Binance’s $6.34 Billion Reserve Faces a Broader Infrastructure Test
What happened: Investigators reported that approximately $6.
What happened: Investigators reported that approximately $6.36 billion was drained across 10 blockchains in roughly 20 minutes on October 29, with evidence extending beyond an initially identified compromised DevOps laptop. Reporting described attackers using Ethereum’s EIP-7702 delegation feature, preparing 50 pre-signed authorizations and staging activity for more than 36 hours; Binance said it reserved $6.34 billion and targeted a Sunday withdrawal restart. TRM Labs attributed the attack to North Korea’s TraderTraitor with high confidence, supported by other industry investigators, although the supplied research contains no official FBI attribution for this incident.
Why it matters: The reported attack path makes the integrity of signing systems and delegated permissions central to assessing recovery, alongside the availability of replacement assets. Binance’s reserve addresses the financial shortfall, but its withdrawal target remains a stated objective rather than proof that compromised infrastructure has been secured. The North Korea attribution should also remain explicitly attributed to investigators: strong industry agreement carries analytical weight without becoming government confirmation.