North Korean hackers drain Binance hot wallet via tunnel in 20 minutes

An alleged North Korean hacker compromised a DevOps engineer's computer, gaining access through a network tunnel to Binance's hot wallet system to exfiltrate approximately $6.3 billion. Binance stated that the transactions were validly signed by their system and that no private keys were actually leaked. The author argues that this vulnerability is structural to automated payout systems and exchanges rather than a failure of private key security. Open article →