Binance reports $6.3B theft via compromised DevOps laptop

Following a reported $6.3 billion theft at Binance, preliminary findings suggest an attacker may have compromised a DevOps engineer's laptop to reach an internal service container and submit unauthorized withdrawal transactions. Blockchain analysts concluded the attacker likely manipulated Binance's signing system to approve transactions, while Binance stated it found no evidence of a private key leak. The author argues that organizations must eliminate standing privileges and implement strict, short-lived access controls to mitigate such risks. Open article →