Removing Banks From Banking Also Removed the Locks.
SINGAPORE — Hackers stole approximately $6.3 billion in cryptocurrency from wallets used by Binance, delivering the digital-finance industry a devastating lesson in the difference between disrupting banking and forgetting why banks have locks.
Binance Hack: What Reuters Reported
Reuters reported on October 30 that the theft unfolded in a matter of minutes. Binance said it would cover losses and that customer funds were safe; cryptocurrency issuers froze a substantial portion of the stolen assets. These are important safeguards, although they do slightly complicate the revolutionary promise that no centralized institution should ever interfere with anybody’s money.
For years, crypto enthusiasts have celebrated the liberation of finance from traditional intermediaries. No more old-fashioned banks. No more stuffy tellers. No more people in suits asking boring questions about account ownership. Instead, a sophisticated online platform can be attacked while everyone watches six billion dollars change addresses without requesting a moving truck.
The Good Freezes
An investor outside a Singapore coffee shop explained his philosophy: “I don’t trust banks because they can freeze your account.” Asked whether he welcomed issuers freezing stolen crypto, he answered, “That’s different. Those are the good freezes.” Finance has never been short of principles that collapse when the money starts moving.
How a Crypto Exchange Theft Happens So Fast
The size of the loss is staggering. Six-point-three billion dollars could buy entire neighborhoods, fund hospitals or commission enough self-help books to persuade every affected investor that the theft is actually a growth opportunity. In the crypto industry, however, a catastrophe is often called a “stress test” until the lawyers arrive.
The Forensic Findings, Such As They Are
Cybersecurity experts study compromised credentials, wallet controls and weaknesses in systems that process transactions. Such details matter greatly in determining what happened. A preliminary forensic summary, read aloud by one analyst to a room that included three journalists and a man who had come for the free pastries, found that the intrusion “exhibited patience, precision and a thorough understanding of the target’s operations.” The analyst added that the attackers “also appeared to have read the documentation, which is more than can be said for several of the executives.” The simpler explanation is that somebody found the digital equivalent of a vault door, opened it and discovered that the alarm system was a community discussion thread.
Traditional banks can be targets of cybercrime too, and crypto transactions have legitimate uses. The issue is not that digital assets automatically invite theft. It is that an industry advertising technological sophistication must be judged by what it can protect, not by how complicated its vocabulary sounds. The Cybersecurity and Infrastructure Security Agency publishes free guidance on exactly this, and it is considerably shorter than a whitepaper.
A Spokesperson Looks on the Bright Side
A company spokesperson read an investor-relations statement identifying three positives: the blockchain remained operational, transaction settlement was rapid and the thieves experienced excellent customer service. Management asked that the final bullet point be struck as insufficiently optimistic. Blockchain analytics firms such as Chainalysis have long tracked movements like this, though none of them promised to bring anything back before dessert.
The Group Chat, Leaked
A screenshot of a group chat among account holders, posted online, captures the mood. 9:14 a.m.: “anyone else seeing a weird number?” 9:15: “my balance is just a shrug.” 9:17: “This is fine, I’m sure it’s a rounding error.” 9:21: “Brian, it is six billion dollars. That’s not a rounding error, that’s a country.” Brian has not replied.
A second investor offered a practical lesson: never mistake a rising asset price for evidence of sound security. A vault full of gold bars is valuable, but nobody considers it safe merely because the gold had a good quarter.
Where Is My Money, and Who Has the Key?
Meanwhile, ordinary account holders faced a rather traditional set of concerns: access to their funds, reimbursement and the safety of their savings. For all its futuristic jargon, the industry has returned to the oldest question in money management: where is my money, and who has the key?
Crypto promised to make the middleman obsolete. The hackers apparently agreed and skipped straight to the cash register.
5 Humorous Observations About Crypto Heists
- Six billion dollars gone in twenty minutes. My bank can’t even approve a wire in twenty business days. That’s the thing. The criminals have better customer service than my credit union.
- “Decentralized” means no one’s in charge. And when the money disappears, no one’s in charge of that, either. It’s like a potluck where somebody takes all the casserole and there’s no host to yell at.
- They told us banks were the problem. Banks have vaults, cameras, a guy named Dale with a flashlight. Crypto has a Discord. The Discord has a mascot. The mascot is a frog. The frog did not stop six billion dollars.
- Everybody loves to say “not your keys, not your coins.” And then it turns out nobody has the keys. The keys are in a guy’s pocket in a different time zone. He’s on vacation.
- The most expensive sentence in the English language is, “It’s totally secure.” The second most expensive is, “We’re looking into it.”