Top
Best
New

Posted by Tiberium 13 hours ago

Binance-hacker-1029 – $5.6B stolen from Binance(arkm.com)
1354 points | 835 commentspage 3
K0IN 12 hours ago|
wait, someone took the stealmybitcoin.com poc code to the next level!

https://news.ycombinator.com/item?id=50224916

jwpapi 11 hours ago|
Damn sorry my ai slopped.

Need to get better in prompting

melenaboija 7 hours ago||
How in the freakin world could $6B disappear into a regulated banking system without leaving a trail?

I guess at some point they'll have to cash out. Seems hard to spend $6B in vape shops.

mcintyre1994 3 hours ago||
From the BBC’s Lazarus Group reporting, they mostly seem to launder the money they steal through casinos in unregulated jurisdictions.
joeguilmette 6 hours ago||
North Korea
4ggr0 4 hours ago||
tell me how NK woould steal 6B, or any money, with a virtual hack, from a bank. not by going in there guns blazing.
Reason077 2 hours ago|||
They were at this long before crypto. Look up "Bangladesh Bank robbery", for example, where NK hackers attempted to steal almost $1 billion from the Bangladesh central bank in 2016 (and were partially successful).
dewey 2 hours ago|||
Did you follow the news at all about crypto heists? This is very common and well known.
miohtama 10 hours ago||
It would be hilarious if this was caused by man-in-the-middle or BGP/DNS compromise because of eMudhra.

Binance wallet 16 came online in 2021.

Why to wait 5 years to attack.

hollowturtle 10 hours ago||
LLMs. This month has been very busy
pajamasam 4 hours ago||
Maybe a stolen wallet?
thedangler 10 hours ago||
Confused how this can’t just be tracked. Pretty hard to hide billions in bitcoin when most off-ramps need KYK?

What am I missing ?

pants2 10 hours ago||
They can track it just fine. It goes straight to North Korea.
austhrow743 9 hours ago||
How do/did they get it out though?
8note 7 hours ago|||
russia? others who dont care all that much?

the laundering wouldnt be all that hard to take those buttcoins on in exchange for clean ones.

itemize123 9 hours ago||||
business laundromats
tjwebbnorfolk 5 hours ago|||
useful idiots in the US who buy crypto because "it's the future"
CorpoZoomie 10 hours ago|||
Swap to XMR on a DEX, then juggle between a few wallets and you've got pretty good obfuscation, but yeah like you said, the off-ramp (FIAT) requires KYC in 99% of cases, which is why BTC -> XMR -> BTC is a good idea, obviously you'd fragment this through a LOT of wallets, or just keep it in XMR. Either way, keeping this type of money in crypto is pretty much your only option, you just need to obfuscate REALLY well.
knuppar 10 hours ago||
tornado cash?

edit: I suppose it would be hard still. You can get anonymity inside wallets with Tornado Cash but then to turn that into actual money it will be very dependent on the country

yreg 2 hours ago||
You cannot mix billions in TC
le-mark 11 hours ago||
I’ve been waiting for this. Given llm aptitude for offensive security hacks it was just a matter of time. I wager most alt coins are compromised at this point.
jdprgm 8 hours ago||
Binance is tweeting they think it's a compromised devops laptop. How fucking bonkers insane is it that they would have such fragile systems that any single employees machine would possibly have access to trigger Billions in transactions. Even access to low millions or hundreds of thousands I would expect to be heavily heavily restricted and involve coordinating several people as security measures.
archon810 6 hours ago||
https://x.com/binance/status/2115993361517891592
datadrivenangel 7 hours ago|||
move fast and break things.....
Culonavirus 2 hours ago|||
yea, break things... like your legs
tootie 7 hours ago|||
Is that just code for "inside job"?
Cyclone_ 5 hours ago|||
Not necessarily. But I believe they said that the laptop was hacked.
moralestapia 7 hours ago|||
Billions at stake in a service that is highly used to launder money, exchange illegal goods, etc.

Whoever went for this has some balls.

djeidnd 7 hours ago|||
regulations are bad and inhibit innovation
thereforegrin 3 hours ago||
what kind of regulations would serve this particular scenario?

The hack is purely technical in nature.

This could have been the FED's system that got compromised and the response would have been the same.

Oh, no, sorry - it wouldn't because we wouldn't even know it happened as FED is fully opaque while crypto is quite transparent.

In that sense crypto is much more democratic because at least there's some ability for the public to audit it. With FED there's none.

hvb2 2 hours ago||
> what kind of regulations would serve this particular scenario?

Separation of duties so more than one person is needed to create and then approve such transactions?

lofaszvanitt 4 hours ago||
Security, nobody cares about it.....
at1as 12 hours ago||
I think it's been clear for a while now that if you intend to hold crypto, you should probably do it at the biggest, most boring, most regulated institution you can find.

Same goes with startup banks - if you exceed FDIC limits, make sure the difference is in a large institutional bank. Nearly learned this one the hard way.

Trying to save a few basis points in txn fees in very volatile industries comes at a huge risk premium

jwpapi 11 hours ago|
Bro hold crypto for yourself. Like take some ownership, remember 12 words in your mind something and no matter what situation you have some money. Don’t put it anywhere except for whatever transactions you need to do
AirMax98 11 hours ago||
Wrench attack

https://nypost.com/2025/11/25/us-news/sam-altmans-ex-boyfrie...

kvuj 10 hours ago|||
From the article:

> “A lot of the people who come into this money are flashy, and they’re signaling that they have wealth,” he previously told The Post.

As long as you don't brag about it, I don't really see this being a real world issue. I think credit card fraud is a lot more likely.

kobalsky 10 hours ago||||
Of course a guy with a net worth over a billion dollars would have 11m in hot wallet.

If someone steals my notebook I take a bigger hit on my net worth lol.

koolba 9 hours ago|||
Living anonymously is about more than just shit posting. Not publicizing your wealth is a highly effective strategy.
sdenton4 5 hours ago||
That's just, like, security through obscurity, man. Git gud and bring on the lambos I say!
bni 3 hours ago||
Isn't this as it should be? I remember years ago I read about the "Bitcoin manifesto" or whatever. That a transaction "done is done, no matter the reason" its all part of the ideology of these kinds of things. Anyone know what quote Im thinking of?
himata4113 3 hours ago||
It's lucky for everyone that this happened to binance, other exchanges would have likely caused a lot of issues for people holding money in said exchanges.

But it's also surprising that it happened to binance at all. This checks a lot of the boxes for being, at least indirectly, an inside job.

geekgod382 6 hours ago|
This one is even bigger than 2025's ByBit breach, which was $1.5B
TuxedoBuddy 5 hours ago|
Yes, by $4.8B
More comments...