Binance Sees “Security Breach”
Binance, a Malta-registered Bitcoin & crypto asset exchange that is one of the most well-respected in the market, has just revealed that it has been slammed by a “large scale security breach”. The platform reports a loss of 7,000 BTC, valued at $42 million at current values.
Early Tuesday, Changpeng “CZ” Zhao, the chief executive of Binance, took to Twitter to reveal that has platform had to undergo “unscheduled server maintenance” that would “impact deposits and withdrawals”. Interestingly, CZ noted that the “funds are #safu”, evidently trying to reassure users that nothing was amiss.
But as we and the rest of the cryptocurrency community have learned through a Binance blog post, funds, namely a large sum of BTC, aren’t entirely SAFU. In the post, it was explained that earlier today, “hackers”, which remain unnamed, were able to obtain a large number of user API keys, two-factor authentication codes, and “potentially other” tidbits of information, giving them access to users’ accounts on the platform, withdrawal permissions included. It was elaborated:
“The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time. The transaction is structured in a way that passed our existing security checks.”
Binance reports that the malicious group/entity used a serious of techniques to get their hands on this information, including phishing, viruses, potentially the extremely devious SIM swapping technique, and “other [vectors of] attack.” Once hackers managed to get their hands on the aforementioned bits of information, they were able to withdraw 7,000 BTC from Binance’s hot wallet. The company asserts that 7,000 BTC…