As cited
Copy frozen at (site build).
breaches incidents
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Crypto exchange Binance halted all trading after attackers compromised a DevOps engineer's laptop and used it to submit unauthorized withdrawal transactions. The company froze $6.3 billion in assets and promised to cover customer losses, though it has not yet disclosed how the attacker gained initial access to the engineer's machine. No evidence of private key compromise was found, and Binance stated user funds remain secure pending further investigation.
Why it matters: Cryptocurrency exchange operators and their users face exposure to account takeovers and unauthorized transactions when employee systems lack adequate endpoint security; practitioners should review access controls and monitoring for privileged developer accounts.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
Crypto exchange Binance halted all trading after attackers compromised a DevOps engineer's laptop and used it to submit unauthorized withdrawal transactions. The company froze $6.3 billion in assets and promised to cover customer losses, though it has not yet disclosed how the attacker gained initial access to the engineer's machine. No evidence of private key compromise was found, and Binance stated user funds remain secure pending further investigation.
Why it matters: Cryptocurrency exchange operators and their users face exposure to account takeovers and unauthorized transactions when employee systems lack adequate endpoint security; practitioners should review access controls and monitoring for privileged developer accounts.
- Source published
- First seen by Cybersecurity Tracker