Binance reported a security breach with an estimated $6.3 billion impact, potentially the largest cryptocurrency heist on record. Its preliminary investigation pointed to an engineer’s compromised laptop as a possible entry point, enabling unauthorized withdrawals. The exchange said customer funds remained safe, suspended deposits and withdrawals while it secured its wallet systems, and promised to cover hacking losses. Binance and industry partners had frozen about $3 billion, but the status of the other $3.3 billion was unclear. Tether, Circle, Ripple, and other firms also froze assets linked to the incident, including nearly $1.57 billion frozen by Tether and more than $800 million by Circle.
The breach sent crypto prices and related shares lower: Bitcoin and ether each fell more than 3%, Binance’s BNB token dropped 5%, and Coinbase shares declined. Analysts warned that the scale of the incident could weaken investor confidence in centralized exchanges by highlighting security, solvency, liquidity, and counterparty risks. Binance, which reported 335 million registered users and $162.8 billion in assets under custody in 2025, maintains a bitcoin reserve intended to protect users after security breaches. The event adds to a wave of crypto thefts, including $2.9 billion stolen across nearly 150 attacks last year and a reported $350 million theft from Bitget in September. Binance.US and Coinbase said they were unaffected.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Hackers stole about $6.3 billion in cryptocurrency from Binance wallets across at least 10 blockchains, draining most of it in roughly 20 minutes. Investigators suspect North Korea’s TraderTraitor group; Binance and other firms have frozen about half the funds, while much of the rest may be unrecoverable. (wired.com)
Official Claude Code extensions were found to contain backdoors. The issue raises security concerns for users who install those extensions. (cyberplace.social)
A compromised Claude Code extension version 2.1.313 distributed malware that collected developer device details and attempted to install a persistent SSH backdoor. Anthropic replaced the extension with version 2.1.314, but affected devices may still need remediation. (doublepulsar.com)
A compromised Claude Code extension version 2.1.313 attempted to steal device information and install a persistent SSH backdoor on developer computers. Anthropic replaced the extension, but the update does not remove backdoors from devices already infected. (doublepulsar.com)
Researchers report five full cross-tenant compromises in Azure linked to a common underlying weakness. The cases highlight risks to tenant isolation in Microsoft’s cloud platform. (binarysecurity.no)
Binance’s hot wallet signed 50 EIP-7702 authorizations, then a contract drained about $2.5-$2.8 billion from it three minutes later. The timing raises questions about whether the wallet’s private key was compromised or misused. (808bits.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.