A security incident at digital asset exchange Binance<\/a> on Thursday affected some $6.3 billion in client assets, making it the largest crypto theft on record. <\/p>\n Earlier that day, prediction market platform Polymarket<\/a> temporarily halted trading on its international exchange<\/a> after a third-party data provider was hacked, resulting in at least $2.7 million being drained from users’ wallets. The company’s international platform operates on the Polygon blockchain.\u00a0<\/p>\n Experts whom CNBC interviewed said the security incidents on the crypto exchanges aren’t surprising, especially in light of recent artificial intelligence hacking incidents<\/a>. <\/p>\n Most of these experts even said that observers should expect more security incidents, at least in the near term, as that problem worsens.\u00a0<\/p>\n Questions over the safety of users’ funds<\/p>\n “I think it’s extremely dangerous,” said Tyler Moore, a cybersecurity professor at the University of Tulsa who has followed the asset class for more than a decade. “I think you should be very wary of leaving any significant amount of funds in an exchange\u2026 there are no built-in protections for when these inevitable hacks take place.”<\/p>\n For instance, banking customers can rely on the Federal Deposit Insurance Corporation<\/a> to insure deposits up to $250,000 per depositor, per insured bank, in the event of an institution’s failure. <\/p>\n There is no similar form of coverage available for funds lost from a cryptocurrency exchange, noted Moore. <\/p>\n Binance<\/a> and Polymarket<\/a> reassured users that they would make affected investors whole. That’s a sign that users should feel confident in crypto exchanges, according to Ido Ben-Natan<\/a>, CEO of blockchain security company Blockaid.\u00a0<\/p>\n “I actually think no users will lose any money,” he said. “Binance has said they’re going to cover everything\u2026 I actually don’t think it’s a bad idea for users to put money in these exchanges. These exchanges need to work really hard to make sure they don’t take another hit like this.”<\/p>\n Ben-Natan noted that while he thinks more hacks are likely as the cybersecurity landscape changes due to AI, he said it will only make the crypto industry stronger. <\/p>\n As a result, a crypto wallet could ultimately become a safer place to hold funds compared to other options, since the industry will have the experience of how to handle these attacks, Ben-Natan said.\u00a0<\/p>\n Vulnerabilities on offshore platforms<\/p>\n A key point is that while Binance experienced a security incident on its offshore platform, its regulated, centralized U.S. exchange did not have a similar issue. The same was true of Polymarket’s domestic exchange. <\/p>\n U.S. regulated platforms Coinbase<\/a> and Robinhood<\/a> were also unaffected by the security breach on Binance, though shares of both fell on Friday in the aftermath.\u00a0<\/p>\n Stock Chart IconStock chart icon Coinbase v. Robinhood 1-day. <\/p>\n In a Friday appearance on CNBC’s “Squawk on the Street<\/a>,” the Commodity Futures Trading Commission<\/a> \u2014 the federal regulator of derivatives \u2014 Chairman Michael Selig<\/a> said that the offshore nature of these incidents was critical to note.\u00a0<\/p>\n “They don’t have the same sorts of safeguards that we have in our financial markets,” he said. “We want to offer a federal option to these exchanges to come and register with the CFTC, and they would be subject to the same sorts of cybersecurity safeguards that we have in our markets today.”<\/p>\n Brett Falk, a professor and director of the Crypto and Society Lab at the University of Pennsylvania, said that U.S. regulations likely wouldn’t have stopped an incident like that of Binance on Thursday. That’s because the hack may have involved a compromised DevOps engineer’s laptop, Binance said in a post on X<\/a>.\u00a0<\/p>\n “Most of the regulation doesn’t touch the specific software stack you have to use to authenticate people,” Falk said.\u00a0<\/p>\n![\"hide](\"https:\/\/static-redesign.cnbcfm.com\/dist\/a54b41835a8b60db28c2.svg\")
<\/p>\n