Binance says it has replaced about 90% of the $6.3bn in cryptocurrency stolen in a hack, drawing on company funds and its treasury. The world’s largest crypto exchange has pledged to cover the full loss so customers do not bear the cost, and says it has reserved more than $6.34bn for that purpose. The remaining 10% may take longer to assemble in the necessary amounts. The company says bitcoin, ether, Tether and seven other widely traded cryptocurrencies are covered. Its immediate priority is restoring customer withdrawals, which it hopes to resume on 1 November, subject to confirmation.
The theft is believed to be the largest crypto hack on record, surpassing the $1.5bn Bybit breach in 2025. Binance’s investigation first pointed to an engineer’s compromised laptop, but later identified additional breach points. Executives say multiple hackers used sophisticated methods to conceal their activity, including a self-destruct mechanism. Binance says it has frozen about $3bn of stolen assets with help from law enforcement and industry partners; the US Secret Service is also working to trace and recover funds. Two blockchain analytics firms identify North Korea-linked Lazarus Group, also called TraderTraitor, as the likely perpetrator, though the investigation continues and North Korea denies involvement.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026. (atlasum.net)
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure. (daemonology.net)
Plymouth canceled its Flock license-plate camera contract after the system wrongly tracked a couple, but the company did not respond to removal requests. The police chief disconnected the cameras’ power to ensure they stopped recording vehicles. (thedrive.com)
A hacking group said it exploited a vulnerability in software used to manage LED advertising screens, displaying pornographic footage on a highway billboard in Egypt and accessing screens in several other countries. Egyptian authorities opened an investigation and suspended roadside displays, while the incident raised questions about security at the billboard operator. (cairoreport.org)
VOLTA infostealer steals credentials, financial data, and personal details, then sends an evidence bundle to an LLM to rank victims by potential value. If a model refuses, the malware tries a chain of other models, making AI a key part of its intelligence-gathering workflow. (blog.talosintelligence.com)
Cybersecurity startup Cathedral accessed Anthropic’s internal systems in under 12 hours during an authorized security test, exposing employee details, salary information, job offers and internal messages. Its AI agents found weaknesses in business software and accessed meeting transcripts and Slack conversations. (indiatoday.in)
Today's best Hacker News stories, summarized and screenshotted, one email a day.