Binance’s record-breaking breach began late Thursday, when a security incident on its offshore platform affected about $6.3 billion in client assets. It came hours after Polymarket’s international platform temporarily halted trading following a separate third-party breach, reinforcing fears that crypto’s security problem is widening rather than easing.¹

For Tyler Moore, a cybersecurity professor at the University of Tulsa, the lesson was blunt: leaving substantial sums on an exchange is “extremely dangerous,” because users lack the built-in protections available to bank depositors when an inevitable hack hits.¹ Ryan Kirkley of Global Settlement Network reached a similarly bleak conclusion, warning that assets are not “truly safe” without a reputable, insured broker-dealer.¹

But others say the aftermath matters as much as the breach. Binance said it would make customers whole, and Blockaid chief executive Ido Ben-Natan argued that users should not lose money if exchanges absorb the damage. University of Pennsylvania professor Brett Falk likewise said a financially backed exchange can offer a better recovery path than a self-custody wallet, where no company is positioned to reimburse a victim.¹

Investigators soon focused on the suspected perpetrators. Blockchain firms linked the theft to TraderTraitor, a group associated with North Korea’s Lazarus network. Binance said attackers compromised an engineer’s laptop and exploited other breach points; co-chief executive Richard Teng described a “complex attack” that used a self-destruct mechanism to erase tools and traces.² Chainalysis said the funds were taken in as little as 20 minutes, while researcher Eric Jardine said the speed of transactions meant “it had to have been done by a computer.”²

By Friday, Binance said partners had frozen at least $3 billion on-chain. The CFTC’s Michael Selig cast the incident as a warning about offshore venues lacking U.S.-style safeguards, though Falk countered that conventional regulation may not reach the authentication software at the heart of such a compromise.¹

The breach also drew an online sideshow. After Elon Musk reacted with emojis, Binance cofounder Changpeng Zhao asked him to stop trolling and “show a little support,” citing Binance’s investment-linked SpaceX stake.³ Two Musk retweets supplied alongside the episode contained no substantive public explanation of his Binance reaction.Elon Musk (elonmusk)⁴Elon Musk (elonmusk)⁵