Dunyodagi eng yirik kripto birjasi Binance taxminan 6,3 milliard dollarlik kriptovalyuta o'g'irligini DevOps muhandisining buzilgan noutbukiga bog'ladi.
Kripto birja ma'lum qilishicha, hujumchilar xizmat konteyneriga kirishganidan so'ng ruxsatsiz pul yechish operatsiyalarini yuborish imkoniga ega bo'lishgan va hozircha hamyon shaxsiy kalitining sizib chiqqaniga dalil topilmagan.
"Aniq aytish kerak: hujumchi shunchaki bitta muhandisning ruxsatlaridan foydalanmadi va bu bitta 'bir marta bosish' harakati emas edi. Bu murakkabroq hujum jarayonini o'z ichiga oldi. Bizning tekshiruvimiz hech bir shaxsga javobgarlikni yuklamadi," — dedi Binance hamraisi Richard Teng.
Binance shuningdek, "qo'shimcha buzilish nuqtalarini aniqladi", lekin "hali faktlarni yig'moqda va ular mavjud bo'lishi bilanoq to'g'ridan-to'g'ri ulashadi" deb aytdi.
Kompaniya BleepingComputer bilan payshanba kuni ulashilgan bayonotda buzilishni tasdiqladi va mijozlarga ularning mablag'lari xavfsiz ekanligini ta'kidladi.
"Binance SAFU fondi va kompaniya mablag'laridan barcha yo'qotishlarni qoplaydi. Foydalanuvchi mablag'lari xavfsiz. Remediatsiya tugallangach, yangilangan Zaxira isbotini ham e'lon qilamiz," — deb aytdi u.
Hujumdan beri Binance xavfsizlik tekshiruvlarini o'tkazish davomida depozit va yechib olishni to'xtatdi, ta'sirlangan manzil uchun ruxsatlarni bekor qildi va o'g'irlangan mablag'larni kuzatish va qaytarish uchun blokcheyn razvedka hamkorlari va huquqni muhofaza qilish organlari bilan ishlamoqda.
Shimoliy Koreya xakerlari bilan bog'liq kripto o'g'irligi
Kompaniya hodisani hech bir xaker guruhi yoki tahdid aktoriga bog'lamagan bo'lsa-da, blokcheyn tahlil firmasi TRM hujumni TraderTraitor — Lazarus Group va APT38 nomlari bilan ham kuzatiladigan Shimoliy Koreya davlat tomonidan qo'llab-quvvatlanadigan xaker birligiga bog'ladi.
"2026-yil 29-oktabrda hujumchi Binance hamyonlaridan o'n blokcheynda taxminan 6,36 milliard AQSh dollari miqdorida mablag'ni ko'chirdi, aksariyati 20:05 UTC dan boshlab taxminan 20 daqiqa ichida. Bu rekord darajadagi eng yirik kripto o'g'irligi bo'lib, 2025-yil fevralidagi 1,5 milliard dollarlik Bybit xakerligidan taxminan to'rt baravar katta," — dedi TRM.
Blokcheyn razvedka firmasi Chainalysis TRM Labs natijalarini tasdiqlab, "yuqori darajadagi ishonch" bilan TraderTraitor Binance 6,4 milliard dollarlik xakerligi uchun javobgar ekanligini aytdi.
Stabilkoin emitentlari Tether, Circle, Ripple va boshqalar hodisadan beri taxminan 2,7 milliard dollarni muzlatgan bo'lsa-da, hujumchilar hali ham muzlatib bo'lmaydigan taxminan 2,4 milliard dollarni nazorat qilmoqda.
"Tether, Circle, Ripple va World Liberty Financial taxminan 2,67 milliard dollarlik stabilkoinlarni muzlatdi, Arbitrum Xavfsizlik Kengashi esa tarmog'ida 8 426 ETH va 74,6 million ARB ni muzlatdi, jami taxminan 2,7 milliard dollar," — deb qo'shdi TRM.
"Hujumchi muzlatishlardan oldin USDT ni bozor ishlab chiqaruvchilarga sotish va Aave'da USDT ga qarshi ETH qarz olish orqali poygani tezlashtirdi. Endi u 420 000 dan ortiq ETH va 18 270 BTC, ya'ni har qanday emitent nazoratidan tashqarida taxminan 2,4 milliard dollarlik aktivlarga ega."
TraderTraitor xakerlari avval ham ko'plab yirik kripto o'g'irlik hodisalariga, jumladan 2025-yil fevralidagi Bybit xakerligida 1,5 milliard dollar o'g'irlanishiga bog'langan edi. 6,36 milliard dollar bilan Binance hujumi endi qayd etilgan eng yirik kripto o'g'irligi hisoblanadi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37 foizi bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanayotganda, oldini olish keskin pasayadi.
Blue Report 2026 mijoz ishlab chiqarish muhitlarida o'tkazilgan 338 million simulyatsiya bo'yicha texnikadan texnikaga himoyalarni o'lchaydi.
Hisobotni oling
Binance, the world's largest crypto exchange, has linked the theft of about $6.3 billion in cryptocurrency to a DevOps engineer's compromised laptop.
The crypto exchange said the access let attackers submit unauthorized withdrawal transactions after they accessed a service container, and it hasn't yet found evidence of a leaked wallet private key.
"To be clear: the attacker did not simply use one engineer's permissions, and this was not a single 'one-click' action. It involved a more complex attack process. Our investigation has not attributed responsibility to any individual," Binance Co-CEO Richard Teng said.
Binance also said it "uncovered additional points of breach" but was "still gathering the facts, and will share more directly as we have them."
The company confirmed the breach in a statement shared with BleepingComputer on Thursday and reassured customers that their funds were safe.
"Binance will cover all losses from the SAFU fund and the company's funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete," it said.
Since the attack, Binance has suspended deposits and withdrawals while it conducts security checks, revoked authorizations for the affected address, and is working with blockchain intelligence partners and law enforcement to trace and recover the stolen funds.
Crypto theft linked to North Korean hackers
Although the company didn't link the incident to a hacking group or threat actor, blockchain analysis firm TRM attributed the attack to TraderTraitor, a North Korean state-backed hacking unit also tracked as Lazarus Group and APT38.
"On October 29, 2026, an attacker moved approximately USD 6.36 billion out of Binance wallets on ten blockchains, most of it in about 20 minutes starting at 20:05 UTC. That makes this the largest crypto theft on record, about four times the USD 1.5 billion Bybit hack of February 2025," TRM said.
Blockchain intelligence firm Chainalysis confirmed TRM Labs' findings, stating with "a high degree of confidence" that TraderTraitor is responsible for the Binance $6.4 billion hack.
While stablecoin issuers Tether, Circle,Ripple, and others have frozen roughly $2.7 billion since the incident, the attackers still have control of about $2.4 billion that can't be frozen.
"Tether, Circle, Ripple and World Liberty Financial froze about USD 2.67 billion in stablecoins, and Arbitrum's Security Council froze 8,426 ETH and 74.6 million ARB on its network, for a total of roughly USD 2.7 billion,"TRM added.
"The attacker raced the freezes by selling USDT to market makers and borrowing ETH against USDT on Aave. It now holds more than 420,000 ETH and 18,270 BTC, about USD 2.4 billion in assets beyond any issuer's reach."
The TraderTraitor hackers were previously linked to many other major crypto theft incidents, including the theft of $1.5 billion in the February 2025 Bybit hack. At $6.36 billion, the Binance attack is now the largest recorded crypto heist.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report
