🚨 $6.3 BILLION AT BINANCE, $1.5 BILLION AT BYBIT: THE PROBLEM WITH CRYPTO MAY LIE ELSEWHERE THAN YOU THINK
For years, the crypto industry has invested billions in audits, secure wallets, and new technologies.
Yet the biggest hacks reveal an unsettling truth: you don’t always need to break the blockchain to steal its assets.
Sometimes, all it takes is compromising the system that authorizes transactions.
Here are five cases that illustrate the industry’s costliest vulnerabilities.
🔴 1. Binance: approximately $6.3 billion
The October 29, 2026 incident is exceptionally large in scale. According to Elliptic, attackers transferred assets from wallets associated with Binance across several blockchains.
Initial analyses point to a compromise of the transaction authorization infrastructure. The FBI attributed the attack to the TraderTraitor group, which is linked to North Korea.
The crucial point: infrastructure can be compromised even when no private key leak has been publicly confirmed.
🔴 2. Bybit: approximately $1.5 billion
In February 2025, attackers compromised the validation process for a transfer from an offline Ethereum wallet.
The operation appeared legitimate to the signers, but the approval had been manipulated.
The lesson is fundamental: storing assets offline is not enough if the mechanism used to authorize their transfer can be hijacked.
🔴 3. Ronin: approximately $540 million at the time of the theft
In March 2022, the Ronin network, associated with the game Axie Infinity, lost 173,600 ETH and 25.5 million USDC.
The attackers had compromised enough validator keys to reach the required approval threshold.
This case illustrates the danger of concentrating too much validation power in too few hands.
🔴 4. Poly Network: approximately $611 million
In August 2021, a flaw in the authorization logic of a cross-chain protocol enabled the transfer of hundreds of millions of dollars in tokens.
One detail makes this case different: the attacker ultimately returned or gave back most of the assets.
This is a reminder of why the initial amount stolen in a hack does not necessarily equal the final loss.
🔴 5. Wormhole: approximately $320 million
In February 2022, a flaw in cross-chain transfer verification enabled the creation of 120,000 wrapped ETH without corresponding collateral.
Jump Crypto later provided the funds needed to restore the collateral.
Users were therefore protected, but that did not mean all the assets held by the attacker had been recovered.
WHAT THESE CASES HAVE IN COMMON
These incidents do not all stem from the same vulnerability. But they reveal several recurring problems:
• Systems that authorize transactions can be just as critical as the private keys themselves.
• An offline wallet does not offer absolute protection if its validation process is compromised.
• Cross-chain bridges add verification mechanisms that can become points of failure.
• Frozen, recovered, or replaced funds are not the same thing.
• A platform’s size alone does not guarantee the security of its infrastructure.
My analysis: the next major advance in crypto security may not come solely from new protocols. It could also come from stricter internal controls, independent validation, better separation of privileges, and monitoring capable of detecting an unusual transaction before it spreads.
So the real question is not just which platform holds the most assets.
It’s whether it can prevent a single compromise from triggering a catastrophe.
If you had to entrust your cryptocurrency to a platform, which criterion would be your top priority: proof of reserves, wallet security, incident transparency, or the ability to compensate customers?
#CryptoSecurity #Binance #Bybit #Blockchain #Cybersecurity