International
The Morning Dev

Only the news worth knowing

‹
 
D4/100

Breach · high

Binance covers $6.3B in crypto stolen in October 29 theft as funds are laundered through memecoins

Tier D · Background noise – Good to know

Who’s exposed: Binance Holdings users and NEAR memecoin holders

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild

The Brief

  • Hackers who stole $6.3 billion from Binance Holdings Ltd. created at least six memecoins on the NEAR blockchain to launder about $430,000 of stolen funds, according to Elliptic.
  • Bloomberg reports the hackers turned to memecoins to launder a slice of the proceeds from the heist.

Why it matters

Memecoins on NEAR are being used to move stolen crypto, so developers building on NEAR or running exchange and token-monitoring tools may need to watch for similar token activity.

The checklist behind the tier

Checklist · 1 of 10 yes
NoHits tech teamsJudgment: Binance is a consumer crypto exchange; breach exposes its own customers, not developer tooling.
NoCore infrastructureJudgment: a crypto exchange's compromise is not software nearly every team runs.
NoPopular toolJudgment: a widely used exchange, but not a framework, developer tool, platform, OS or package.
YesExploited in the wildBloomberg Technology: hackers stole $6.3 billion from Binance Holdings in a real heist.
NoPublic exploitBloomberg and Techmeme sources report no published exploit code or proof-of-concept.
NoRemote, no loginBloomberg and Techmeme sources do not describe the attack vector or whether credentials were needed.
NoFull takeoverBloomberg and Techmeme sources do not report code execution, admin rights or account takeover.
NoSecrets exposedBloomberg and Techmeme report stolen funds and laundering via memecoins, not stolen credentials, keys or data.
NoSupply chainBloomberg and Techmeme sources report no compromised package, update, build pipeline or signing key.
NoNo fix yetBloomberg and Techmeme sources say nothing about a patch; this is a breach, not a fixable flaw.

Timeline

  1. Techmeme

    Blockaid: Binance hackers stole ~$2.5B, or 40% of the $6.3B haul, in a single Ethereum transaction using wallet permissions that cost just $15 to set up (Sidhartha Shukla/Bloomberg)

  2. The Trail of Bits Blog

    After Binance, check what your signing systems can approve

  3. Elliptic reports six memecoins on NEAR used to launder about $430,000 of stolen Binance funds

  4. Bloomberg Technology

    Binance Hackers Made Memecoins to Launder Stolen Crypto

  5. Techmeme

    Elliptic: hackers behind the $6.3B Binance heist created at least six memecoins on the NEAR blockchain network to launder about $430,000 of stolen funds (Emily Nicolle/Bloomberg)

  6. Techmeme

    Binance says it has covered all of the $6.3B in cryptoassets stolen on October 29, using its profits and emergency funds to replace common and obscure tokens (Teresa Xie/Bloomberg)

  7. The Record from Recorded Future News

    Feds announce seizure of $1.2 billion from Binance theft; also takedown of ‘FaceStealer’ tools

  8. Techmeme

    The DOJ says it got court authorization to seize or restrain $1.2B of the $2.7B frozen by Tether and Circle after North Korea's $6.3B Binance hack on October 29 (Myles Miller/Bloomberg)

Full coverage · 7 sources

First seen · 7 sources · Full story page · How tiers are decided