conv.

All stories
SecurityQuiet 11d · day 13

Binance loses $6B to North Korean hackers in largest crypto exchange theft

The world's largest crypto exchange was drained in minutes; authorities race to trace funds before hackers can launder them.

newest coverage 11d agosummary written 11d ago4 pieces MastodonNewswiresGoogle News

What to know

  • Binance lost $6 billion to North Korean hackers in what appears to be a targeted attack exploiting employee vulnerabilities rather than public-facing systems.
  • Law enforcement and blockchain analysts are in a race against time: hackers can now launder stolen crypto within 48 hours using AI agents to fragment and obscure the trail.
  • The paradox of modern crypto theft: stealing is easier than converting the stolen funds to usable money without detection, leaving hackers in a precarious position despite their initial success.

“They're probably feeling a little nervous, if I had to guess, because there are a lot of eyes on that Bitcoin. It's all on a blockchain that is publicly visible. Anyone can investigate it. And there are very, very sophisticated blockchain analysis tools right now.”

Ilya Lichtenstein, Reformed hacker · CNN ↗ · Oct 30

Ilya Lichtenstein Reformed hacker and security analystBinance World's largest crypto exchangeNorth Korean hackers Attack perpetrators

Binance loses $6B to North Korean hackers in largest crypto exchange theft
cnn.com

How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in 3h at Oct 31, 11 AM; 4 pieces over 13 days (2 articles · 2 posts) Oct 30, 8 AM — 1 piece · 1 article — Google News 1Oct 30, 11 AM — quietOct 30, 2 PM — 1 piece · 1 article — Newswires 1Oct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — 2 pieces · 2 posts — Mastodon 2Oct 31, 2 PM — quietOct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — quietNov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — quietNov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet 1–2
Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 8:40 PM ET
  1. 1

    Lichtenstein describes North Korean attack method and AI-accelerated laundering threat

    Lichtenstein explained that North Korean hackers likely exploited the weakest link—phishing an employee—rather than attacking public-facing systems. He warned that AI agents are now fragmenting and shuffling stolen funds so rapidly that law enforcement faces a 48-hour window to trace the money before it becomes exponentially harder to follow.

    “Right now, all of these funds are moving and getting split, split, split into small pieces and shuffled around and moved together. And because AI agents can do this, it's happening incredibly quickly. And so it's really a race against time to just try to catch up and trace it.”
    — Ilya Lichtenstein
    1. 1 outlet Notorious hacker says stolen crypto is like ‘holding a hot potato’

      first by CNN, 12d ago

  2. background

    Lichtenstein explains hacking easier than laundering stolen crypto — Former hacker Ilya Lichtenstein, released early from a 2024 five-year sentence for a $4.5 billion crypto theft, told CNN that the hardest part of a hack is the laundering phase. Law enforcement and blockchain analysis tools create a time-sensitive race to trace and freeze funds before hackers can obfuscate them.

  3. 2

    North Korean hackers steal $6 billion from Binance

    Binance, the world's largest crypto exchange, was hacked with more than $6 billion drained from its system in minutes. Evidence points to North Korean hackers as the perpetrators.

    “They're holding a hot potato. So, these hackers in turn will have to try to move even faster to basically somehow take this money and either exchange it for legitimate money or mix it into a pile of money where you can't tell what's counterfeit and what's legitimate.”
    — Ilya Lichtenstein, Reformed hacker · source