CZ gave his first public response at the Oxford Union to Binance’s roughly $6.34 billion security incident. He admitted that internal staff had violated basic security procedures, but stressed that the platform had fully absorbed the losses and user funds were unaffected.
Reviewing the details of the attack, he said hackers spent five to six months infiltrating the organization through social engineering before using AI to rapidly map out the system architecture. He also shared deeper thoughts on why blockchain settlement will be essential for high-frequency microtransactions between AI agents, how AI may eventually bypass human programming languages and write bytecode directly, how the Earth’s surface will be covered in silicon, and the underlying differences between U.S. and Chinese regulation.
Three key points
Security is a matter of systems, not promises. CZ acknowledged operational shortcomings: according to his account, the attackers spent five or six months preparing, gained entry through fake recruitment efforts and social engineering, then used AI to accelerate their understanding of the system. But “the attack was too sophisticated” is no excuse. Rather than promising that “it won’t happen again,” he said that, given the asymmetry between attackers and defenders, hardware, access controls, procedures, and anomaly detection must all be strengthened at the same time.
Transparency cuts both ways. On-chain funds can be tracked in real time by third parties, who sometimes spot irregularities before the platform does. The downside is that the impact is amplified just as quickly. He accepts this oversight.
Where does the compensation money come from? Three sources: SAFU, the futures insurance fund, and the company’s balance sheet. He also distinguished between “frozen stolen funds” and “recovered funds that can be used”—the former still require legal proceedings. These were all statements made at the event and have not been independently audited.
A few more valuable observations
Stablecoins, CBDCs, and BTC have different roles rather than replacing one another: stablecoins for cross-border payments, and BTC/ETH/BNB for long-term bets on the ecosystem. AI’s real potential lies in the enormous volume of micropayments between agents. Tokenized U.S. stocks are “both yes and no” for native crypto liquidity—they may divert liquidity in the short term but broaden the space in the long term. On China, he cautioned against getting overly excited by signs of openness: as the number of projects grows, regulatory complexity will also increase.
Reviewing the details of the attack, he said hackers spent five to six months infiltrating the organization through social engineering before using AI to rapidly map out the system architecture. He also shared deeper thoughts on why blockchain settlement will be essential for high-frequency microtransactions between AI agents, how AI may eventually bypass human programming languages and write bytecode directly, how the Earth’s surface will be covered in silicon, and the underlying differences between U.S. and Chinese regulation.
Three key points
Security is a matter of systems, not promises. CZ acknowledged operational shortcomings: according to his account, the attackers spent five or six months preparing, gained entry through fake recruitment efforts and social engineering, then used AI to accelerate their understanding of the system. But “the attack was too sophisticated” is no excuse. Rather than promising that “it won’t happen again,” he said that, given the asymmetry between attackers and defenders, hardware, access controls, procedures, and anomaly detection must all be strengthened at the same time.
Transparency cuts both ways. On-chain funds can be tracked in real time by third parties, who sometimes spot irregularities before the platform does. The downside is that the impact is amplified just as quickly. He accepts this oversight.
Where does the compensation money come from? Three sources: SAFU, the futures insurance fund, and the company’s balance sheet. He also distinguished between “frozen stolen funds” and “recovered funds that can be used”—the former still require legal proceedings. These were all statements made at the event and have not been independently audited.
A few more valuable observations
Stablecoins, CBDCs, and BTC have different roles rather than replacing one another: stablecoins for cross-border payments, and BTC/ETH/BNB for long-term bets on the ecosystem. AI’s real potential lies in the enormous volume of micropayments between agents. Tokenized U.S. stocks are “both yes and no” for native crypto liquidity—they may divert liquidity in the short term but broaden the space in the long term. On China, he cautioned against getting overly excited by signs of openness: as the number of projects grows, regulatory complexity will also increase.
