As much as I hate to admit it, with AI advancing so rapidly, institutions and companies that centrally custody crypto are likely to keep getting burned by security issues.
This time, Binance suffered the largest theft in history, with approximately $6.3 billion stolen. Funds were drained from hot wallets across multiple chains within 20 minutes. Initial indications point to an engineer’s laptop being compromised, and more points of intrusion were discovered later. Several analytics firms strongly suspect the North Korean hacking group TraderTraitor. Roughly half of the funds—mainly stablecoins—have been frozen; most of the rest consists of assets such as BTC and ETH, which are difficult to freeze. Binance has pledged to cover the losses in full and says users’ funds are safe.
But this isn’t the first time, and it won’t be the last.
Incidents involving Bybit ($1.5 billion), Bitget, and others have repeatedly shown that centralized custody itself creates a huge attack surface. Assets, permissions, signing systems, and employee devices are highly concentrated. Once an attacker breaks through, the losses are systemic.
AI is further reshaping offense and defense:
Attackers can more easily scale zero-day discovery, automate phishing, and rapidly move and launder funds across multiple chains.
Defenders are also using AI for monitoring and response, but weaknesses at the operational level—people, devices, and permissions—are difficult to eliminate entirely.
Large exchanges usually have reserves and promises to cover losses, so they are unlikely to collapse easily. But frequent security incidents are a long-term trend. More and more people will take that old saying seriously again:
Not your keys, not your coins
Manage your own long-term holdings; use exchanges only for trading liquidity. AI will amplify both offensive and defensive capabilities, but the risk of centralized, high-value single points of failure will remain.
This is almost certainly not the last time.
$BTC $ETH #btc #eth
This time, Binance suffered the largest theft in history, with approximately $6.3 billion stolen. Funds were drained from hot wallets across multiple chains within 20 minutes. Initial indications point to an engineer’s laptop being compromised, and more points of intrusion were discovered later. Several analytics firms strongly suspect the North Korean hacking group TraderTraitor. Roughly half of the funds—mainly stablecoins—have been frozen; most of the rest consists of assets such as BTC and ETH, which are difficult to freeze. Binance has pledged to cover the losses in full and says users’ funds are safe.
But this isn’t the first time, and it won’t be the last.
Incidents involving Bybit ($1.5 billion), Bitget, and others have repeatedly shown that centralized custody itself creates a huge attack surface. Assets, permissions, signing systems, and employee devices are highly concentrated. Once an attacker breaks through, the losses are systemic.
AI is further reshaping offense and defense:
Attackers can more easily scale zero-day discovery, automate phishing, and rapidly move and launder funds across multiple chains.
Defenders are also using AI for monitoring and response, but weaknesses at the operational level—people, devices, and permissions—are difficult to eliminate entirely.
Large exchanges usually have reserves and promises to cover losses, so they are unlikely to collapse easily. But frequent security incidents are a long-term trend. More and more people will take that old saying seriously again:
Not your keys, not your coins
Manage your own long-term holdings; use exchanges only for trading liquidity. AI will amplify both offensive and defensive capabilities, but the risk of centralized, high-value single points of failure will remain.
This is almost certainly not the last time.
$BTC $ETH #btc #eth