Summary Coinbase said it had adjusted the systems used to store cryptocurrency keys offline
(Reuters) - A record $6.3 billion hack of Binance has sent alarm bells ringing across the cryptocurrency industry, prompting exchanges to urgently strengthen their defences and call for greater information-sharing to counter growing security threats.
Coinbase said it had adjusted the systems used to store cryptocurrency keys offline, stressing that the move was made "solely out of an abundance of caution". Kraken, meanwhile, said it was monitoring security incidents across the industry to identify lessons that could help shore up its own defences.
The breach has exposed the risks facing an industry increasingly intertwined with mainstream finance, with analysts and executives warning that exchanges must act swiftly to close security gaps.
The urgency is heightened by President Donald Trump's regulators pushing for deeper integration of digital assets into the financial system, potentially amplifying the fallout from attacks in a sector already scarred by major hacks.
"For crypto to reach its full potential, the security situation must be addressed immediately," said Chris Perkins, Franklin Templeton's head of crypto.
Binance, the world's largest crypto exchange, halted withdrawals after Thursday's attack — which analysts blamed on North Korea — and said it would use company funds to cover the losses.
Binance co-CEO Richard Teng said on X that the “complex attack” may have begun with a compromised software engineer’s laptop, giving hackers access to systems used to process withdrawals. The company later found additional breaches, while software designed to erase traces of the attack hampered the investigation.
Rival crypto exchanges moved quickly on Friday to shore up their own systems and to reassure customers that their tokens were safe
“Full-time teams at Kraken look for potential vulnerabilities every day,” a Kraken spokesperson said.
Still, even as the industry reeled from the biggest cryptocurrency heist of all time, executives expressed confidence that Binance had sufficient resources to cover the losses and that the hack would not have broader financial repercussions.
Bitcoin fell more than 4% on Thursday while ether, the second-largest cryptocurrency, fell more than 5%, although both tokens recovered some of that ground on Friday.
"Our expectation is the industry writ large will actually not suffer material losses, even though Binance is obviously going to have to deal with the exploit directly," said Josh Riezman, chief legal and strategy officer at crypto firm GSR.
The bulk of the heist unfolded in around 20 minutes late on Thursday and bore similarities to previous attacks blamed on North Korea, according to US blockchain analysis firms TRM Labs and Chainalysis.
North Korea routinely denies involvement in cryptocurrency thefts, and its mission in Geneva did not respond to requests for comment.
Hack involves social engineering, money laundering
While much remains unclear, social engineering, a common tactic in which hackers trick victims into revealing sensitive information or granting access to systems, may have been involved in compromising the laptop, security experts said.
Harry Donnelly, CEO of Circuit, a crypto risk infrastructure company, said companies are planning more employee training to guard against social engineering attacks.
In such attacks, hackers race to launder the funds before the exchange detects the breach and token issuers freeze assets. Stablecoin issuer Tether said it had frozen nearly $1.57 billion linked to Binance, while Circle said it froze $800 million. Bitcoin and Ether cannot be frozen because no single entity controls the coins.
Chainalysis said the hackers appeared to be using sophisticated laundering patterns it had not seen before.
On Friday, some crypto exchange executives called for the industry to develop a coordinated hack detection system.
"We need a real-time alert system that allows participants to share information immediately when a hack occurs, coordinate a rapid response, and temporarily freeze suspected stolen funds," said Star Xu, CEO of crypto exchange OKX, in a post on X.
GSR's Riezman added that the Binance hack could spur the industry to act: "As we're at this kind of confluence moment for traditional finance and digital assets, I think it's obviously important that we continue to improve, and I think this, if anything, will be a catalyst for that."
