logoalt Hacker News

The $6.3B Binance hack was pulled off in just 20 minutes

280 points • by domhudson • today at 12:50 PM • 196 comments • view on HN

Comments

lordnacho • today at 2:45 PM

The heist itself only took 20 minutes, but the preparation is a business that has gone on for years. Much like a heist movie, the exciting bit is just the conclusion after a long build-up where Danny gets the gang together, plans it, and executes it.

➕ show 3 replies
jakaroo • today at 2:39 PM

The short duration of this crypto hack isn't particularly noteworthy. Of course it takes time to find or design the exploit, but execution is typically very quick for such events

gurkwart • today at 2:00 PM

Something tells me that the timing of the Claude Code supply chain attack is not a coincidence ...

https://cyberplace.social/@GossiTheDog/117528831681803563

➕ show 4 replies
tzone • today at 8:25 PM

Lol, the title is so misleading. As more information is coming out, if the Cursor Claude extension really is the culprit here, these attack must have been in the works for god knows how long.

This level of targeting is really only something that nation state actors can pull off, who are also protected from actual law enforcement prosecution. Unless attackers are really in North Korea, they would 100% be caught within just few days.

pixl97 • today at 1:24 PM

When seconds matter we'll patch our systems in days to weeks.

➕ show 4 replies
efields • today at 1:48 PM

I'd watch all 20 minutes of that screen share.

➕ show 2 replies
dgrin91 • today at 1:59 PM

I wonder what the actual attack vectors here were. Was there actually a hack into binance systems, or was it just some insider or credential leak?

➕ show 2 replies
hattmall • today at 1:55 PM

Binance having an extra $6B to cover this is wild to me.

➕ show 3 replies
hn_submit • today at 5:14 PM

I'm stunned that they had that much cryptocoin online to be stolen. Why didn't they put it in "cold storage" and only some information in the database which says how much each customer had?

OTOH I heard that the culprits didn't steal the private keys of the affected customers. If this is true the stolen cryptocoins are worthless.

➕ show 2 replies
qaz_plm • today at 1:29 PM

https://archive.ph/aKQzv

➕ show 1 reply
bagacrap • today at 2:17 PM

The funds were simply de-centralized. Seems by design?

jjallen • today at 2:31 PM

As a former crypto proponent, after ~17 years I think we have to have a real discussion about the value crypto does or doesn't bring to the world.

Sure, it let's some people keep their savings safe from dictatorial countries. But it also fuels other dictators that are doing pretty nasty stuff to their own people. And crypto is facilitating that.

➕ show 22 replies
chuckadams • today at 3:45 PM

Most successful bank heists are in and out in less than five minutes. Or were anyway, there's a reason you don't hear about them these days.

bendtheblock • today at 6:30 PM

Funny that for all the hype around decentralisation and the libertarian ideals that surround crypto Binance, Circle etc were able to unilaterally freeze funds when it came down to their own self interest... I thought the code was the rules etc seems like the best player won here.

Crazy that most of this gets put into North Korean weapons programs.

pyrale • today at 1:50 PM

Not quite the nanosecond buyout yet, but we're getting there.

amelius • today at 5:46 PM

Crypto is the canary.

1970-01-01 • today at 1:55 PM

Excellent, now make sure all of it gets into the 90 minute movie.

➕ show 1 reply
sharts • today at 2:40 PM

Perhaps the culprit deserves to keep it all like all billionaires. Fair is fair.

➕ show 2 replies
m00dy • today at 2:35 PM

yeah executed in 20minutes, how about planning phase ?

➕ show 1 reply
szemy2 • today at 4:38 PM

[flagged]

cryptokeyhole • today at 6:24 PM

[flagged]

quietFerry94 • today at 1:31 PM

[dead]