Article is by Molly White, who you might recognize from Mastodon and web3isgoinggreat.com:

https://hachyderm.io/@molly0xfff/117526961419935070

I wrote up what we know about the Binance hack so far. By my best estimate, Binance is out around $3 billion after stablecoin issuers froze what they could. Changpeng Zhao is promising Binance will cover it, but he’s legally barred from running the company.

  • FlashMobOfOne@lemmy.world
    link
    fedilink
    English
    arrow-up
    32
    arrow-down
    9
    ·
    2 days ago

    Lotta comments here blaming the victims.

    This was likely an instance of social engineering within Binance and nothing to do with the underlying securities, folks.

    • Denfa@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      1 day ago

      Are you saying Binance engineers always intended to trigger a steal? Because that’s exactly what I thought when I saw the headline but I’m not well informed about block-chain security.

      • FlashMobOfOne@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        1 day ago

        No, I think someone obtained one of their employees’ credentials via social engineering. It’s not that hard to do, you just call someone and tell them you’re from IT and their password, or security key, or passkey or whatever is expiring and pretend to set them up with a new one or convince them to let you remote into their PC to make some kind of security update.

        That’s usually how it happens.

    • ayyy@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      4
      ·
      2 days ago

      Are they really “victims” when they willingly gave their money to an unregulated not-bank?

      • FlashMobOfOne@lemmy.world
        link
        fedilink
        English
        arrow-up
        28
        arrow-down
        11
        ·
        edit-2
        2 days ago

        Yes.

        You may not like the product but these people still have a reasonable expectation of security, and they should.

        I don’t care for AI girlfriends, but when they convince a teen to off themselves I still acknowledge that the teen is, objectively, a victim even though the product is unregulated.

        • REDACTED@infosec.pub
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          3
          ·
          2 days ago

          You may not like the product but these people still have a reasonable expectation of security

          I’m a sane human being, therefore my expectancy of safety from any crypto exchange point is zero.

          If I’d hold a wallet, I’d likely install the most strict firewall rules out there.

          • FlashMobOfOne@lemmy.world
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            5
            ·
            2 days ago

            “I’m a sane human being”

            Not a great start.

            my expectancy of safety from any crypto exchange point is zero

            Honestly, I’m skeptical of using dedicated crypto exchanges too. I have somewhere between 15 and 20 percent of my portfolio in crypto, but through a regular brokerages that deal in standard securities like stocks, bonds, and mutual funds. If I had all of my wealth in it, I’d have it all stored in a cold wallet on external media, but even that isn’t 100% foolproof.

            There have been several incidents with crypto exchanges, yes. That said, there are hundreds, if not thousands, of major corporations in the US have had significant publicly infamous security breaches within the last decade, so it seems illogical to pretend as if security breaches are somehow unique to the crypto industry.

            People who use crypto are not insane.

            • REDACTED@infosec.pub
              link
              fedilink
              English
              arrow-up
              4
              ·
              edit-2
              1 day ago

              Not a great start.

              Just FYI, when people say that, it rarely means self-bloating/putting themselves pedestal, it usually means insulting the thing you’re talking about, aka. “only insane would trust to hold large sums on crypto exchange points”, not that I’m super duper sane. A figure of speech

        • ayyy@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          8
          arrow-down
          4
          ·
          edit-2
          2 days ago

          That’s different because we don’t expect teenagers to make good decisions so we try to protect them. All Binance customers are adults.

    • NathanRanch@lemmy.zip
      link
      fedilink
      English
      arrow-up
      7
      ·
      2 days ago

      I read they got into a container from an old laptop. If true that’s one I.T. department about to get snapped.