Security

Stay informed on cybersecurity and blockchain security news, including smart contract vulnerabilities, protocol exploits, phishing attacks, wallet security, data breaches, and emerging threats. Learn about security best practices, industry responses, and developments aimed at protecting users and digital assets.

Featured only

On Thursday 29 October at 20:24 UTC, a single transaction on Ethereum sent 1.6 billion dollars in Tether, 167,464 ether and 62 other tokens from a Binance withdrawal wallet to an attacker. Three and a half minutes earlier, the attacker had taken control of that wallet with a permission carrying the wallet's own signature, according to TRM Labs. Binance estimates the total impact at about $6.3 billion, across ten networks. In 2003, Saddam Hussein's son had $1 billion in cash loaded onto three tru

Binance suffers $6 billion crypto theft in 20 minutes, largest in history

TRM Labs said the trail leads to North Korea. User funds cannot be withdrawn for now.

Binance Says It Will Cover All Losses After $6.3 Billion Hack

Binance said it will cover all losses. It said it will bear the full cost.

Binance Hack Claims, Nearly 200 Billion Crypto Loss Raise Questions About Binance Thailand Safety

On-chain data show that at least $5.57 billion in crypto assets was transferred out. The transfer may be the largest digital asset theft in history.

Signed by itself. At 04:20 Beijing time this morning, one transaction carrying 50 EIP7702 authorizations was signed by a Binance hot wallet’s own private key. About three minutes later, the wallet was swept. Across three chains, roughly $5.8B at this morning’s prices. The Bitcoin portion is not yet confirmed by Binance. No contract bug has been seen onchain. The problem sits in the signing step. Our onchain recap: how the money moved, what is now frozen, and the one question every exchange sh

Arbitrum Moves $30.25M in ETH and ARB From Hacker Wallet After Binance Theft

A hacker stole 8,426 ETH and 74.56 million ARB from Binance this morning. Fifteen minutes ago, Arbitrum officials moved the assets from the hacker's wallet.

Grok按照时间总结的这次币安被盗的全部细节,原来黑客昨晚就开始准备了: 1、准备阶段 1)10月28日:攻击者地址(标记为发起方,如 0x7c86...5ca0)从Tornado Cash分多次获得少量ETH作为gas费(约三笔0.1 ETH级别),提前布局。 2)10月29日下午至傍晚:攻击者部署专门的清扫(sweeper)合约。期间有测试/演练交易,使用自身地址验证EIP7702委托与扫荡流程。最终清扫合约约在下午部署完成。 2、主攻击阶段(10月30日凌晨) 1)约04:20:攻击者通过EIP7702对Binance 14热钱包提交委托授权。交易中携带了约50个连续nonce的授权签名(全部由Binance 14自身私钥签署),确保即使nonce快速变化也能命中其中一个。授权生效后,Binance 14临时/持续执行攻击者部署的清扫合约代码。 2)04:24:主扫荡开始。Binance 14在一笔交易中转出约16.7万枚ETH(约3.8–3.9亿美元)+ 约16.15亿USDT + 60多种其他代币(包括RLUSD、wBETH、UNI、ENA、PEPE、LINK、AAVE等)至

Binance hot wallets drained of over $5.6B in 40 minutes in largest crypto hack on record

More than $5.6 billion was stolen from Binance hot wallets in 40 minutes, including ETH, USDT, USDC and more than 60 tokens. The incident exceeds the 2025 Bybit hack of $1.5 billion and ranks as the largest in history. Tether and Circle froze about $2.4 billion combined.

Hack involving over $5.6 billion in crypto assets is largest in history

The attack involved BTC, ETH, USDT and other assets. Tether and Circle have frozen at least $2.3 billion of the funds.

Attackers reportedly exploited Ethereum’s EIP7702 to drain Binance wallets, moving $780 million in USDC

Attackers used signed authorizations to install malicious code. They moved ETH and tokens. They also moved 780 million USDC from a Binance hot wallet. Binance said user funds were safe and that it was investigating.

Risk Warning

Cryptocurrencies and their derivatives are innovative financial products with great volatility and high investment risks.

Although BingX is committed to providing users with easy-to-use trading tools, trading itself is still a highly sophisticated field. Trading digital assets and their derivatives are subject to high market risk and price volatility and may result in partial or total loss of account funds. You must carefully consider and exercise clear judgment to evaluate your financial situation and the aforementioned risks before using BingX Services. You shall be responsible for all losses arising therefrom. If necessary, please consult relevant professionals to make informed decisions before investing. By accessing, downloading, using or clicking on "I agree" to accept any BingX Services provided by BingX, you agree that you have read, understood and accepted all of the terms and conditions stipulated in BingX Terms of Use as well as our Privacy Policy.

Trading by copying or replicating the trades of other traders involves a high level of risks, even when copying or replicating the top-performing traders. Past performance of a BingX community member is not a reliable indicator of his future performance. Content on BingX's trading platform is generated by members of its community and does not contain advice or recommendations by or on behalf of BingX.