Signal

Binance says it is investigating a "potential security issue" as suspicious outflows reach up to $5.8B; Tether freezes 1.5B+ USDT, Circle freezes 800M+ USDC

First reported by Theblock ·

The signal ●●●● Compiled by AI from Theblock, Techmeme, TechCrunch, Bloomberg, The Information and 9 more
Why you might care

The ability for stablecoin issuers to freeze funds limits the practical utility of stolen cryptocurrency.

What happened

Binance is investigating a "potential security issue" after approximately $5.57 billion in cryptocurrency was moved from Binance-linked wallets across Ethereum, Bitcoin, and Tron. The outflows occurred on Thursday, with the largest amounts being $3.51 billion on Ethereum, $1.44 billion in Bitcoin, and $630 million on Tron. Binance stated it is actively investigating the issue and has not confirmed any impact on user funds. In response to the suspicious activity, Tether froze 975.1 million USDT and Circle froze 823 million USDC in a primary receiving wallet, totaling about $1.8 billion. The method of the alleged exploit involved a delegation using Ethereum's EIP-7702 feature, which allows ordinary wallets to execute smart contract code, potentially authorizing subsequent transfers without further signatures. This incident, if confirmed as a hack, would surpass previous record-breaking crypto thefts.

What it means

The scale of the potential drain, exceeding $5.5 billion, suggests a significant vulnerability in Binance's hot wallet security. The use of EIP-7702, a relatively new Ethereum feature, indicates a sophisticated attack vector that leveraged the protocol's capabilities to bypass traditional security measures. The rapid response from Tether and Circle to freeze assets highlights the ongoing cat-and-mouse game between exploiters and the ecosystem, showcasing the power stablecoin issuers now wield in mitigating losses, albeit with potential controversy.

This event underscores the critical importance of robust security protocols for centralized exchanges, particularly those handling vast amounts of user assets. The involvement of Tornado Cash, a privacy mixer, suggests an attempt to obscure the origin and destination of the funds, a common tactic in illicit crypto activities. The market reaction, with drops in Bitcoin and BNB, demonstrates the interconnectedness and sensitivity of the crypto market to major security breaches on leading platforms.

AI-written summary. May contain errors.

Crypto