WEBVTT

1
00:00:00.399 --> 00:00:04.112
Forty minutes. Five point eight billion dollars.

2
00:00:04.810 --> 00:00:08.307
Binance, the world's largest exchange, has just suffered the biggest

3
00:00:08.327 --> 00:00:09.823
theft in crypto history.

4
00:00:10.533 --> 00:00:13.842
What happened? This video explains it.

5
00:00:15.399 --> 00:00:20.415
First, two terms. An exchange keeps its big reserves in cold wallets,

6
00:00:20.435 --> 00:00:24.765
like a bank vault. Its everyday funds sit in hot wallets, like the cash

7
00:00:24.785 --> 00:00:27.127
drawer at a checkout, ready for withdrawals.

8
00:00:27.837 --> 00:00:30.693
This time, several Binance hot wallets were emptied.

9
00:00:32.249 --> 00:00:34.321
The hacker had prepared in advance.

10
00:00:35.005 --> 00:00:38.196
On the twenty-eighth, they withdrew some money from the mixer Tornado

11
00:00:38.216 --> 00:00:40.141
Cash to pay transaction fees.

12
00:00:40.851 --> 00:00:44.066
On the twenty-ninth, they wrote their sweeping program and repeatedly

13
00:00:44.086 --> 00:00:45.803
rehearsed it on their own wallets.

14
00:00:47.349 --> 00:00:51.051
At around four a.m. Beijing time on the thirtieth, the attack began.

15
00:00:51.760 --> 00:00:54.481
XRP, Solana, Bitcoin and TRON.

16
00:00:55.191 --> 00:00:58.182
Chain after chain, hot wallets were drained one by one.

17
00:00:58.892 --> 00:01:02.349
More than eighteen thousand bitcoins were moved in a single stretch.

18
00:01:03.899 --> 00:01:05.873
The biggest hit was on Ethereum.

19
00:01:06.582 --> 00:01:09.675
The hacker obtained signing authority for the Binance Fourteen hot

20
00:01:09.695 --> 00:01:13.927
wallet. They made the wallet sign an authorization, handing control to

21
00:01:13.947 --> 00:01:18.155
their program. One transaction swept away a hundred and sixty-seven

22
00:01:18.175 --> 00:01:21.435
thousand ether, plus one point six billion USDT.

23
00:01:22.999 --> 00:01:25.549
Less than forty minutes, across eight chains.

24
00:01:26.246 --> 00:01:29.829
Estimates put the stolen amount between five point three and six point

25
00:01:29.849 --> 00:01:34.253
three billion dollars. Nearly four times the previous record, Bybit's

26
00:01:34.273 --> 00:01:36.320
one point five billion dollar theft.

27
00:01:37.849 --> 00:01:40.374
Fortunately, stablecoins can be frozen.

28
00:01:41.083 --> 00:01:44.381
At around five a.m., Tether began freezing USDT.

29
00:01:45.091 --> 00:01:48.404
One wallet was only forty-eight seconds late, and a hundred and thirty

30
00:01:48.424 --> 00:01:49.883
million was already gone.

31
00:01:50.593 --> 00:01:53.952
Circle froze eight hundred and twenty-three million USDC.

32
00:01:54.662 --> 00:01:56.194
Ripple and others followed.

33
00:01:56.892 --> 00:02:00.116
Together, they froze more than two point five billion dollars.

34
00:02:01.649 --> 00:02:05.575
On Binance's side, shortly after five a.m., CZ posted that it did look

35
00:02:05.595 --> 00:02:06.380
like a hack.

36
00:02:07.899 --> 00:02:11.396
The official statement was edited twice in thirteen minutes, eventually

37
00:02:11.416 --> 00:02:13.819
adding: user funds are completely safe.

38
00:02:15.349 --> 00:02:18.687
At eight a.m., Yi He and the official account both said Binance would

39
00:02:18.707 --> 00:02:19.909
cover all losses.

40
00:02:21.449 --> 00:02:23.496
As the news broke, markets fell.

41
00:02:24.193 --> 00:02:27.923
Bitcoin dropped more than four percent, and BNB fell below seven hundred

42
00:02:27.943 --> 00:02:31.596
dollars. The hacker kept selling and moving coins.

43
00:02:32.306 --> 00:02:34.978
More than three billion dollars remained unfrozen.

44
00:02:36.549 --> 00:02:39.650
Three things were still unconfirmed: the final amount lost;

45
00:02:39.748 --> 00:02:41.660
how the hacker obtained signing authority;

46
00:02:41.721 --> 00:02:44.577
and whether North Korea's Lazarus group was responsible.

47
00:02:45.274 --> 00:02:48.820
The methods looked similar to the Bybit case, but there was no official

48
00:02:48.840 --> 00:02:49.759
confirmation.

49
00:02:51.299 --> 00:02:55.197
For ordinary users, Binance has pledged to cover all of your funds.

50
00:02:55.906 --> 00:02:59.644
Some withdrawals are paused, so wait patiently for official updates.

51
00:03:00.342 --> 00:03:03.419
Never trust direct messages offering to help you withdraw.

52
00:03:04.117 --> 00:03:06.372
This is when scammers are most active.

53
00:03:07.899 --> 00:03:11.359
No matter how big an exchange is, its hot wallets can still be emptied

54
00:03:11.379 --> 00:03:15.117
in one go. We will keep following the developments.