The $6.3 billion hack of Binance has triggered a broad reckoning over centralized exchange security and U.S. crypto regulation. Binance co-CEO Richard Teng said the attack was enabled partly by a compromised DevOps engineer's laptop, which gave an attacker access to a service container used to submit unauthorized withdrawal transactions. The exchange suspended deposits and withdrawals and, with industry partners, froze roughly $3 billion in assets.
Blockchain analytics firms, including TRM Labs, attributed the incident to TraderTraitor, a North Korean hacking unit. OKX CEO Star Xu publicly called the hack a wake-up call and urged rival exchange CEOs to cooperate on security, saying no single firm can protect the future of crypto alone.
President Donald Trump said Friday that his administration was looking into the hack. CFTC Chairman Michael Selig pointed to Binance's offshore status, arguing the agency's proposed federal framework for leveraged retail crypto trading and new exchange registration category would impose safeguards. Senator Cynthia Lummis said the stalled Clarity Act would have given firms legal cover to freeze suspicious transactions immediately, while the Digital Chamber demanded Congress give the CFTC authority over crypto exchanges and mandate segregation of customer funds.
Binance has long faced scrutiny: former CEO Changpeng Zhao pleaded guilty in 2023 to inadequate anti-money-laundering controls as part of a $4 billion settlement and was later pardoned by Trump. The new hack, described by Lummis as the biggest heist in history, has intensified demands for legislation before the current Congress adjourns.
