The attack began late Thursday, when Binance said a security incident had affected roughly $6.3 billion in client assets—the largest crypto theft on record. The exchange halted withdrawals and deposits, later restoring deposits, while blockchain partners froze at least $3 billion on-chain. Investigators linked the operation to TraderTraitor, a group associated with North Korea’s Lazarus network.¹

The suspected attackers appear to have gained access through a compromised engineer’s laptop and other undisclosed breach points. They then moved at extraordinary speed: Chainalysis researchers said the funds were taken in as little as 20 minutes, while TRM Labs found preparations began just 36 hours earlier. “It had to have been done by a computer,” Chainalysis researcher Eric Jardine said, pointing to transaction volumes and frequency that appeared beyond human approval.¹

That pace sharpened an old argument over where crypto holders are safest. Tyler Moore, a University of Tulsa cybersecurity professor, called it “extremely dangerous” to leave significant sums on an exchange, arguing that users lack the deposit protections available in conventional banking.² Ryan Kirkley of Global Settlement Network went further: “I do not think there’s anything right now that is a common solution in the marketplace where your assets are truly safe.”²

Others drew the opposite conclusion. Blockaid chief executive Ido Ben-Natan said Binance’s pledge to cover losses meant “no users will lose any money,” and argued that an exchange with the resources to compensate victims can be safer than a self-custody wallet with no backstop.²

Regulation is another fault line. CFTC Chairman Michael Selig stressed that Binance’s offshore platform lacked the cybersecurity safeguards required in U.S. markets. But University of Pennsylvania professor Brett Falk said rules might not have prevented a compromise of the underlying authentication systems.²

By Friday, the fallout had also turned personal: Binance cofounder Changpeng Zhao asked Elon Musk to stop trolling the company and “show a little support,” citing Binance’s investment-linked stake in SpaceX.³