Binance says initial investigation suggests a compromised DevOps laptop may have enabled a ~$6.3B hack; Tether froze 1.5B+ USDT and Circle froze 800M+ USDC

If you hold crypto on Binance, your funds might be at risk and immediate withdrawal is advisable.

Binance is investigating a potential security incident that may have resulted in the loss of at least $5.57 billion in cryptocurrency across Ethereum, Bitcoin, and Tron blockchains. The exchange stated that it is actively investigating and has not confirmed any impact to user funds. Initial reports suggest a compromised DevOps laptop could be the entry point for the suspected hack, which began with a delegation transaction utilizing the EIP-7702 Ethereum feature. This allowed an attacker to authorize subsequent transfers without a direct signature from the wallet. In response to the outflow, Tether froze over 975 million USDT, and Circle froze over 823 million USDC, totaling approximately $1.8 billion in stablecoins in a single receiving wallet. The price of Bitcoin dropped below $79,000, and Binance's native token, BNB, fell about 7% following the news. This potential event would significantly surpass previous record crypto hacks.

The suspected breach at Binance, potentially enabled by a compromised DevOps laptop and the exploitation of the EIP-7702 standard, highlights a critical vulnerability in the operational security of major cryptocurrency exchanges. The speed at which funds were moved and the subsequent freezing of assets by Tether and Circle underscore the ongoing challenge of securing vast digital treasuries against sophisticated attacks. This incident could trigger a broader industry review of DevOps security protocols and the rapid adoption of new smart contract functionalities like EIP-7702, forcing exchanges to reassess their defenses and incident response plans to prevent similar catastrophic losses.

This event, if confirmed as a hack, would represent the largest cryptocurrency theft on record, surpassing previous significant breaches. The substantial freezing of assets by stablecoin issuers like Tether and Circle signals a growing willingness and capability for centralized entities to intervene in the flow of illicit funds, which could set new precedents for regulatory oversight and asset recovery in the crypto space. Observers will watch closely for Binance's full disclosure of the incident's cause and their proposed remediation, as well as any potential ripple effects on market confidence and the regulatory landscape for cryptocurrency exchanges globally.