Binance's $6.36B Crypto Heist Exposes Signing System Flaws

The largest cryptocurrency theft in history, totaling approximately $6.36 billion, targeted Binance on October 29, with attackers exploiting the platform's signing infrastructure rather than breaking its cryptography. The heist was completed in just 20 minutes. Blockchain intelligence firm TRM Labs attributes the attack to the North Korea-linked group TraderTraitor, which gained unauthorized use of Binance's digital signature system to authorize valid transfers. The attackers exploited EIP-7702 functionality on Ethereum, preparing 50 signed authorizations to match a valid transaction counter, while similar attacks occurred across nine other blockchains. The incident highlights the distinction between blockchain security and the systems that authorize transactions, with experts emphasizing the need for stronger access controls and monitoring. Microsoft has separately documented North Korean actors' use of AI tools, though no direct link to this attack has been established.