The reported USD 6.3 billion cyberattack on Binance, the world's largest cryptocurrency exchange, has raised fresh concerns about the safety of digital assets held on centralised trading platforms. While the incident has exposed weaknesses in exchange operations, industry experts say it does not point to a failure of blockchain technology itself.
The breach, considered the biggest cryptocurrency theft on record, has also renewed discussions about investor protection, digital asset custody and the security systems used by cryptocurrency exchanges.
The damage incurred due to this cyber-attack is around USD 6.3 billion, which is almost four times the sum lost during the Bybit hack, which was the largest one till date.
Binance’s first investigation concluded that the hackers exploited the vulnerability present in the laptop of a DevOps engineer and gained access to their service container and created unauthorised transactions of withdrawal.
Later investigations revealed more ways in which the security was breached but according to the Binance team, there has not been any leakage of wallet private keys.
Binance has promised to bear all customer losses from its own funds and set aside over USD 6.34 billion for the same. About USD 3 billion worth of assets have been seized which went through wallets of the attackers.
This incident has put the dangers of storing large amounts of cryptocurrencies on centralised exchanges in the spotlight once again.
Carsten Menke, head of next generation research at Julius Baer, said that this is a company security problem and not an issue related to cryptocurrencies. He pointed out the custodial dangers that come from storing digital assets on a centralised platform and advised storing them offline.
It has also been noted that cybersecurity risks can be created by employees’ devices and systems and even software from third parties.
The cooperation of crypto firms has been critical in stopping the flow of the stolen money. As reported by Sergej Kunz, the co-founder of 1inch, more than USD 2.4 billion was frozen in Tether and Circle stablecoins. Other members of the industry have also blacklisted the addresses linked to the hack.
According to industry experts, there is no indication that any artificial intelligence was used during the attack on Binance. Nevertheless, they cautioned that artificial intelligence would make future cyberattacks more efficient and less costly.
The attack has emerged as a significant case study for cryptocurrency exchanges that will require improved operational security and investment protection going forward.