Late October brought the largest theft in crypto history. Binance, the world's biggest crypto exchange, reported losing about $6.3 billion in a security incident; blockchain intelligence firm TRM Labs puts it at $6.36 billion. According to reports, most of the funds were drained in about 20 minutes. Intelligence firms attributed the attack to North Korean state-backed hackers. Binance said it will cover all losses from its emergency fund and company money, and various reports say $2.5 billion to $3 billion of the stolen funds have already been frozen.
Why North Korea? The isolated, heavily sanctioned state has had hacker units specializing in crypto theft for years. By estimates, the money funds the regime and its weapons programs. Crypto is especially suitable: it can be stolen remotely, moved quickly between wallets and exchanges, and laundered before the trail is traced. These units combine sophisticated phishing, posing as recruiters, and breaking into software companies that exchanges rely on.
And the month did not end there. The following week Chainalysis, the company that helps authorities trace stolen funds in exactly such cases, admitted it had been breached itself, exposing password hashes and tokens for all its users. According to reports, the company said its breach is unrelated to the Binance theft. Still, the timing shows how much the whole chain, from exchanges to investigators, is under attack.
What does it mean for crypto holders? First, a big exchange does not guarantee full security. Binance managed to cover the loss, but not every exchange could. Those holding significant amounts long-term sometimes consider a private wallet, including a hardware wallet, but then responsibility for safeguarding the keys shifts to them. Second, scams around such events are very common: messages about 'refunds' or 'account verification' after a hack are almost always attempts to steal more. And third, this month is a reminder that in crypto the question is not only what a coin is worth but how safe the place it is kept is.
