The estimated $6.3 billion Binance hack has exposed weaknesses in the internal security systems of cryptocurrency exchanges rather than flaws in blockchain technology, according to industry experts.
The incident, described as the largest cryptocurrency theft on record, had an estimated impact around four times the amount stolen in the previous record-setting Bybit hack. Binance has identified and frozen approximately $3 billion in assets that passed through wallets linked to the attackers and pledged to cover all losses.
The exchange said its initial investigation indicated that a DevOps engineer’s laptop had been compromised, allowing an attacker to access a service container and submit unauthorised withdrawal transactions. Further investigations uncovered additional points of breach, however, contradicting the initial finding that a single laptop was involved.
Binance said it had found no evidence that any wallet private keys had been leaked. It also stated that it had set aside more than $6.34 billion in company funds to cover the incident.
The UAE’s Financial Services Regulatory Authority, which regulates the Abu Dhabi Global Market, said it was aware of the incident and was monitoring developments.
Georgy Kucherin, senior security researcher at Kaspersky GReAT, said the Binance attack and a separate incident involving prediction platform Polymarket demonstrated how cybercriminals could exploit both internal systems and external service providers.
The Polymarket incident was linked to a compromised third-party DebugBear script. Kucherin said technical employees remained potential entry points for attackers, as even experienced engineers could unintentionally download malicious software.
Sandeep Pyapali, founder and chief executive of Mesta, said the attacker appeared to have exploited access routes already available within Binance’s systems. If an employee’s device had been compromised, he explained, withdrawal requests could have appeared legitimate to the exchange’s security controls.
Pyapali described the incident as “a maturity test” for the cryptocurrency industry rather than an existential threat. He said exchanges would need stronger emergency controls, broader insurance coverage and larger financial reserves.
Carsten Menke, head of next generation research at Julius Baer, said the breach was “not a crypto issue, but a company issue”. He pointed to the risks of keeping digital assets with centralised exchanges and recommended offline cold storage as a way to reduce exposure.
Menke said there was no evidence that artificial intelligence had been used in the Binance attack, although AI was making sophisticated cyberattacks faster and less expensive to carry out.
Vincent Chok, founder and chief executive of First Digital, highlighted the speed of coordination between exchanges, issuers and blockchain networks following the incident.
Sergej Kunz, co-founder of 1inch, said Tether and Circle had frozen more than $2.4 billion in stablecoins, while other industry teams blocked addresses associated with the exploit. These actions, he said, had significantly restricted the attackers’ ability to move the stolen assets.
