Skip to content
NewA calmer, faster ZeroHour
Data breachcriticalExploited in the wild

Compromised DevOps laptop caused $6.3B Binance breach

Original title: A compromised DevOps laptop caused the $6.3B Binance breach

CSO Online ()3 min read1
Part of a story covered by 21 sourcesNorth Korean Group Steals Record $6.36B from BinanceMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Binance covers all losses from North Korean-linked attack on employee device that enabled unauthorized withdrawals.

Binance attributes the $6.3 billion cryptocurrency loss to a compromised DevOps engineer's laptop that granted access to a withdrawal service container. The exchange froze $3 billion in assets, revoked affected addresses, and is replenishing funds using company reserves. It restored withdrawals across 15 networks and stated user funds remain safe.

Unconfirmed: Binance has not published technical details of the intrusion path

Key facts
  • $6.3 billion loss covered by Binance
  • FBI attributes to TraderTraitor group
  • Attack targeted automated withdrawal process
  • Replenished 95 percent of affected assets
Security assessment · AI, from the articleExploited in the wild

Impact: unauthorized access to withdrawal pipeline

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
binancenorth-korealazarus
Vendors
Binance
Threat actors
TraderTraitor
Victims
Binance
Organizations
FBI
Countries
North Korea

From the original article

3 min read at csoonline.com

Cryptocurrency Exchange Binance blamed a compromised DevOps laptop for the loss of $6. 3 billion in cryptocurrency last week, adding that it will now cover any losses faced by its customers.

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.