
{"id":245660,"date":"2026-10-30T07:40:03","date_gmt":"2026-10-30T07:40:03","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=245660"},"modified":"2026-10-30T07:40:03","modified_gmt":"2026-10-30T07:40:03","slug":"binance-hit-by-a-6-3b-security-nightmare-nikita-bier-mocks-cz-while-zachxbt-spots-a-bigger-threat","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=245660","title":{"rendered":"Binance Hit by a $6.3B Security Nightmare: Nikita Bier Mocks CZ, While ZachXBT Spots a Bigger Threat"},"content":{"rendered":"<p>The Binance hack has given the crypto industry one of those moments when the memes, the money, and the uncomfortable questions all arrive at once.<\/p>\n<p>Nikita Bier, X\u2019s former head of product, didn\u2019t hold back either. Taking a direct swipe at CZ, he wrote,<\/p>\n<p>\u201cThe largest crypto exchange in the world just experienced the largest robbery in human history \u2013 and the person running it is a nomadic autistic man in Dubai posting \u201cFunds are SAFU!\u201d What a time to be alive.\u201d<\/p>\n<p>Meanwhile, Elon Musk said that \u201cEveryday is Zeroday.\u201d<\/p>\n<h2>Inside the Binance Hack<\/h2>\n<p>On October 29, Binance <a href=\"https:\/\/cryptopotato.com\/binance-suffers-6-3-billion-hack-pledges-to-cover-all-user-losses\/\">suffered<\/a> a major security incident with an estimated impact of approximately $6.3 billion, according to the crypto exchange\u2019s own update. On-chain investigations traced billions in unauthorized outflows across multiple blockchains, including Ethereum, Bitcoin, Tron, Arbitrum, Optimism, and Avalanche. The important detail is that Binance\u2019s preliminary investigation points towards a compromised DevOps engineer\u2019s laptop, which may have allowed the attacker to access a service container and submit unauthorized withdrawal transactions.<\/p>\n<p>Binance says it has found no evidence of a wallet private-key leak. Blockchain investigators also identified the use of EIP-7702 authorizations, with 50 signed authorizations submitted in an attempt to match the wallet\u2019s changing nonce. One successfully matched, which allowed malicious code to execute against the affected wallet. The investigation is still ongoing, so the complete attack pathway has not yet been officially established.<\/p>\n<p>Tether froze more than $1.567 billion in USDT, while Circle froze over $800 million in USDC in coordination with law enforcement. Arbitrum\u2019s Security Council also intervened to freeze assets, alongside other token issuers. Binance\u2019s reported frozen total has approached $3 billion, although the exact figure has changed as recovery efforts progressed. That still leaves a substantial amount to trace and recover.<\/p>\n<p>CZ, who no longer runs Binance but remains a major shareholder, said the incident did look like a hack and expressed confidence that users would be fully covered. Co-CEO Yi He also confirmed that the crypto exchange would absorb the losses through its SAFU fund and company resources. Deposits and withdrawals were temporarily suspended while security checks were conducted, and Binance Alpha trading was also paused.<\/p>\n<p>But the shock traveled well beyond Binance. Bitcoin briefly fell near $76,300, <a href=\"https:\/\/cryptopotato.com\/bitcoin-crashes-to-76k-1-5b-liquidated-after-cryptos-biggest-hack\/\">wiping out<\/a> nearly $478.9 million in positions, 84.6% of which were longs. Ethereum wasn\u2019t far behind, recording $363.5 million in liquidations, with long traders accounting for 83.5%, according to Crypto Patel\u2019s estimates. Solana followed with $82.1 million, while XRP saw $38.1 million wiped out. HYPE was an interesting exception, with $31.3 million in liquidations and short positions taking the heavier hit.<\/p>\n<p>DeFi felt the shockwave too. Aave, for instance, <a href=\"https:\/\/x.com\/aave\/status\/2115937863162339637\">froze<\/a> 175 markets across 16 networks on V3, along with another 117 markets on V4, as a precautionary measure. Kamino also paused SOL and BTC borrowing to limit potential exposure.<\/p>\n<h2>Same Hacker Behind Both Exploits?<\/h2>\n<p>ZachXBT has <a href=\"https:\/\/x.com\/zachxbt\/status\/2116030284261179538\">found<\/a> a link between the Binance and Bitget exploits. He said that the stolen funds from both incidents <a href=\"https:\/\/cryptopotato.com\/how-zachxbt-infiltrated-a-crypto-laundering-network-handling-bybit-and-other-stolen-funds\/\">ended<\/a> up at the same wallet address after passing through THORChain. The popular blockchain investigator believes this points to the same attacker being behind both hacks.<\/p>\n<p>The Bitget exploit was previously linked to North Korea-associated group TraderTraitor, which has also been connected to other incidents, including the Kelp DAO exploit. MistTrack also found that stolen TRX from the Binance hack moved through Bitget Wallet Swap Bridge to an address starting with 0xCd68. That wallet had previously been used by the Phemex hacker.<\/p>\n<p>The post <a href=\"https:\/\/cryptopotato.com\/binance-hit-by-a-6-3b-security-nightmare-nikita-bier-mocks-cz-while-zachxbt-spots-a-bigger-threat\/\">Binance Hit by a $6.3B Security Nightmare: Nikita Bier Mocks CZ, While ZachXBT Spots a Bigger Threat<\/a> appeared first on <a href=\"https:\/\/cryptopotato.com\/\">CryptoPotato<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>The Binance hack has given the crypto industry one of those moments when the memes, the money, and the uncomfortable questions all arrive at once. Nikita Bier, X\u2019s former head of product, didn\u2019t hold back either. Taking a direct swipe at CZ, he wrote, \u201cThe largest crypto exchange in the world just experienced the largest [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-245660","post","type-post","status-publish","format-standard","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/245660"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=245660"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/245660\/revisions"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=245660"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=245660"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=245660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}