The Binance Hack | Explained.

Meet Kevin • 2 days ago

Original source

What This Video Is About

The video discusses the largest cryptocurrency heist ever recorded, with estimated losses ranging from $5.5 to $5.8 billion, and explores how the hack occurred, the response and aftermath, and the implications for the market and cybersecurity.

Major Ideas Discussed

  • The hack occurred at approximately 1:20 p.m. Pacific time, 20 minutes after the market closed, with attackers gaining access to Binance's number 14 wallet, an Ethereum hot wallet, using a trick within the Ethereum Improvement Protocol 7702.
  • The attackers used a human engineering attack, likely through social trickery, to install malware on an engineer's laptop, allowing them to access Binance's hot wallets and automatically sign transactions.
  • The use of Ethereum Improvement Protocol 7702 enabled them to perform a "spray" or "fishnet" attack, trying multiple authorization numbers simultaneously to find a match.
  • Binance initially froze about 40% of the stolen funds within an hour of the hack, and other companies, such as Tether, Circle, Ripple, and World Liberty, also froze funds to prevent further theft.
  • The attackers were able to move some of the stolen funds through mixers and bridges, making them harder to track.
  • The hack highlights the vulnerability of hot wallets and the importance of robust security measures, and underscores the need for users to be cautious when interacting with unknown or unverified entities online.

What to Watch Next

The video suggests that users should keep their cryptocurrency in cold storage wallets, which are less vulnerable to hacking, and consider dividing cryptocurrency among multiple cold storage wallets in different locations to further reduce risk. Additionally, considering alternatives like ETFs, which offer securities regulation and audited brokerages, can provide an additional layer of security.