{"id":646409,"date":"2026-10-31T00:56:12","date_gmt":"2026-10-31T00:56:12","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/646409\/"},"modified":"2026-10-31T00:56:12","modified_gmt":"2026-10-31T00:56:12","slug":"binance-heist-explainer-how-were-cryptocurrency-billions-stolen","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/646409\/","title":{"rendered":"Binance heist explainer: How were cryptocurrency billions stolen?"},"content":{"rendered":"<p class=\"VFgYVkWVN\" style=\"display:none\">However, Binance has faced its fair share of scandals. Its former chief executive, Changpeng Zhao, was convicted in the United States in 2024 for violating anti-money laundering laws, though he was later pardoned by President Donald Trump.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">It has faced further US legal troubles, including accusations that it sold assets that qualify as unregistered securities.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">MORE: <a href=\"https:\/\/www.nzherald.co.nz\/business\/dasset-crypto-exchange-customers-receive-534-cents-per-dollar-in-liquidation\/premium\/OU6NOHZMIFBMDIY7KOU4TUEBEQ\/\" target=\"_self\" rel=\"nofollow noopener\" title=\"https:\/\/www.nzherald.co.nz\/business\/dasset-crypto-exchange-customers-receive-534-cents-per-dollar-in-liquidation\/premium\/OU6NOHZMIFBMDIY7KOU4TUEBEQ\/\">\u2018It stinks\u2019: Customers of failed Auckland crypto exchange furious at tiny payout<\/a><\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">In France, Binance is suspected of failing to meet its obligations to oversee client funds.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Having failed to obtain authorisation under the European Markets in Crypto Assets (MiCA) regulation, Binance recently announced a partial suspension of its operations within the European Union.<\/p>\n<p>A secure technology?<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Cryptocurrencies are based on a technology called blockchain, a digital ledger that records transactions and is designed to make falsification particularly difficult.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Transfers are authorised using \u201cprivate keys\u201d \u2013 long strings of characters kept secret. However, this does not fully protect funds from theft.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">\u201cEven when you think you are using one of the most robust exchanges in the world, it can still be hacked,\u201d Stephane Ifrah, an analyst at Coinhouse, told AFP.<\/p>\n<p>How can hackers still get in?<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">To gain access to private keys or the systems that authorise transfers, hackers can exploit a software vulnerability, deploy malicious software, or target individuals \u2013 for instance through phishing.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Some keys are stored on hardware wallets that are not connected to the internet.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">However, these devices are not immune to attacks. Funds belonging to users of the French firm Ledger were stolen after malicious components were inserted into devices sold by a third-party retailer.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">In the case of Binance, the investigation points to a \u201ccompromised\u201d laptop belonging to one of its engineers, in addition to \u201cpoints of breach\u201d, the platform said on X.<\/p>\n<p>Who are the hackers?<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">While there has been no official confirmation, analyst firms TRM Labs, Chainalysis and Elliptic point to hackers linked to North Korea, specifically the group known as TraderTraitor or the \u201cLazarus Group\u201d.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">The amount purportedly stolen is four times the sum that the same hackers \u2013 according to the FBI \u2013 siphoned from the platform Bybit in February 2025.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">That theft totalled US$1.b, which at the time was the largest ever cryptocurrency heist.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">According to Elliptic and Chainalysis, some of the funds stolen from Binance have been traced to the same pool of assets as those taken in a recent hack of the platform Bitget, which the victim attributed to Pyongyang.<\/p>\n<p>Is it possible to recover the money?<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Binance says that around US$3b of the affected crypto \u2013 nearly half the total amount affected \u2013 has been frozen with help from issuers and infrastructure partners.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">But the freezing of assets does not mean the funds have been recovered.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">According to Ifrah, the attackers could employ anonymisation tools, such as cryptocurrency \u201cmixers\u201d or \u201ctumblers\u201d, designed to make tracking the stolen assets more difficult.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">Binance says it will cover the losses from the hack.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">But as Ifrah states, \u201cit is clear that there is no such thing as zero risk\u201d.<\/p>\n<p class=\"VFgYVkWVN\" style=\"display:none\">&#8211; AFP<\/p>\n","protected":false},"excerpt":{"rendered":"However, Binance has faced its fair share of scandals. Its former chief executive, Changpeng Zhao, was convicted in&hellip;\n","protected":false},"author":2,"featured_media":646410,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[316705,9092,19092,89,6326,8613,54058,40619,138,864,35958,2174,5005,18724,29260,221,31869,111,139,69,3545,4736,1361,780,316704,3608,17450,19985],"class_list":["post-646409","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-111b","tag-against","tag-assets","tag-attack","tag-biggest","tag-billion","tag-billions","tag-binance","tag-business","tag-cryptocurrency","tag-estimates","tag-exchange","tag-explainer","tag-hacking","tag-heist","tag-how","tag-impacted","tag-new-zealand","tag-newzealand","tag-nz","tag-platform","tag-stolen","tag-that","tag-trading","tag-us63","tag-were","tag-worlds","tag-worth"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/646409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=646409"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/646409\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/646410"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=646409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=646409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=646409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}