Binance $6.3B hack traced to compromised laptop bypassing withdrawal controls
Binance disclosed that attackers, identified by the FBI as North Korea's TraderTraitor group, compromised a developer's laptop to access an internal service container capable of initiating withdrawal requests. The attackers then exploited further weaknesses and an Ethereum account-delegation mechanism to gain transaction approval authority over a hot wallet, draining billions in assets within about 20 minutes. Binance says there is no evidence leaked wallet keys were used, and that the breach involved multiple points of compromise beyond the initial device.