CYBERSECURITYTRACKER
Permanent story citation

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11858

As cited

Copy frozen at (site build).

breaches incidents

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

Crypto exchange Binance halted all trading after attackers compromised a DevOps engineer's laptop and used it to submit unauthorized withdrawal transactions. The company froze $6.3 billion in assets and promised to cover customer losses, though it has not yet disclosed how the attacker gained initial access to the engineer's machine. No evidence of private key compromise was found, and Binance stated user funds remain secure pending further investigation.

Why it matters: Cryptocurrency exchange operators and their users face exposure to account takeovers and unauthorized transactions when employee systems lack adequate endpoint security; practitioners should review access controls and monitoring for privileged developer accounts.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

Crypto exchange Binance halted all trading after attackers compromised a DevOps engineer's laptop and used it to submit unauthorized withdrawal transactions. The company froze $6.3 billion in assets and promised to cover customer losses, though it has not yet disclosed how the attacker gained initial access to the engineer's machine. No evidence of private key compromise was found, and Binance stated user funds remain secure pending further investigation.

Why it matters: Cryptocurrency exchange operators and their users face exposure to account takeovers and unauthorized transactions when employee systems lack adequate endpoint security; practitioners should review access controls and monitoring for privileged developer accounts.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary