alt Hacker NewsI'm stunned that they had that much cryptocoin online to be stolen. Why didn't they put it in "cold storage" and only some information in the database which says how much each customer had?
OTOH I heard that the culprits didn't steal the private keys of the affected customers. If this is true the stolen cryptocoins are worthless.
Replies
lgl • today at 5:46 PM
AFAIK they gained access to a DevOps guy's laptop with too many privileges and just made a bunch of withdrawals into their own wallets, so they have their keys.
The only hope is that most of it gets frozen in some way or another, but if even only 1% gets through they'll still have made about $65M
➕ show 1 reply
Each customer's funds aren't keep in individual wallets. It's pooled into a wallet controlled by the exchange.
Exchanges do put most of the assets in a cold storage. Binance has $155B in assets and handles $14B of trade volume in 24 hours so not all of it are in a cold storage.
https://coinmarketcap.com/exchanges/binance/