not just stealing do not trade at a discount.

intended 2 hours ago

The topic is bitcoin being hacked and stolen. I do not think this outcome was the intended outcome for users?

Perhaps I am missing your argument.

nicman23 an hour ago

no. binance was hacked, again, again. the wallet was not. else they would have stolen only from the btc wallet.

not your keys not your bitcoin

rwmj an hour ago

Not practical for ordinary people. No regular person is holding their own wallet, and even the technically sophisticated who do get their keys stolen or lose them to faulty backups or technical snafus.

somenameforme an hour ago

Calling/implying that it's technically sophisticated is not really reasonable. Having a BTC (or other currency) wallet is utterly trivial, let alone from a technical standpoint, it's much easier than setting up an e.g. Coinbase account. The only issue, outside of choice of course, is people being ignorant of what needs to be done and I think that can largely be explained by the fact that centralized providers spend billions on marketing while decentralized wallets spend nothing on it.

wongarsu an hour ago

The intention of bitcoin was to have a digital medium with similar properties as cash: no need to trust anyone else, and you can exchange it with whoever you want. Cash can also be stolen if someone takes your wallet, leaving you no recourse except the law

Imho Bitcoins being stolen is not at all Bitcoin being "bent, broken, or subverted", it's just a natural consequence of the design goals. If an unrelated third party could block my bitcoins by accusing me of terrorism that would be subverting the system, and such things have not happened to bitcoin-core (but have happened in other parts of the bitcoin ecosystem)

GTP an hour ago

> Cash can also be stolen if someone takes your wallet, leaving you no recourse except the law

The issue that is often raised with Bitcoins and other cryptocurrencies is that not even the law can help you in case of theft. Now, it's true that the police wouldn't bother helping me recover a wallet with 100€ into it, but things change if someone steals millions or even billions like in this case.

GoblinSlayer 43 minutes ago

You steal billions, you just pay the police 100000000 to look away.

akimbostrawman 14 minutes ago

Btc has a similar blacklist with tainted coins because it's not fungible unlike actual decentralized cryptocurrency like monero xmr

otabdeveloper4 3 hours ago

Turns out the reason crypto was invented isn't "decentralization" at all, it was nerds feeling left out and wanting their own financial instrument grift.

raverbashing 3 hours ago

You mean the smart nerds

For the less economical-savvy ones it was like Beanie Babies or Tulips (with predictable consequences)

runj__ 3 hours ago

I still buy tulips, just not at boom market prices.

The predictable outcome is that the deers get to them, but I got to see a few go into full bloom last year and it was wonderful.

diego_sandoval 3 hours ago

Yes, but there are more good reasons to have it be decentralized.

Cthulhu_ 2 hours ago

Well sure, but the average consumer needs and/or wants some protections, safeguards and insurances. If my bank gets hacked or even if I get skimmed it's considered their fault and I'll get my money back.

GoblinSlayer 2 hours ago

>I'll get my money back.

If the police retrieves your money from the thief?

EliRivers an hour ago

While I can't speak for other places, in the UK, if you haven't been careless and report quickly enough, your refund is not dependent on anyone being caught.

necovek 31 minutes ago

That's if it was stolen from you directly.

If it's stolen from a bank, it's their obligation to recuperate you.

FWIW, most countries have a type of insurance if a legally operating bank goes under, at least some of your savings are protected (eg. in Serbia that's up to 50kEUR).

MASNeo 3 hours ago

A shame that they can and do so here but happily facilitate transfers or scam victims, human trafficking and sexual abuse including of minors.

eru 3 hours ago

Anyone can refuse any bitcoin, too. But that's not implemented in the contract, just by how much real money people want to give you for bitcoin.

reenorap 3 hours ago

Decentralized is a great concept but it’s 99.9% rug pulls and you can’t get any safety unless you centralize. As an investor there is no way to protect yourself because the rug pulls are several orders of magnitude more sophisticated than most people’s understanding.

dmantis 32 minutes ago

> As an investor there is no way to protect yourself

Why? BTC is pretty stable longterm. Anything that has an owner or legal entity is not decentralized, subject to either rug pull or censorship and shouldn't be touched, sounds very easy.

Everything that promises you any return is a scam in crypto, simple as that.

londons_explore 2 hours ago

So when tether is blacklisted, is it reissued?

rich_sasha 2 hours ago

So USDT is a great amazing decentralized censorship-free drop in replacement to USD except:

- much more awkward to use

- more liable to hacks

- deposits are not insured

- fewer legal protections

- doesn’t pay interest (or not easily anyway)

- and as I find out, bannable by a central institution with lower legal oversight than the Fed

I’ll keep a mental note of this.

markasoftware 2 hours ago

Tether's entire business model, providing an almost-unregulated USD cryptocurrency, relies on them not arbitrarily banning people. They don't do it frequently or without thought. You're far less likely to get banned from USDT than just about any non-cryptocurrency financial institution.

eecc 2 hours ago

Yeah, until Trump (or whoever is president at the time) tells them to.

What will they do when the alternative is broken bones?

j16sdiz an hour ago

You can say the same for many other industries:

> almost-unregulated except when the authority say no.

Good4boothee 17 minutes ago

> Tether's entire business model, providing an almost-unregulated USD cryptocurrency, relies on them not arbitrarily banning people

No, their entire business model relies on bank/CC providers don't ban them. Somehow, they treat all crypto related transactions as iffy but USDT, bought to buy crypto, got under much less scrutiny. The entire problem their solver was that new users couldn't move cash to exchanges fast enough to join bull runs.

dgellow 2 hours ago

Tether isn’t decentralized or censorship free in any way

altmanaltman 2 hours ago

USDT is created by a super shady company and is not at all decentralized or censorship-free. You could have made the argument for Bitcoin (and still can to a certain level) but most cryptos that propped up after that or stablecoins do not follow the hacker philosophy and more the banker one. Ironic that the whole crypto movement got co-opted by the likes of JPM which it seeked to replace.

qlte 33 minutes ago

Recently I tried to donate to a project using their preferred crypto payment processor flow, which purported to support "Coinbase Wallet" integration. So thinking that was just like, Coinbase, I said "sure why not" thinking it'd save me the effort of copy/pasting long strings back and forth.

Turns out, Coinbase "Wallet" is a completely separate thing from Coinbase, and long story short, ultimately ended up accidentally converting some spare ETH I transfered into some kind of garbage Binance "wrapped" Litecoin. Which had zero indication/warnings in the app other than a like 4 pixel Binance logo superimposed on the 16 pixel Litecoin logo that it wasn't the real thing.

Once I gave up on this Wallet experiment I ended up needing Gemini to walk me through all the Binance "gas" nonsense to finally manage to swap into a real coin I could transfer out (like 80% of what I started with after subtracting gas fees and miscellaneous leftover change I was stuck with). And while transferring I had to avoid like a dozen alternative networks consisting of seemingly random strings and a scary red banner saying "yo don't fuck this up".

My first red flag should have been that Coinbase Wallet's Play Store name literally advertised betting on prediction apps. Second red flag was while looking for "Litecoin" in the list of coins, there were literally about 5000 different spam/meme coins with dozens of near identical clones that were all name squatting on top of each other.

As someone who came of age in the Crypto 1.0 "Bitcoin is for buying drugs" era the entire exercise was utterly baffling and somehow significantly less usable than crypto was a decade ago for actual payments. I guess for a young person looking to illegally gamble their paychecks at some unlicensed offshore prediction market it provides some utility I'm missing but man, the experience just made the post-Web 3.0 crypto scene look .... grim.

turbobutton 44 minutes ago

Suddenly, physical Gold in a safe at home looks fairly decentralized and censorship-proof

akimbostrawman 17 minutes ago

Until you need to move or share it. That's why monero XMR is the only serious fungible and decentralized cryptocurrency

dmantis 35 minutes ago

> great amazing decentralized censorship-free drop in replacement

It's not and never supposed to be and everybody who uses it in any significant amount knows that. Don't mistake a cryptotoken with a cryptocurrency.

yulaow 6 minutes ago

I love monero but then you have the problem that very few exchanges support it and if you need to convert big amounts of it in common currency it gets quite hard to do compared to eth/btc

jmyeet 2 hours ago

The financial system has evolved over 5000+ years and is like an endless series of Chesterton's Fences at this point. Here we find another: the ability for a regulator or a bank to freeze assets is once again proven to be a feature not a bug.

Managing a wallet where there is no recourse if your wallet is compromised is simply too difficult when even crypto exchanges get hacked and otherwise sophisticated people get compromised when taking cautious measures (eg [1]).

Crypto really is and always was a race to the rug pull.

[1]: https://www.straitstimes.com/singapore/about-3-5-million-los...

Cthulhu_ 2 hours ago

Yeah but what if I hacked that money fair and square? Why should anyone have the right to block my hard earned not-cash?

ACCount39 2 hours ago

You know what isn't a Chesterton's fence? Payment processors being able to dictate what I can or can't spend my money on.

This by itself is a reason to push for more crypto acceptance, in my eyes.

shermantanktop an hour ago

I must live a very vanilla, sheltered life because I’ve never bought anything and wondered if a payment processor would object to it.

ACCount39 20 minutes ago

The payment processors don't object to you. They usually object to the store or the platform you're getting things from.

It's invisible, insidious censorship. They don't hit your hands with a ruler and say "stop, no buying that, bad". They make it so that what they don't like doesn't get to be on the store shelves in the first place. Hard to buy what isn't being sold, isn't it?

As for why they do it - it's unclear, but there's speculation that payment processor leadership might be in part ideologically captured by the usual "think of the children" moralizers and puritans. The same types that used to spurn moral panics, rally against D&D and later GTA, and are the first in line to propose sacrificing freedoms for imaginary safety - now allowed to wield covert influence over most of the payments that happen online.

GoblinSlayer an hour ago

Frozen assets are still a wallet with no recourse.

tarruda 39 minutes ago

If they baked in a function to freeze USDT, why not also add a function revert a transaction flagged as part of a hack?

getcrunk 8 hours ago

Interesting I didn’t know you can block/cancel transactions. Does this have to happen before the new block is minted. or it can happen after, that’s what I’m inclined to think just based off of the word block

cosmojg 8 hours ago

Centralized stablecoins like USDT and USDC aren't layer-one cryptocurrencies like Bitcoin or Ethereum. They're more like applications running on top of other blockchains, usually as smart contracts, and their issuers hold admin keys which can freeze, mint, burn, and otherwise redistribute funds at will. As far as timing goes, stablecoin issuers can't actually cancel or reverse a transaction that's already in a block that's been mined, but they can freeze the receiving address afterward and burn the funds there, then reissue them elsewhere, which has much the same effect.

Frieren 4 hours ago

That sounds interesting. How is that different from a bank? What are the advantages and disadvantages compared with a traditional bank?

gucci-on-fleek 4 hours ago

If traditional banking is available to you, then I don't think that there are any significant advantages. But lots of people—notably those in countries with unstable currencies [0]—don't have access to high-quality banking, so for them, stablecoins can be an acceptable substitute in some cases. It's probably not a great idea to hold stablecoins long-term (there's always a risk of the sponsoring company going under, and unlike bonds they don't pay interest), but it should be fairly safe to use them for transfers, since the transfers are quick enough that there are very low odds of the company becoming insolvent while the transfer is underway.

[0]: https://news.ycombinator.com/item?id=50012907

otabdeveloper4 3 hours ago

It's much easier to ban or regulate cryptocurrencies than it is paper cash and brick-and-mortar banks.

grey-area 3 hours ago

It’s completely unregulated and they can print infinite money.

origini 2 hours ago

Its a weird loophole or so.

You take 1 $ from someone and give them a token, now you have money the other not. In theory you need to make sure you keep the 1$ but you want to pay people and you are greedy so you invest it and suddenly everyone is broke.

giwook 8 hours ago

So they got “only” ~$3 billion

guax 4 hours ago

Poor fellas, barely enough for rent

reddalo 3 hours ago

It's one banana, what could it cost? $10?

ShinyLeftPad 2 hours ago

Less than half is frozen then?

harrouet 35 minutes ago

Wait, it is decentralized but can be frozen ?

No. You just can't use these platforms. But a knowledgeable hacker will be able to add a transaction tot he blockchain.

madradavid 3 hours ago

Looks like a DevOps guy is going to take the blame for this: "Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions." https://x.com/binance/status/2115993361517891592

echoangle 3 hours ago

If a compromised laptop was the entry point and that allowed someone to steal 6 billion dollars, it’s not really the engineers fault, right?

Ekaros 2 hours ago

Well it is engineers fault. But not that engineers. Some engineer designed a system without extreme oversight that should be involved in the process.

ShinyLeftPad 2 hours ago

If you follow that trail far enough it's whoever designed cryptocurrency, right? Because banks can and do reverse transactions as last resort.

globular-toast an hour ago

No, because this is explicitly the design of Bitcoin. If you give me a foo machine but it makes a bar, that's your fault. If you give me a foo machine and the foo hurts me, that's my fault.

piker an hour ago

lol I guess you just settled a hundred years of product liability jurisprudence

globular-toast an hour ago

Bitcoin isn't a product.

matt3210 2 hours ago

This kind of low bar reminds me of FTX

vasco 2 hours ago

If you download a typosquatted package because you don't check what you type or your AI assistant got fooled I'd consider it my fault in such a case.

anonymous908213 2 hours ago

If the engineer, without being hacked, could take 5 billion dollars from your company and flee the country to go buy an extradition-free island, you have already gravely fucked up as an enterprise. The only way this happens is if your system is designed to allow this to happen.

nullc 17 minutes ago

This is how virtually all "crypto" exchanges work -- especially the closer you get to "shitcoin casino". Proper role and system isolation is a challenge if you support just one cryptocurrency. It would be incredibly hard for dozens, assuming service supporting dozens bothered.

I agree it's a grave fuckup but its a common one. You should just assume that when you deposit coins somewhere there are dozens of people who could just walk off with everything on their own. It's remarkable that it doesn't happen more often.

Cthulhu_ 2 hours ago

Nope, that engineer had far too much access. I'm confident this is the case in pretty much all organizations to some degree, but a lot of engineers are also the only ones that can deny themselves the access so in a roundabout way it's their fault anyway.

But a lot (generalizing here) don't like giving up access "in case they need it". I haven't worked backend in ages, but years ago there was one developer that went to the ops guys and said "can I just ssh to production I need to check some env vars to debug my software" (or something to that degree). Ops team was good and it was a hard no - "just add some logging, you can deploy a new release quickly enough".

londons_explore an hour ago

> access "in case they need it"

A good solution to this is to have a "break glass" system. Ie. access permissions get granted to the developer directly in an emergency by going through a set of steps available beforehand. All requests by that developer are then allowed, limited to 10 kilobytes of results per minute and logged.

For example, imagine you run a bank, and a rare code bug means that at exactly midnight on new years eve all bank balances have $1B added to them.

Your oncall takes down the production servers to to reduce losses and uses the break glass system, by getting approval from n other developers, allowing them direct database access. They use that access to count(accounts) with a balance around $1B or more, see it is everyone, and subtract $1B from them all, before bringing production back up with an older software release. Downtime = 2 hours.

In the morning, all the developers actions are reviewed.

If the developer turned evil and trying to dump the database, the n approvers and 10 kilobytes per minute would reduce data loss. But the break glass system still lets the developer make fairly major emergency fixes to reduce losses or downtime.

xnorswap an hour ago

If nothing else it shows a complete disregard for insider threat.

pjmorris 25 minutes ago

"A loss of X dollars is always the responsibility of an executive whose financial responsibility exceeds X dollars." - Weinberg’s 'First Principle of Financial Management' and 'Second Rule of Failure Prevention’ - 'First-Order Measurement', Quality Software Management, Volume 2, Gerald Weinberg

blauditore 12 minutes ago

Not only. I'd say the fact that something was stolen might be the engineers fault (depending on how exactly the laptop was compromised). But the amount that could be stolen like that is just ludicrous.

thecopy 3 hours ago

I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.

sally_glance 2 hours ago

How would that help when your workstation is compromised? They can just steal your authentication the moment you log in through the password manager

thecopy 2 hours ago

It does help in that the secrets are not in plain-text, readable for any script you run. With 1Password, a process asks for the password and it gets transferred not through the filesystem but through IPC. 1Password shows a dialog: "Do you want iTerm to get your SSH key ABC123?"

In my thinking, this is more secure than plaintext in filesystem

gregoriol 12 minutes ago

If your system is compromised, it doesn't matter what you are using: the attacker will get the password for whatever secure thing you store your secrets in.

speedgoose 2 hours ago

Isn’t the password manager a prime target too?

littlecranky67 2 hours ago

as for ssh keys, you can generate your keypair in secure enclave and reuiqre touchId for every new ssh session. The private key never leaves the secure enclave.

Cthulhu_ 2 hours ago

Probably the better option instead of relying on a password manager.

littlecranky67 2 hours ago

It is a tradeoff. When using secure enclave, you need a second backup keypair in cold storage that needs to be secured.

febusravenga 2 hours ago

you know most password managers have open sockets, or other channels to other local processes to interact with and allow stealing entries?

you know most tools like gcloud, bitwarden, etc store auth keys just in dotfiles too?

Local compromise is KO now, and we can't do shit on platforms like MacOs didn't research Linux recently

dewey 2 hours ago

These days I’m getting so many 1Password prompts for agents pulling env variables out of it and with very little context of what is being accessed by who (The dialog 1Password shows is pretty bad) that it would be very easy for something to slip in there.

caaqil 2 hours ago

> I’m getting so many 1Password prompts for agents pulling env variables out of it and with very little context of what is being accessed by who

This is a one-sentence horror story. I almost can't believe someone would let this happen, unless the 1Password account is not important (highly unlikely).

dewey 2 hours ago

I know it sounds bad, but it’s the reality for most people, just like permission prompts at every corner and after each macOS / app update (“Your screenshot app is watching your screen”, no shit, that’s why I installed it).

jwr an hour ago

I have been using Yubikeys for years, according to this guide: https://github.com/drduh/yubikey-guide

The nice thing is that using the private key requires physical touch. That means that AI itself (or a remote attacker, for that matter) can't do things unless I confirm.

throwawaysoxjje 2 hours ago

The fact a single devops guy has the access to do this is the actual issue

yfontana an hour ago

They claim the attack wasn't just "compromised laptop ==> drain wallets" but had more steps in-between, with the attackers using image registries as an entry point into their systems.

ChoosesBarbecue 12 hours ago

Molly White (she runs web3isgoinggreat) seems to think this is real [0]

[0]: https://bsky.app/profile/molly.wiki/post/3mz27m5slcc2o

donbox 11 hours ago

This is real.

ChoosesBarbecue 10 hours ago

Some further writing from her: https://www.citationneeded.news/binance-theft/

atdt 8 hours ago

Her reporting is superb and you should follow her: https://www.citationneeded.news/.

internet_points an hour ago

Read a few, added to my rss reader :) that's the same author as https://www.web3isgoinggreat.com/ which is feels a bit more snarky but very fun.

perlgeek 2 hours ago

I love how @cz_binance tweeted "user funds are safe!" in that thread. Wasn't that a bit too early? Are they?

impizulu 12 minutes ago

Coffeezilla (on 2nd channel voidzilla) had an interesting take on it: "I haven't seen a lot of people talking about the fact that centralized assets were kind of the hero in this story ironically... that's actually the reason why losses weren't so bad in this case". https://www.youtube.com/watch?v=_HaySrzDyWU

Is crypto like USDT really decentralized if they can freeze assets... I guess it's in some middle ground between banks and true decentralization?

KolmogorovComp 7 minutes ago

How is that a middle ground? It’s entirely centralized.

petermcneeley 4 hours ago

If your bitcoin is on someone else's computer its not your bitcoin.

mrtksn 3 hours ago

The problem with Bitcoin being on your computer is that its useless there. No one in the gambling world cares about on-chain exchanges either.

Besides, when its in your computer they send you a modified computer with an esim and steal it just like that: https://news.ycombinator.com/item?id=50054092

The whole thing is a shady casino where the code is the law and who knows maybe the Binance guy actually made a deal to send $5B of crypto for a really cool NFT when drunk and now pretends that its a hack? We will never know, the code is the law and the law says that someone else has it now.

In crypto, you should gamble fast lose or win and get out. Pay/receive the ransom and get out. Pay/receive your drug/guns/espionage money and get out. You should never keep crypto if you are not OK with losing it.

NL807 3 hours ago

>The problem with Bitcoin being on your computer is that its useless there.

If you want to use the BC on your computer, you can transfer it to wherever you want.

mrtksn 3 hours ago

Like Binance you mean? It's slow, expensive and they get you at the place where you transfer it. You transfer it because its useless in your computer.

sampullman 32 minutes ago

Binance, and most other exchanges, don't charge platform deposit fees. USDC/T is not expensive to transfer.

mrtksn 29 minutes ago

crypto has its own chain based fees that are transferred to the miners that when crypto is actually used on chain get much higher than typical banking fees.

itake 3 hours ago

For many people, email/phone support, password recovery, two factor authentication, etc is it much safer option to self-managing and run the risk of your hardware token or your house burning down, or getting mugged.

stevage 3 hours ago

It seems better when it's on an exchange like Binance, because they cover you when it gets stolen.

littlecranky67 2 hours ago

we will see if they do.

ur-whale an hour ago

> It seems better when it's on an exchange like Binance, because they cover you when it gets stolen.

Assuming they actually can cover the losses financially.

And if they don't good luck suing them.

littlecranky67 2 hours ago

bitcoins are always on someone elses computer (literally everyones in the bitcoin network). You hold the private key on your computer. Ideally you don't hold it there, but in secure enclave like chip or an airgapped device.

justauserid 6 minutes ago

For most people, who are end users, it's really not that simple and no you are not wrong.

This comment is a tangent to the article and my experience of trying to use crypto for the first time few weeks ago after watching it from pretty much the day 0. Maybe day 2 or 3 as when bitcoin was launched I was few months shy of leaving college and I just thought it was just an "Internet thing" like many of us did. And I am aware that evne among decentralsied coins BTC might not have been the first, but let's just say it was.

So a few weeks ago, I wanted to make some payment to some sites. There were/are 4-5; one of them is openrouter and similar, but there's one that helps with Linux ISOs. I definitely didn't want to leave my credit card number on those sites (not even on openrotuer). I am wary of leaving my credit card numbers to sites outside my home country India. It's not about better or worse security, it's just about a sense of comfort, or maybe even habit.

There was no expectation or plan for anonymity, privacy whatsoever. Though I would not have minded a bit of privacy on those immediate businesses/sites – as in if someone hacked their systems/DBs they'd find my throwaway email and crypto address (maybe) but if some legal entity investigated they could easily trace it back to my via exchanges and I was fine with that. Yes, I could explore temporary cards and everything but I still had to manage things more than I wanted to.

I created accounts on three crypto exchanges (one was Binance, two from India). I needed those to be complaint to my country's fin/tax laws and I dind't want to deal with anything even remotely p2p (oh, it's quite active here and rarely ends well for end or occasional users like me).

The crowded UX, dark patterns, and absolutely no easy way to figure out how can I just:

- buy some coins

- transfer to my personal wallet (this is deliberately not made straightforward and on some exchanges downright impossible – sometimes hiding it behind some sort of eligibility to do so and even that is hidden further behind some sort of automatic and random eligibility check process)

- get done with it

were just too much. Add to it that I learnt I had to buy some other type of coin(s) just to pay for the gas (chain/network exepenses?). Then suddenly there were additional KYC requirements from payment related parties and then a request for a recorded video of myself.

At that point I was done and had all three of my KYC'ed account closed.

I have always felt crypto coins were a bit weird (as anything unusual feels) but I had never tried it and had assumed as weird as those sounded, those would be very easy to use. How wrong I was. It's a mess and not only because at the end of the day it had to be complaint to real world finance regulations which is what it was supposed to replace in the first place - or was part of the popular appeal at least. It's just a complicated, often costly, and quite often slow mess.

Luckily Apple Pay launched in my country around that time and I was able to use that instead (otherwise I was going to dust off my ancient PayPal a/c) and Apple Pay is an underimplimented and under-supported thing in its own right but that's another story.

callamdelaney 8 hours ago

For context, that’s about 10 months of fees for Binance, depending on how much of the volume they trade are discounted and considering current average volumes.

Calvin02 6 hours ago

I’m not at all familiar with the crypto space.

Are you suggesting that this is not a big deal? $6B feels like a lot but sounds like in the scheme of things it isn’t as a fraction of trading volume. Is that right?

Eji1700 5 hours ago

Don’t think they’re suggesting it’s not a big deal.

Any company losing 10 months of revenue overnight is a BIG fucking deal. Doubly so in a speculative asset that you’re holding for others “securely”. The financial hit has only just begun for them.

That said yes the trading volume has huge.

teacpde 2 hours ago

It is a big deal, but not big enough for them to go out of business

baobabKoodaa 6 hours ago

So they actually lost a few years' worth of profit on this hack? Could be worse, but not insignificant by any means.

4ndrewl 2 hours ago

It's 10 months of revenue, but 10 years of reputation.

1a527dd5 12 hours ago

Related?

https://ohey.ca/research/polymarket-debugbear-wallet-drainer...

https://x.com/DebugBear/status/2115866496643535293

hoppp 12 hours ago

I don't think so. Both happened the same time but unrelated. Just a good haul for hackers end of the year.

reddalo 12 hours ago

Maybe: https://www.binance.com/en/square/post/10-29-2026-suspected-...

As of now, DebugBear webite has been taken offline: https://www.debugbear.com/

And they just posted on Twitter: https://x.com/DebugBear/status/2115930681398239278

archon810 6 hours ago

From what I've read, DebugBear is related to the Polymarket hack, not Binance.

staticBr 3 hours ago

Who loads foreign JS from a CDN into a site handling finances? WTF, the crypto world always manage to make me speechless.

rollulus 3 hours ago

If there were only a way to pin external deps loaded from html by sha…

jamesblonde 5 hours ago

This is the beginning of a flight to perceived quality in all things digital and monetary. Fear of losing your money is among the most potent basal human instincts.

coffeebeqn 3 hours ago

Maybe I need to start collecting gold bullion again. And dig it in the backyard

yard2010 an hour ago

The problem is, just like with Bitcoin, when you need to use it someone could steal it

motionlessveloc an hour ago

Binance is the world's largest cryptocurrency exchange. This is the crypto equivalent of JP Morgan Chase getting hacked.

layerv-ai-qurl 12 hours ago

This is a really insane hack in comparison to the other ones we've seen. Genuinely Binance was so big that this is a real big wtf moment for crypto. If they can get hacked then what about all the other exchanges?!

wolvoleo 12 hours ago

So was Mt Gox. No lessons were learned. No lessons will be learned this time.

janalsncm 11 hours ago

People got out of crypto after the Mt Gox thing. The ones who stayed accepted the risk.

There is selection bias in play now. The remaining people are naturally more risk tolerant. So I agree this second time around, no lessons will be learned.

Waterluvian 11 hours ago

By definition maybe they’re more risk tolerant. But I’m not sure they consciously identify as that.

wmf 10 hours ago

Most people in crypto are noobs, not hardened veterans of previous hacks.

Eji1700 6 hours ago

The vast majority of crypto being held now was purchased by people who had never even heard of Mt Gox.

4ggr0 4 hours ago

the crypto consumer base is veeeery different than durint Mt. Gox.

during Mt. Gox it felt like nerds and insiders, nowadays boomer dads are into crypto.

my point being that i don't agree with "the remaining people are naturally more risk tolerant", as there are way more 'new' people.

hangrybear666 11 hours ago

Well I've learnt my lesson after having lost 3 bitcoins as a student on Mt gox I finished writing my thesis on blockchain technology and then never touched crypto again.

yreg 11 hours ago

What's the supposed lesson? To close the shop?

driverdan 9 hours ago

Never use someone else's wallet to hold your money.

peddling-brink 5 hours ago

Not your keys, not your crypto. Use a nice safe hardware wallet. Just check for extra SIM cards first, and audit the key generator.

throooooo 4 hours ago

It's insane that one has to go through this to be somewhat safe.

jgilias 4 hours ago

Roll the dice

TheDong 3 hours ago

It's almost impossible to verify the code on the hardware wallet really matches the code they released and that the hardware has not been tampered with.

Maybe the sim card is on a timer to broadcast your keys after a year, so you just can't detect cellular signal usage now.

To securely own bitcoin you have to first create a new chip fabrication plant to then make your own hardware wallet.

yreg 4 hours ago

But that lesson does not apply here.

clippyplz 10 hours ago

The difference is that Bittance loses only a few percent of their reserves and the dance continues. Gdox did ~70% of the daily volume for crypto and wrecked the entire ecosystem when they got 100% pwned. Maybe they've learned something!

pigeons 5 hours ago

Its more than their total reserve fund. Its a fraction of the money they hold for customers.

AlienRobot 10 hours ago

To put things in perspective, I used to dunk on crypto because of how dysfunctional and how people kept losing money in scams, hacks, or even by accident.

I no longer dunk on crypto.

Not because crypto got better, but because the joke got old. I got tired of dunking on it.

rich_sasha 5 hours ago

How do you prevent it though? My understanding is that it’s genuinely hard in crypto. Any automated access control must be baked into smart contracts, which are very limited in terms of the logic they can implement (in practice - in theory Solidity is Turing complete Id imagine).

A bank API can be 10-100s+ kloc if they need that to implement access controls.

Dagonfly 2 hours ago

The lession learned is: Tether now exists as a casino chip central bank. They can just freeze and print more and provide a backstop to the major CEXs.

Of course, Tether runs completely counter to any of the idealistic claims about crypto.

motionlessveloc an hour ago

Mt Gox was widely reckoned to be a clown show long before they got hacked (it was originally a Magic the Gathering trading site for chrissake).

Binance's reputation is hardly impeccable, but by crypto standards they're kinda sorta the adults in the room. Then again, so was FTX.

coffeebeqn 3 hours ago

I’d be worried about my crypto if I had any accessible online right now. AI based hackers must be looking for juicy targets as we speak and what’s better than crypto for stealing ? So many exchanges and wallets and shitcoins that could fall to some brute force agent swarms

darkwi11ow 12 hours ago

The hack is publicized for at least a hour, but from reporting I saw they still continue to drain funds as for now. I wonder why large CEX do not have any safety measures for this kind of hacks, they could withdraw everything to newly generated wallets and minimize damage that way. It is certainly not the first time CEX wallets get hacked.

drum55 12 hours ago

You don’t even have to do that, have deposits go to offline keys directly, that way there’s only ever cold > hot wallet movement and a big deposit can’t cause your hot wallet to be too risky.

darkwi11ow 12 hours ago

The point of cold wallet is to minimize movements, if there is high frequency of funds moved from a wallet then it is likely can not be called cold any more. Plus CEX in any case still needs to have large buffer of funds on some wallet to support day trading.

nostrademons 12 hours ago

You can move money into a crypto wallet without that wallet needing to do anything, or being online at all, or even having a private key that physically exists anywhere in the universe. It's just a public/private keypair; send it to the public key of a private key that's offline and it still exists on the blockchain, you just can't do anything until the matching private key comes online.

The point of a cold wallet is to keep the private key physically offline. That way you know it cannot be stolen by electronic means, because the physical device containing the key needed to authorize transactions is locked up and not powered on. Then you only power it on during very specific, audited times and conditions when it's needed to fund the hot wallet, which does all the actual automated trading and transfers.

GP's point is to have all incoming transactions to an exchange go to a cold wallet, which becomes a one-way sink, and then periodically the exchange powers up the cold wallet to sign transactions transferring assets to the hot wallet, which then funds all outgoing transactions. This isn't a bad architecture, though I'm not sure it'd save all that much here.

bombcar 11 hours ago

I was taking it that your bitcoin bank would have a SHTF lever that would immediately dump ALL your hot wallets into an offline cold-wallet.

Then when things calm down you go and find ... the keys under the birdbath are lost, and you're fucked in a different way.

But at least it might work.

idlewords 8 hours ago

Until the SHTF lever was hacked to divert all hot wallets into somebody else's cold wallet

AlienRobot 10 hours ago

The words you are using are very confusing.

You can't "move money into an offline crypto wallet that is not online at all."

If "money" i.e. crypto "currency" is in a crypto "wallet" then it is online. Anyone with the key and an Internet connection can transfer it at any time.

The wording is confusing because to someone who doesn't know how cryptocurrencies work it sounds like you can simply "take the crypto offline and put it into a physical device" as if it was a file. But that's not how it works. The physical key merely contains the actual key for the always-online wallet.

nostrademons 9 hours ago

It's true that anyone with the key and an Internet connection can move money out of a crypto wallet at any time, but the point of the cold wallet is that they don't get the key because it's kept on a computer (or other storage medium) that is physically offline and disconnected from the Internet. Same reason government intelligence agencies use a SCIF for any important information work: you keep the information physically disconnected from the Internet.

thereforegrin 4 hours ago

of course you can move crypto currency to an offline wallet and by offline I mean its private key is held in some physical form/device that is not connected to the network.

Only spending from that wallet needs online access to private key - depositing to it does not.

lxgr 11 hours ago

For a large CEX like Binance, $5B might just qualify as a hot wallet.

vessenes 12 hours ago

There are lots of measures in place at these exchanges - the rub is that cold storage is by design slow. To service withdrawal requests in a timely fashion a percent is kept “warm” or hot and used to process withdrawals. Usually this is where the leaks happen.

moralestapia 6 hours ago

Yeah, they should have a way to move all funds into a new wallet so guys like this one don't have to go one by one ...

dickfickling 12 hours ago

So, what's the most likely outcome here? Maybe Circle/Tether/etc freeze some or most of it, but say the hacker gets a billion dollars. Are they able to launder it thoroughly enough that they can eventually turn it into fiat and live like a king?

motionlessveloc 12 hours ago

You misspelled "turn it into more nuclear weapons in North Korea", where Kim Jong Un is already living like a king.

Eji1700 11 hours ago

Curious if this finally pops tether. I kinda doubt it, but to my very mild research on the subject I feel like binance was a big part of the equation. Of course so long as the market exists it'll need a stable, and it's got the inertia, so maybe it just won't matter.

gfh687564 11 hours ago

why would it pop tether? if anything, it makes tether more profitable, as they can collect the yield on the treasuries and not have to return the principal dollars which are frozen.

think of it this way - if someone steals your iphone, and you lock it, does apple pop? No, apple sells you another one. locked devices are good for apple because it causes more demand.

throwawaythekey 11 hours ago

Is that what happens here? Tether just pocket the difference?

jwpapi 11 hours ago

No lol

baobabKoodaa 6 hours ago

I would assume Binance is powerful enough to get Tether to issue new USDT and give it to Binance to replace the stolen-and-frozen USDT.

grey-area 10 hours ago

Because Tether is an obvious fraud linked to these other obviously fraudulent companies and predicated on trust in cryptocurrencies.

evdubs 9 hours ago

It's really hard to be an obvious fraud when you've been publishing attestations for years and now you have a "full independent audit" from KPMG for FY 2025, just like Circle/USDC.

https://tether.io/news/tether-completes-the-largest-inaugura...

grey-area 3 hours ago

Read up on the origins of tether, the people who founded it, deltic bank, banned for fraud in New York. In the beginning the reserves were a lie. I have no doubt they have some reserves now, but do they have $182 billiom USD, really?

CZ from Binance was also done for… fraud but miraculously pardoned by Donald Trump (I wonder why?!) and somehow still has enormous influence and inside knowledge in spite being banned from managing Binance. He talks as if he runs the company. Hmmm.

https://ag.ny.gov/press-release/2021/attorney-general-james-...

https://www.bbc.co.uk/news/articles/cly1qrl9l1qo

johanyc 4 hours ago

If the iPhone you bought can easily poof and be gone and locked somewhere, people will stop buying and using iphone and apple will pop

newswasboring 3 hours ago

Freezing bank accounts was and is possible. People don't seem to be still using them.

bootsmann 2 hours ago

People are but criminals are less likely to do so. Without the money laundering usecase crypto is in for another winter.

jcattle 2 hours ago

And you say that as if this is a... bad thing?

schleck8 10 hours ago

The hackers managed to swap 700 million USD of the stable coins that were frozen beforehand, supposedly. And that doesn't account for the non-stable coin crypto they stole. I think we are looking at 2.5 to 3.5 billion here, that also aligns with what CZ is hinting at (more than a billion).

zaptheimpaler 10 hours ago

Yeah, some criminal enterprise or state probably just made billions of dollars and will now use it against us for a long time. Crypto is practically designed for money laundering, particularly prediction markets.

wraptile 5 hours ago

Crypto is a hard lesson for early adopters who believed that humanity will get actual benefit when in reality it was completely hijacked by bad actors while people got relative nothing or worse. What an incredible disappointment of a project.

rf15 2 hours ago

Crypto is also a hard lesson for those who thought it could liberate if only everyone was using it: the amount of storage needed for ever-increasing record-keeping made it completely unrealistic to use individually, forcing you into the centralisation that they advertised you could escape from.

wraptile 2 hours ago

> the amount of storage needed for ever-increasing record-keeping made it completely unrealistic to use individually

That's not necessarily true as you can introduce extra layers to handle the storage. Why store A, B, C, D sending each other cents when you can aggregate it to once a week balance sheet changes. All of these are actually solvable tech issues even in 2012 computers.

The main failure of crypto is that it claimed to design away human corruption which in theory made a lot of sense but in practice it did the opposite - it accelerated human corruption without bad actors having to even break the rules. Just how Hitler rose to power through gaming the democratic processes crypto was gamed without anyone having to break 51% proof of work to rewrite the ledger.

The idea of running everything without oversight of humans and institutions is just fundamentally unsustainable - who are we running this system for if not for us, the people?

Eji1700 6 hours ago

It’s likely state sponsored and some nation(NK is a common one) just paid for the weapons budget of the next few years

agumonkey 4 hours ago

What would be the list? NK, then Russia, anybody else ?

viktorcode 3 hours ago

Iran

perlgeek 2 hours ago

NK, NK, NK.

Seriously, they have professionalized attacks on crypto infra to a degree that whenever you hear about a massive heist, you can be pretty sure it's North Korea.

traes 3 hours ago

TRM Labs[0] claims it is indeed NK

[0]: https://www.trmlabs.com/resources/blog/north-korea-steals-us...

tgtweak 12 hours ago

CZ saying it is confirmed, and that he expects accountholders to be made fully whole... I guess you can do that when 2.8BN is frozen by centralized stablecoins.

[1] https://x.com/CZ_BINANCE/STATUS/2115915423174853077

mcmcmc 10 hours ago

CZ the money laundering guy who bought a pardon from Trump right? He should still be in prison, still crazy Binance survived that whole scheme.

baobabKoodaa 5 hours ago

You see, he's no longer running Binance or participating in its operation in any capacity, per their deal with the Trump admin / Justice department. He's tweeting about this hack as a civilian, offering personal guarantees to Binance customers out of the goodness of his heart!

TZubiri 6 hours ago

>CZ saying it is confirmed, and that he expects accountholders to be made fully whole

Sure you can print USD to make it all magically go away

But it would be very convenient if there's some experimental token of which a majority was stolen, so that irreversible damage was caused. If the token is experimental it could have a low damage, but could demonstrate the irreversible nature of these types of attacks, returning fiat money doesn't waive the issue away.

There's also the fact of funding criminal networks for billions of dollars, which probably causes them to scale cyber or non cyber operations or otherwise gain power.

vldszn 12 hours ago

Polymarket also reported a security incident: https://news.ycombinator.com/item?id=50295883

nomilk 2 hours ago

Interestingly, this 18,270 BTC Binance theft is only "the largest crypto theft on record" when measured in USD. In terms of pure BTC, it's not even close to the 2011-14 Mt. Gox loss of ~850,000 BTC!

stingraycharles 2 hours ago

Yes but that’s irrelevant as Mt Gox would not have had 850k BTC in their wallet at current valuations.

nomilk an hour ago

Measuring the size of the heist in USD is convenient but arbitrary, as what was stolen was predominantly Stablecoins, BTC and ETH. So it makes more sense to measure the heist in Stablecoins, BTC and ETH. But that doesn't create as exciting a headline, as the BTC component was almost 50x smaller than the Mt. Gox heist!

bitlad 2 hours ago

The hack seems to be via engineers laptop.

This attack vector has become so common and funny.

In one scenario, i remember a company got hacked because an engineer downloaded a RAT package on company laptop during fake interview and asked him to keep it running for days as part of the interview process while they stole the data.

jameson 10 hours ago

I find it odd that people put "decentralized" currency into a centralized wallet

Sopel 8 hours ago

because crypto is just an excuse to speculate in an unregulated market

bdcravens 7 hours ago

Because no one cares about the nerdy stuff, they just want Lambos

razemio 4 hours ago

It is this time of the year again. I always write the same. HN is not regular people. For a high percentage, CEX wallets are the safer option. There are 1-10 topics of people who are not able to access their wallet anymore each day on r/bitcoin alone. There have been hardware wallets hacks on mass. On an exchange like kraken, coinbase, bitstamp or Binance there is a high chance you wont loose your money, even after a hack. You have apps that work out of the box to watch your investment. You can easily go back to fiat. Most of them now also support tax reporting.

K0IN 12 hours ago

wait, someone took the stealmybitcoin.com poc code to the next level!

https://news.ycombinator.com/item?id=50224916

jwpapi 11 hours ago

Damn sorry my ai slopped.

Need to get better in prompting

melenaboija 7 hours ago

How in the freakin world could $6B disappear into a regulated banking system without leaving a trail?

I guess at some point they'll have to cash out. Seems hard to spend $6B in vape shops.

joeguilmette 6 hours ago

North Korea

4ggr0 4 hours ago

tell me how NK woould steal 6B, or any money, with a virtual hack, from a bank. not by going in there guns blazing.

dewey 2 hours ago

Did you follow the news at all about crypto heists? This is very common and well known.

Reason077 2 hours ago

They were at this long before crypto. Look up "Bangladesh Bank robbery", for example, where NK hackers attempted to steal almost $1 billion from the Bangladesh central bank in 2016 (and were partially successful).

mcintyre1994 3 hours ago

From the BBC’s Lazarus Group reporting, they mostly seem to launder the money they steal through casinos in unregulated jurisdictions.

miohtama 10 hours ago

It would be hilarious if this was caused by man-in-the-middle or BGP/DNS compromise because of eMudhra.

Binance wallet 16 came online in 2021.

Why to wait 5 years to attack.

hollowturtle 10 hours ago

LLMs. This month has been very busy

pajamasam 4 hours ago

Maybe a stolen wallet?

thedangler 10 hours ago

Confused how this can’t just be tracked. Pretty hard to hide billions in bitcoin when most off-ramps need KYK?

What am I missing ?

knuppar 9 hours ago

tornado cash?

edit: I suppose it would be hard still. You can get anonymity inside wallets with Tornado Cash but then to turn that into actual money it will be very dependent on the country

yreg 2 hours ago

You cannot mix billions in TC

pants2 9 hours ago

They can track it just fine. It goes straight to North Korea.

austhrow743 9 hours ago

How do/did they get it out though?

itemize123 9 hours ago

business laundromats

8note 7 hours ago

russia? others who dont care all that much?

the laundering wouldnt be all that hard to take those buttcoins on in exchange for clean ones.

tjwebbnorfolk 4 hours ago

useful idiots in the US who buy crypto because "it's the future"

CorpoZoomie 9 hours ago

Swap to XMR on a DEX, then juggle between a few wallets and you've got pretty good obfuscation, but yeah like you said, the off-ramp (FIAT) requires KYC in 99% of cases, which is why BTC -> XMR -> BTC is a good idea, obviously you'd fragment this through a LOT of wallets, or just keep it in XMR. Either way, keeping this type of money in crypto is pretty much your only option, you just need to obfuscate REALLY well.

le-mark 11 hours ago

I’ve been waiting for this. Given llm aptitude for offensive security hacks it was just a matter of time. I wager most alt coins are compromised at this point.

jdprgm 7 hours ago

Binance is tweeting they think it's a compromised devops laptop. How fucking bonkers insane is it that they would have such fragile systems that any single employees machine would possibly have access to trigger Billions in transactions. Even access to low millions or hundreds of thousands I would expect to be heavily heavily restricted and involve coordinating several people as security measures.

datadrivenangel 7 hours ago

move fast and break things.....

Culonavirus 2 hours ago

yea, break things... like your legs

tootie 7 hours ago

Is that just code for "inside job"?

moralestapia 6 hours ago

Billions at stake in a service that is highly used to launder money, exchange illegal goods, etc.

Whoever went for this has some balls.

Cyclone_ 4 hours ago

Not necessarily. But I believe they said that the laptop was hacked.

djeidnd 7 hours ago

regulations are bad and inhibit innovation

thereforegrin 3 hours ago

what kind of regulations would serve this particular scenario?

The hack is purely technical in nature.

This could have been the FED's system that got compromised and the response would have been the same.

Oh, no, sorry - it wouldn't because we wouldn't even know it happened as FED is fully opaque while crypto is quite transparent.

In that sense crypto is much more democratic because at least there's some ability for the public to audit it. With FED there's none.

hvb2 an hour ago

> what kind of regulations would serve this particular scenario?

Separation of duties so more than one person is needed to create and then approve such transactions?

lofaszvanitt 4 hours ago

Security, nobody cares about it.....

bni 2 hours ago

Isn't this as it should be? I remember years ago I read about the "Bitcoin manifesto" or whatever. That a transaction "done is done, no matter the reason" its all part of the ideology of these kinds of things. Anyone know what quote Im thinking of?

at1as 12 hours ago

I think it's been clear for a while now that if you intend to hold crypto, you should probably do it at the biggest, most boring, most regulated institution you can find.

Same goes with startup banks - if you exceed FDIC limits, make sure the difference is in a large institutional bank. Nearly learned this one the hard way.

Trying to save a few basis points in txn fees in very volatile industries comes at a huge risk premium

jwpapi 11 hours ago

Bro hold crypto for yourself. Like take some ownership, remember 12 words in your mind something and no matter what situation you have some money. Don’t put it anywhere except for whatever transactions you need to do

AirMax98 10 hours ago

Wrench attack

https://nypost.com/2025/11/25/us-news/sam-altmans-ex-boyfrie...

kvuj 10 hours ago

From the article:

> “A lot of the people who come into this money are flashy, and they’re signaling that they have wealth,” he previously told The Post.

As long as you don't brag about it, I don't really see this being a real world issue. I think credit card fraud is a lot more likely.

kobalsky 9 hours ago

Of course a guy with a net worth over a billion dollars would have 11m in hot wallet.

If someone steals my notebook I take a bigger hit on my net worth lol.

koolba 9 hours ago

Living anonymously is about more than just shit posting. Not publicizing your wealth is a highly effective strategy.

sdenton4 5 hours ago

That's just, like, security through obscurity, man. Git gud and bring on the lambos I say!