The biggest crypto heist ever started with one laptop
On the evening of 29 October, attackers drained about $6.36 billion from Binance wallets across ten blockchains, most of it within roughly 20 minutes. Binance says the way in was a compromised DevOps engineer's laptop, which let the attackers push unauthorised withdrawals through an internal system. It says it has found no sign that a wallet's private key leaked.
Blockchain analytics firm TRM links the attack to North Korea's Lazarus Group (also tracked as TraderTraitor). Binance hasn't named anyone, and North Korea denies it. Roughly $3 billion has since been frozen on-chain, and Binance says it covered users' losses from its own balance sheet, including its SAFU emergency fund.
Sources: BleepingComputer · TRM Labs · Washington Post