👨🏾💻 Dev corner: "335 million users leaked"? How to read crypto breach claims
On Nov 9, a seller using the ShinyHunters name listed what they claimed was data on 335 million Binance users, asking 900,000 USD. Binance said it found no evidence that its systems, KYC data, account credentials or wallet private keys were compromised, and called the listing a likely scam.
How these listings usually work:
🔹 Infostealer malware on users' own devices grabs saved passwords, cookies and browser wallet data
🔹 Sellers mix those logs with old leaks and slap a big brand name on top
🔹 Exchanges store hashed passwords, not plain text (Binance said the same)
🔹 No exchange can leak the keys of a self-custody wallet. Those exist only on your device
What actually protects you:
🔹 Use a passkey or hardware security key instead of SMS codes
🔹 Never store your seed phrase in notes, email, cloud photos or chats
🔹 Skip cracked software and random browser extensions. That's how infostealers spread
🔹 Turn on an anti-phishing code and a withdrawal address whitelist
Have you set up address whitelisting yet? 👇
📷 Photo: FlyD / Unsplash
On Nov 9, a seller using the ShinyHunters name listed what they claimed was data on 335 million Binance users, asking 900,000 USD. Binance said it found no evidence that its systems, KYC data, account credentials or wallet private keys were compromised, and called the listing a likely scam.
How these listings usually work:
🔹 Infostealer malware on users' own devices grabs saved passwords, cookies and browser wallet data
🔹 Sellers mix those logs with old leaks and slap a big brand name on top
🔹 Exchanges store hashed passwords, not plain text (Binance said the same)
🔹 No exchange can leak the keys of a self-custody wallet. Those exist only on your device
What actually protects you:
🔹 Use a passkey or hardware security key instead of SMS codes
🔹 Never store your seed phrase in notes, email, cloud photos or chats
🔹 Skip cracked software and random browser extensions. That's how infostealers spread
🔹 Turn on an anti-phishing code and a withdrawal address whitelist
Have you set up address whitelisting yet? 👇
📷 Photo: FlyD / Unsplash
