Binance said issuers froze billions in USDT and USDC, while its SAFU fund holds around $1 billion to cover potential losses.
Photo Credit: Unsplash/Kanchanara
Binance’s Secure Asset Fund for Users holds around $1 billion in Bitcoin to help cover emergency losses
On Thursday, Binance, which is the biggest cryptocurrency exchange by trading volume, was hacked for more than $6 billion (roughly Rs. 56,970 crore), making it the biggest ever cryptocurrency theft in history. Binance estimates the value of the total losses due to the attack at around $6.3 billion (roughly Rs. 59,818.50 crore). According to Binance, which updated its statement on Friday evening, about $3 billion (roughly Rs. 28,485 crore) worth of cryptoassets have been frozen, including $2.3 billion (roughly Rs. 21,838.50 crore) worth of USDT and USDC stablecoins. This implies that the token issuers have blocked any transactions from the blockchain addresses in question.
As per the statement, the primary cause behind this hack could be that the laptop of an engineer has become vulnerable to hacking. The wallets in possession of the hacker contained more than $5.7 billion (roughly Rs. 54,121.50 crore) in various cryptos stolen from Binance, as revealed by Arkham, including almost $1.5 billion (roughly Rs. 14,242.50 crore) in Bitcoin and around $900 million (roughly Rs. 8,545.50 crore) in Ether worth $2,220 (roughly Rs. 2.1 lakh). The wallets had approximately $1.5 billion (roughly Rs. 14,242.50 crore) in USDT and over $800 million (roughly Rs. 7,596 crore) in USDC stablecoins. According to blockchain analytics company Chainalysis, it is updating its estimate of the amount stolen, which stands at approximately $5.9 billion (roughly Rs. 56,005.50 crore).
The exchange added, “Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak.” In an X post, Binance's Co-CEO Yi He stated that the platform is going to pay for “all hacking losses.” The exchange has frozen all withdrawals until the security problem is solved.
Blockchain security professionals, ZachXBT, an investigator, and intelligence firms Blockaid and TRM Labs claimed that North Korea was responsible for the hack. "This is the biggest crypto hack in history,” said Ido Ben-Natan, co-founder and CEO of crypto security firm Blockaid.
CZ, founder of Binance, also responded to this matter, stating, “User funds are safe.” “It does look like a hack on Binance … I don't manage Binance anymore, but as a shareholder, I expect all user funds will be fully covered,” he added.
The cryptocurrency markets reacted negatively to the incident. Bitcoin's price fell by 4.8 percent to below $78,000 (roughly Rs. 73.9 lakh), while Ether (ETH was down 5.7 percent. BNB, the token of the Binance-affiliated BNB Chain, was down by 8 percent, and AAVE was down 11 percent.
The wallet associated with the attack on Binance is making transactions on the decentralised exchange Uniswap (UNI), based on the blockchain analysis done by Arkham. The attacker managed to borrow a minimum of 20,000 wrapped ether (WETH) valued at about $44 million (roughly Rs. 417.78 crore) from the decentralised loan platform Aave as collateral with the stolen USDT tokens.
Both of the executives of Tether and Circle, who issue their stablecoins, are trying to trace the incident. According to Tether's CEO, Paolo Ardoino, the company managed to freeze about $1.57 billion USDT tokens, and according to Circle CEO Jeremy Allaire, USDC tokens worth more than $800 million (roughly Rs. 7,596 crore) have been frozen.
In case of any major crypto hack, the attackers attempt to exchange the assets that could be frozen by issuers such as centralised stablecoins, namely USDC and USDT, for the cryptocurrency that has no control of its centralised issuer. It is possible to conduct transactions through decentralised exchanges and lenders, such as Uniswap and Aave, through which it is possible to conduct transactions straight from the wallet without using a centralised exchange to process the transaction. Transfers, nevertheless, do not prove that the money has become impossible to freeze or recover.
Before the attack, Binance had about $144 billion (roughly Rs. 13,67,280 crore) worth of assets on its platform, based on DefiLlama data. The hacked amount would be around 4 percent of that. The company has some buffer to compensate for some of the losses. The Secure Asset Fund for Users (SAFU), which was launched in 2018 to safeguard users' money in case of security attacks and other emergencies, contains about $1 billion (roughly Rs. 9,495 crore) in Bitcoin. According to an earlier statement by Binance, it would compensate for all losses through the use of the SAFU fund and the company's own money, stressing that “user funds are safe.”
Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.
Apple Watch Series 12
Starts from ₹56,900
Samsung Galaxy Watch Ultra 2
Starts from ₹62,479
Samsung Galaxy Watch 9 (44mm, LTE)
Starts from ₹41,999
Samsung Galaxy Watch 9 (40mm, LTE)
Starts from ₹38,999
Samsung Galaxy Watch 9 (40mm)
Starts from ₹36,999
Samsung Galaxy Watch 9 (44mm)
Starts from ₹40,999
Nothing Announces 2027 Product Roadmap, Plans to Launch Over Twice as Many Smartphones Next Year