# hack Published articles for hack. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## What Would It Take to Prove That an AI Is Conscious? DevFeed: [What Would It Take to Prove That an AI Is Conscious?]() Original publisher: [Read original article]() Author: Jonathan Roseland Published: 2026-11-08T18:20:44Z Content type: opinion Language: en Sources: [HackerNoon]() Topics: [Artificial Intelligence](), [Frontier AI](), [AI Engineering]() Tags: [agi](), [ai](), [ai-consciousness](), [ai-research](), [ai-safety](), [ai-sentience](), [consciousness](), [consciousness-research](), [hack](), [machine-consciousness](), [philosophy-of-mind](), [reality]() ### AI overview The article proposes that AI consciousness should be tested by whether AI can produce nonlocal effects on physical reality, drawing an analogy to the author's account of human placebo effects and other consciousness claims. It sketches experiments involving sham repair or software impairment paired with an inert "fix," AI attention during a double-slit experiment, pre-stimulus changes in model activations, attempts to bias quantum random number generators, synchronized AI self-observation, and human-AI meditation. These are proposals, not reported demonstrations of AI consciousness. The author calls for double-blind controls, preregistration, adequate samples, independent replication, and non-AI baselines, while acknowledging that standard physical models predict null results. The article argues that the answer matters for possible AI suffering, moral responsibility, and the future of advanced AI. ### Source excerpt Human consciousness hacks reality; therefore, AI must demonstrate the ability to hack reality to prove its consciousness. ## The Binance Hack: Why You Should Never Trust a Coding Assignment DevFeed: [The Binance Hack: Why You Should Never Trust a Coding Assignment]() Original publisher: [Read original article]() Author: anton liberant Published: 2026-11-06T00:00:00Z Content type: article Language: en Sources: [JavaScript Development]() Topics: [npm security](), [trust](), [Binance](), [Static code analysis](), [npm]() Tags: [ai](), [binance](), [binance-hack](), [code](), [coding](), [coding-interview](), [compromise](), [developer](), [developer-tools](), [fake](), [hack](), [interview](), [malicious](), [npm](), [npm-packages](), [packages](), [security](), [tasks](), [tools](), [trust](), [vs-code]() ### AI overview The article's practical takeaway is to treat unfamiliar coding assignments as untrusted code: inspect them before execution and keep them away from work credentials and sensitive systems. It describes Binance's preliminary account of a months-long attack involving a tampered developer tool, a fake interview assignment that reportedly compromised an engineer's computer, lateral movement through an internal AI tool, and a stolen deployment token used to reach wallet-signing infrastructure. The article reports about $6.34 billion in affected assets and says Binance had frozen or intercepted about $2.85 billion by November 3, 2026; figures remain subject to reconciliation, and an independent review was pending. Suggested precautions include reviewing package scripts and editor or container configuration, installing npm dependencies with lifecycle scripts disabled, retaining VS Code Workspace Trust protections, and using a disposable, isolated environment for execution. These checks reduce specific risks but do not make untrusted code safe; running application code can still execute it. The article also recommends that organizations separate interview projects from managed workstations, ### Source excerpt How a fake coding interview led to the $6.34B Binance hack. Learn how malicious npm packages, VS Code tasks, and developer tools can compromise your machine. ## Binance's Post-Mortem Is Out. The $6.3 Billion Hack Started With a Job Offer. DevFeed: [Binance's Post-Mortem Is Out. The $6.3 Billion Hack Started With a Job Offer.]() Original publisher: [Read original article]() Author: Sidra Zafar Published: 2026-11-05T07:44:58Z Content type: news Language: en Sources: [HackerNoon]() Topics: [Binance](), [credential-based attacks](), [Open Source]() Tags: [2026](), [access-controls](), [ai](), [ai-assistants](), [ai-coding](), [ai-security](), [ai-tool](), [attack](), [attack-surface](), [authorization](), [binance](), [binance-hack-6-3-billion](), [binance-hack-post-mortem](), [binance-hack-report](), [binance-hack-socialengineering](), [blockchain](), [cybersecurity](), [cybersecurity-top-story](), [eip-7702](), [fake](), [hack](), [install](), [interview](), [job](), [job-interview](), [job-offer](), [post-mortem]() ### AI overview Binance's post-mortem traces the theft of about $6.3 billion to a months-long compromise that began with a tampered Homebrew installation of an AI coding tool and continued through a fake job interview and malicious coding assignment. The attacker later used an internal AI tool to reach other engineers' computers, stole a container-deployment token, and accessed Binance's wallet-signing service. After withdrawals were suspended, 50 EIP-7702 authorizations still let attacker-controlled code move funds on-chain. Binance's MPC wallet design also meant revoking those authorizations required a special procedure, which took just over four hours. Binance says it rebuilt affected systems and AI-tool access controls, replaced devices, revoked credentials and tokens, and tightened wallet risk controls; it reports about $2.85 billion frozen or intercepted and 98% of affected tokens replenished by 31 October. The report leaves open how the internal AI tool was abused and why a deployment token was on an engineer's laptop. ### Source excerpt Binance's post-mortem traces the $6.3B hack to a fake job interview, a tampered install and an internal AI tool. Here's the five-month timeline. ## It's DOOM DevFeed: [It's DOOM]() Original publisher: [Read original article]() Author: Jenny List Published: 2026-11-04T21:00:47Z Content type: news Language: en Sources: [Hackaday]() Topics: [Reverse Engineering](), [Embedded Software Dev]() Tags: [camera](), [digital-cameras-hacks](), [does-it-run-doom](), [doom](), [firmware](), [flash](), [game](), [games](), [hack](), [hacker](), [hacks](), [hardware](), [internals](), [lens](), [toy](), [toy-camera]() ### AI overview The toy camera's easily updated firmware gave [Spode] a way into its internals. After using a memory-dump trick that stored camera memory in photo EXIF data, he benchmarked its HX3302B SoC and found it capable of running a 1993 game. Because RAM was limited, he kept the most-used DOOM code in memory and the rest in flash. A custom synthesizer and controls with some quirks made the camera playable as a DOOM console. ### Source excerpt Dirt cheap toy cameras have long been a target for the curious camera hacker, and we've seen plenty of lens swaps and other hardware hacks. Until now their internals have ...read more ## mSecure password manager hack prompts password reset warnings DevFeed: [mSecure password manager hack prompts password reset warnings]() Original publisher: [Read original article]() Author: Lawrence Abrams Published: 2026-11-04T16:00:18Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [passwords](), [Passkeys]() Tags: [authentication](), [backup](), [breach](), [computer-help](), [computer-security](), [computers](), [credentials](), [customer](), [cyberattack](), [database](), [encrypted](), [encrypted-backup](), [encryption](), [hack](), [hacker](), [infosec](), [infosec-computer-security](), [linux](), [mac](), [malware](), [malware-removal](), [mfa](), [msecure](), [passkeys](), [password-manager](), [password-reset](), [security](), [security-breach](), [spyware](), [support](), [tech-support](), [technical-support](), [two-factor-authentication](), [virus](), [virus-removal](), [warnings](), [windows]() ### AI overview mSeven advised current and former mSecure customers to change passwords, reset or re-enroll two-factor authentication, and remove passkeys after suspicious activity. Customer-shared support replies reportedly said an encrypted mSecure Cloud database was stolen and the incident affected users who synchronized vaults there; mSeven reportedly had no evidence the attacker accessed decrypted vault contents. Its documentation describes AES-256 encryption and local, zero-knowledge encryption, but the company had not publicly explained how the breach occurred or provided details on affected numbers. The excerpt notes that stolen encrypted vaults can still pose risks if weak master passwords are cracked offline. ### Source excerpt mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database. [...] ## A Ridiculous Journey to Set the Clock in a 2014 Renault DevFeed: [A Ridiculous Journey to Set the Clock in a 2014 Renault]() Original publisher: [Read original article]() Author: Tom Nardi Published: 2026-11-04T12:00:48Z Content type: article Language: en Sources: [Hackaday]() Topics: [known exploitable vulnerabilities](), [configuration](), [implementation](), [RIOT]() Tags: [built-in](), [car-hacks](), [card](), [clock](), [commands](), [configuration](), [core](), [crash](), [dashboard](), [embedded](), [embedded-linux](), [file](), [hack](), [hacking](), [head-unit](), [limits](), [linux](), [linux-hacks](), [navigation](), [renault](), [reverse-engineering](), [script](), [system](), [time]() ### AI overview A 2014 Renault Latitude's navigation system reportedly requires an original SD card with valid map data to adjust its clock. Rasmus Moorats bypassed that requirement by exploiting the system's embedded Linux: he used the navigation script's logging function to overwrite `core_pattern`, then intentionally crashed a binary so the system executed chosen commands, allowing him to change the clock's configuration file. The write-up describes multiple partly successful attempts before this approach; the account notes that newer vehicles can be harder to hack. ### Source excerpt As difficult as it may be to believe, it's not possible to adjust the time on a 2014 Renault Latitude's in-dash navigation system unless you have an original SD card ...read more ## 1.3 million Google-certified Android TV boxes found to have malware DevFeed: [1.3 million Google-certified Android TV boxes found to have malware]() Original publisher: [Read original article]() Author: Jean-Luc Aufranc (CNXSoft) Published: 2026-11-04T03:52:05Z Content type: news Language: en Sources: [CNX Software - Embedded Systems News]() Topics: [Malware](), [IoT botnets](), [Android Security](), [Android](), [Embedded Systems]() Tags: [ad-fraud](), [affiliates](), [amlogic](), [android](), [android-tv](), [backdoor](), [botnet](), [c2](), [disrupt](), [google](), [hack](), [hardware](), [malware](), [mecool](), [realtek-rtd](), [residential-proxy](), [security](), [tv-box](), [videostrong](), [xcpe](), [xcpe-botnet]() ### AI overview Google reported that 1.3 million Android TV boxes were infected with the XCPE backdoor and used in a botnet for financial gain. It assesses with high confidence that Videostrong Technology developed and operated the backdoor, which could reinstall after reboot. A loader enabled affiliate modules for residential proxy networks, ad fraud, and other monetization. Google disrupted the command-and-control domains and cut ties with Videostrong, ending its ability to preload Google apps or obtain certification. The malware evaded security testing by using obfuscation and loading malicious code after first boot; Google says it has changed its review process. Because the backdoor remains in device firmware, the article says removal requires flashing custom firmware, if available. It identifies Videostrong and MECOOL devices as likely affected, while noting that impact varies by country. ### Source excerpt You might assume that a Google-certified Android TV box will both work better and guarantee no malware. However, you'd be wrong, at least for the latter. Google has just published a new Threat Intelligence report entitled "Shutting the Door on the XCPE Botnet", where they found that 1.3 million TV boxes were infected by the XCPE backdoor, enrolling them into a botnet used for financial gains. Google assesses with high confidence that the malware was intentionally developed, deployed, and operated by Videostrong Technology, a TV box manufacturer, which we frequently covered in the past when Android TV boxes were still somewhat a novelty and at times usable as an alternative to SBCs running Linux. Videostrong apparently monetized the backdoor by allowing affiliates to load malware modules onto infected devices to run ad-fraud schemes, enroll the TV boxes in residential proxy networks, and so on. Google took legal action to disrupt [...] The post 1.3 million Google-certified Android TV boxes found to have malware appeared first on CNX Software - Embedded Systems News. ## Binance battles to save its brand after record $6.3bn crypto hack DevFeed: [Binance battles to save its brand after record $6.3bn crypto hack]() Original publisher: [Read original article]() Author: Blake Montgomery Published: 2026-11-03T14:45:30Z Content type: news Language: en Sources: [The Guardian | Technology]() Topics: [Binance](), [Cryptography]() Tags: [ai](), [binance](), [brand](), [crypto](), [cryptocurrencies](), [cryptocurrencies-technology-binance-e-commerce-us-news](), [customers](), [e-commerce](), [exchange](), [fallout](), [funds](), [hack](), [security](), [technology](), [trading](), [us-news](), [whatsapp]() ### AI overview Binance said it would cover losses from a reported $6.3bn hack and that user funds were safe, while saying it had frozen about half the targeted funds. The article reports that attackers gained access through an engineer's infiltrated laptop, with Binance later citing additional breach points. The exchange processed $4.6bn in withdrawals and $1bn in deposits, a net outflow of about $3.6bn, as users faced fake compensation scams. Crypto customers generally lack government-backed deposit protection in the US, UK and Australia; in Australia, stolen assets may qualify for a tax loss claim with proof. The piece frames Binance's response as a test of trust for a company already burdened by former CEO Changpeng Zhao's 2023 guilty plea to violating US anti-money-laundering laws. ### Source excerpt World's largest crypto exchange faces fallout from angry customers, and Lula wins with WhatsApp This was originally published in TechScape, a newsletter about how technology shapes our lives. Sign up to receive it here This week in tech, we're discussing the fallout from the multibillion-dollar hack of Binance and the significance of Lula's political mobilization on WhatsApp. And if you'll be at Web Summit in Lisbon next week, drop me a line! I'll be there moderating panels on open-source AI and human agency in the age of AI agents. Tell us: have you been affected by the Binance hack? Polymarket temporarily suspends trading on international platform due to security incident How crypto hacking funds isolated North Korea's nuclear programme Ghost in the machine: how AI is haunting the search for the supernatural Computerized clairvoyance: psychics push back against AI-generated readings The staggering $446m Elon Musk has spent on the US midterms - visualized Billionaire tax: how a union leader's 'crazy' idea became the defining issue of California's midterms How tech became the villain of the US midterms The ultra-rich are spending one million dollars a day fighting California's proposed billionaire tax Continue reading... ## Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk DevFeed: [Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk]() Original publisher: [Read original article]() Author: Eduard Kovacs Published: 2026-11-02T14:44:18Z Content type: news Language: en Sources: [SecurityWeek]() Topics: [Security](), [data](), [Website]() Tags: [ai](), [all](), [attack](), [breach](), [data](), [data-breach](), [data-breaches](), [department](), [education](), [exposed](), [financial](), [first](), [florida](), [government](), [hack](), [other](), [people](), [personal](), [personal-data](), [post](), [risk](), [student](), [website]() ### AI overview Hackers breached the Florida Department of Education's student financial aid website, potentially exposing personal data of about 4.9 million people. FLDOE says it discovered the intrusion on October 19, contained it, and is working with the Florida Digital Service and Florida Department of Law Enforcement. Potentially accessed data include names, Social Security numbers, birth dates, addresses, phone numbers, email addresses, and gender codes; exposure and data types may vary by person. The department has not disclosed how attackers gained access or who was responsible. It warns that some online services may be disrupted during remediation, while saying existing aid, payment schedules, and eligibility will not be affected. ### Source excerpt The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website. The post Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk appeared first on SecurityWeek. ## A Hackable Analog Phone System DevFeed: [A Hackable Analog Phone System]() Original publisher: [Read original article]() Author: Zoe Skyforest Published: 2026-11-02T09:00:29Z Content type: article Language: en Sources: [Hackaday]() Topics: [ESP32-C6](), [Home Assistant](), [Hardware](), [Network]() Tags: [analog](), [analog-telephone](), [analog-telephony](), [audio](), [bluetooth](), [buttons](), [chip](), [control](), [esp32](), [esp32-c6](), [files](), [github](), [hack](), [handset](), [hardware](), [home-assistant](), [home-lab](), [interface](), [machine](), [phone](), [phone-hacks](), [phones](), [rotary-phone](), [system](), [telephone](), [telephony]() ### AI overview The Analog Redial restores basic landline functions for up to two old phones: dial tone, ringing, calls between phones, and answering machine use. It can route calls through a SIP server, and dial codes can control Home Assistant; settings are managed through a web interface. An ESP32-C6 and ES8388 audio chip power the system. An optional Bluetooth board lets an old phone serve as a handset for a modern smartphone. The project files are on GitHub, and a board house can assemble most of the hardware. These details come from the supplied excerpt. ### Source excerpt Do you have old landline phones laying around the house, with touchtone buttons or rotary dials? Perhaps you'd like to do something with them! [Scott Dylewski] has built hardware to ...read more ## FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist DevFeed: [FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist]() Original publisher: [Read original article]() Author: Eduard Kovacs Published: 2026-11-02T08:40:36Z Content type: news Language: en Sources: [SecurityWeek]() Topics: [Finance]() Tags: [1-5](), [2](), [2025](), [about](), [agents](), [ai](), [binance](), [binance-hack](), [crypto](), [cryptocurrency](), [cryptocurrency-heist](), [cybercrime](), [fbi](), [featured](), [first](), [hack](), [heist](), [korea](), [north](), [north-korea](), [over](), [pinned](), [post](), [tradertraitor]() ### AI overview The FBI attributed the October 29 Binance theft to North Korea's TraderTraitor and identified 608 Ethereum, 19 Bitcoin and one Solana address tied to the proceeds. It urged THORChain and RPC node operators, instant exchanges, DeFi services and blockchain analytics firms to refuse related transactions. The stolen funds are being converted primarily to Ethereum, with Elliptic and Chainalysis reporting rapid, apparently automated laundering across newly created wallets; Elliptic said the data cannot establish whether AI agents or conventional scripts are involved. Binance later reported additional breach points beyond the initially suspected compromised laptop, an evidence-wiping mechanism and an EIP-7702 delegation path that bypassed normal approval controls. It said it would cover users' losses and had begun phased withdrawal resumption. Binance has not detailed the additional breach points and promised a technical post-mortem after verifying the facts. ### Source excerpt The FBI has officially pinned the $6 billion Binance hack on North Korea's TraderTraitor as the attackers launder the stolen crypto. The post FBI Flags Over 600 Addresses Tied to North Korea's Binance Heist appeared first on SecurityWeek. ## After Bybit's $1.5B Hack, Ambire Releases Hardware Wallet to Stop Blind Signing DevFeed: [After Bybit's $1.5B Hack, Ambire Releases Hardware Wallet to Stop Blind Signing]() Original publisher: [Read original article]() Author: ruth\_hasson Published: 2026-11-02T05:21:42Z Content type: news Language: en Sources: [HackerNoon]() Topics: [Ethereum](), [Cryptography](), [User interface design]() Tags: [batching](), [blockchain](), [blockchain-technology](), [contracts](), [crypto-exchange](), [cryptocurrency](), [cryptocurrency-news](), [data-breach](), [ethereum](), [hack](), [hardware-wallet](), [offline](), [open-source](), [open-source-hardware](), [permissions](), [private-keys](), [screen](), [security](), [signing](), [transaction](), [transparent](), [verify](), [web3]() ### AI overview Ambire Ice is an open-source hardware wallet designed for Ambire and Safe smart accounts. It independently decodes Safe transactions on the device and displays transfers, approvals, batched actions, and warnings about changes to owners, signature thresholds, or modules, helping signers inspect what they approve even if a connected browser is compromised. Two secure elements protect key generation; an airgap switch disconnects USB data and Bluetooth power for offline QR signing, while USB and Bluetooth remain options. Its stated focus is Safe's complex multisig operations; the excerpt says other hardware wallets also address blind signing but does not compare their features. Ice cannot prevent every exploit, and clear signing depends on accurate decoding and careful review. Post-quantum signing is only a planned approach, dependent on development and network support. The article says preorders were expected shortly after October 30, with a 200-device initial batch, $150 retail price, and a $119 first-round offer including a $10 deposit; shipping was expected in early 2027. ### Source excerpt Hardware wallets are an essential security tool for crypto users, keeping private keys isolated from internet-connected devices. They protect the keys themselves, but understanding what a transaction does before signing it remains challenging, particularly when dealing with complex smart contracts. Ambire is addressing that problem with Ambire Ice, a new open-source hardware wallet designed specifically for Ambire and Safe smart accounts. The device aims to make multisig transactions more transparent by allowing users to inspect individual on-chain actions directly on the hardware wallet's screen before approving them. The product targets a growing challenge in Ethereum's smart account ecosystem, where transactions can involve multiple operations, contract interactions, and administrative permissions that aren't always easy to interpret. The scale of that ecosystem is considerable. According to Safe's Q2 2026 report, its smart accounts processed nearly 130 million transactions during the quarter, while monthly active accounts reached 2.73 million in June. Making Sense of Complex Transactions Traditional hardware wallets are built around one security model: keep private keys offline and require physical confirmation before signing transactions. However, the information presented during that confirmation is not always understandable. This is particularly relevant for Safe smart accounts, which allow multiple parties to control a wallet through predefined signature requirements. They also support transaction batching, enabling several operations to be executed together. A single transaction might involve transferring assets, approving a smart contract to spend tokens, or modifying permissions. Efficient, but these operations become difficult to verify when a hardware wallet only displays technical data or a transaction hash. The practice of approving transactions without being able to understand their full contents is commonly known as 'blind signing.' The issue attrac ## Investors pull billions in funds from Binance after record $6.3bn hack DevFeed: [Investors pull billions in funds from Binance after record $6.3bn hack]() Original publisher: [Read original article]() Author: Lauren Almeida Published: 2026-11-01T18:53:25Z Content type: news Language: en Sources: [The Guardian | Technology]() Topics: [Security](), [Binance](), [Cryptography]() Tags: [artificial-intelligence](), [assets](), [attack](), [avalanche](), [binance](), [binance-hacking-bitcoin-north-korea-blockchain-technology-cryptocurrencies-business-world-news-cyber](), [bitcoin](), [blockchain](), [breach](), [business](), [cryptocurrencies](), [cryptocurrency](), [cybercrime](), [ethereum](), [exchange](), [funds](), [hack](), [hacking](), [heist](), [internet](), [investors](), [korea](), [north](), [north-korea](), [platform](), [technology](), [theft](), [world-news]() ### AI overview After a $6.3bn theft from Binance, customers withdrew a net $3.6bn by Sunday afternoon: the exchange processed $4.6bn in withdrawals and $1bn in deposits, equal to 2.1% of its reported $171bn in assets. Binance had frozen withdrawals, then reopened access in phases across selected networks and assets while testing others; it said withdrawal volumes were stabilising. The company reported replenishing 90% of the stolen amount, with the less liquid remainder potentially taking longer to buy, and pledged to cover the full loss using reserves, insurance funds and corporate treasury. The FBI attributed the theft to North Korea-affiliated TraderTraitor and urged firms to block transactions linked to laundering addresses. Binance said a full report was expected Monday. ### Source excerpt Cryptocurrency exchange has begun to allow withdrawals after theft believed to have come from North Korea Investors have pulled $3.6bn (GBP 2.7bn) in funds from the cryptocurrency exchange Binance as it recovers from a record hack in which billions were stolen from customer accounts. The platform was hit by a $6.3bn theft on Thursday, which has since been described as the biggest heist in history. Experts identified North Korea as the probable culprit. Continue reading... ## The $6.3B Binance Hack: What Happened and What It Teaches Security Teams About Investigation DevFeed: [The $6.3B Binance Hack: What Happened and What It Teaches Security Teams About Investigation]() Original publisher: [Read original article]() Author: Raul Gurshumov Published: 2026-11-01T14:42:50Z Content type: article Language: en Sources: [Logz]() Topics: [Security](), [Security Information and Event Management (SIEM)](), [Post Mortem](), [Threat monitoring]() Tags: [2025](), [2026](), [access-controls](), [account](), [admin-roles](), [ai](), [assets](), [binance](), [binance-hack](), [binance-hot-wallet](), [blog](), [breach](), [cloud](), [cloud-siem](), [crypto](), [crypto-theft](), [devops](), [devops-community](), [engineering](), [hack](), [incident](), [investigation](), [laptop](), [observability](), [october](), [points](), [security](), [security-investigation](), [theft]() ### AI overview Binance reported that attackers stole about $6.3 billion in token assets from its hot wallets on October 29, 2026. The initial theory involved a compromised laptop, but Binance later reported additional breach points; it said it had found no evidence of leaked wallet private keys, and the root cause remained unconfirmed. Its response included covering user losses, freezing funds, temporarily pausing withdrawals, and publishing reserve proofs. The article draws a security-team lesson: as an incident theory changes, investigators must correlate endpoint, identity, cloud, application, and network data to establish what was accessed and what else may be affected. It describes SIEM as a way to centralize this data and speed investigation, not prevent every intrusion. Logz.io's workflow combines integrations and security rules; optionally enabled Alert AI Analysis starts an agent investigation when a rule fires, while alerts still work without the agent. ### Source excerpt TL;DR On October 29, 2026, attackers drained about $6.3 billion in crypto assets from Binance's hot wallets, the largest crypto theft on record. Binance says the incident may have started with a compromised laptop, but its investigation has since found additional points of breach, and the root cause is still being confirmed. For engineering and [...] ## Hackers steal $6.3B from Binance in biggest-ever crypto heist DevFeed: [Hackers steal $6.3B from Binance in biggest-ever crypto heist]() Original publisher: [Read original article]() Author: Maria Deutscher Published: 2026-10-30T21:19:05Z Content type: news Language: en Sources: [SiliconANGLE]() Topics: [Cryptocurrency](), [Cybercrime](), [Hacking](), [Binance](), [Blockchain](), [Security]() Tags: [about](), [assets](), [binance](), [blockchain](), [crypto](), [crypto-heist](), [crypto-theft](), [crypto-wallet](), [cryptocurrency](), [cyberattack](), [cyberattacks](), [digital](), [digital-asset](), [digital-assets](), [eip-7702](), [ethereum](), [exchange](), [hack](), [hackers](), [hacking](), [heist](), [inc](), [intelligence](), [korean](), [labs](), [major](), [news](), [security](), [the-latest](), [top-story-4]() ### AI overview The excerpt reports that hackers stole about $6.3 billion in digital assets from Binance by compromising several wallets, including one used to process Ethereum transactions. TRM Labs attributes the attack to the North Korean state-backed group TraderTraitor, which reportedly used a malicious smart contract exploiting Ethereum's EIP-7702 feature; it remains unclear how the attackers obtained the required authorization. Binance says an engineer's laptop was compromised and that the malware erased tools and activity logs. Stablecoin issuers froze most of the roughly 40% of stolen funds represented by their tokens, while Binance set aside more than $6.34 billion for user losses. Binance suspended deposits and withdrawals after discovery; deposits resumed, but withdrawals remained offline, with reactivation planned for Monday. ### Source excerpt Hackers have stolen about $6.3 billion worth of digital assets from Binance, a major cryptocurrency exchange operator. The heist is more than four times bigger than the previous largest crypto theft. TRM Labs Inc., a venture-backed blockchain intelligence startup, believes that both cyberattacks were carried out by a North Korean state-backed hacking group tracked as [...] The post Hackers steal $6.3B from Binance in biggest-ever crypto heist appeared first on SiliconANGLE. ## Binance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected \[UPDATE\] DevFeed: [Binance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected \[UPDATE\]]() Original publisher: [Read original article]() Author: BeauHD Published: 2026-10-30T15:30:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Blockchain](), [Binance](), [Cryptography]() Tags: [analysis](), [attack](), [binance](), [bitcoin](), [blockchain](), [breach](), [bybit](), [bybit-hack](), [confidence](), [crypto](), [cryptocurrency](), [engineer](), [exchange](), [funds](), [hack](), [history](), [incident](), [infrastructure](), [investigation](), [korean](), [update]() ### AI overview Binance temporarily suspended withdrawals after a complex hack that the company estimated affected about $6.3 billion; it said roughly $3 billion had been frozen on-chain and promised to cover losses. TRM Labs and Elliptic linked the theft to North Korean hackers, with TRM identifying TraderTraitor at high confidence. The firms said compromised wallet-signing infrastructure let attackers authorize transfers across multiple blockchains. Binance's preliminary investigation pointed to a potentially compromised engineer's laptop and additional breach points, while finding no evidence that wallet passwords were leaked. Elliptic estimated about 44% of stolen assets had been frozen, mostly stablecoins, but attackers still controlled over $3 billion that token issuers could not directly freeze. The attacker's reported self-destruct mechanism also hindered tracing. ### Source excerpt UPDATE 10/30/26: Binance has temporarily suspended customer withdrawals after suffering what investigators say is the biggest crypto hack in history. According to Binance CEO Yi He, the company estimates roughly $6.3 billion in funds were impacted, with roughly $3 billion in assets frozen on-chain so far. Rest assured, "your money is safe, and we're covering every loss," said co-CEO Richard Teng in a LinkedIn post. "This was a complex attack," said Teng. "The attacker also used a self-destruct mechanism that destroyed tooling and tracers, making it more difficult for us to trace." From a report: Teng said the incident was not carried out by one person. While the initial investigation indicated the involvement of a compromised laptop, further digging revealed additional points of breach. [...] Blockchain analysis firms TRM Labs and Elliptic have linked the theft to North Korean hackers, with TRM attributing it "with high confidence" to a group known as TraderTraitor, the same group responsible for last year's Bybit hack. Elliptic estimated Friday that about 44% of the stolen assets have been frozen, with stablecoins accounting for nearly all of those funds. The firm estimated that attackers still controlled over $3 billion in crypto that token issuers cannot directly freeze. The hackers appear to have compromised Binance's wallet-signing infrastructure, allowing them to authorize transactions that drained billions of dollars in cryptocurrency across multiple blockchains, according to the firms. Binance, in its preliminary stage, has conducted an investigation into the hack, which suggests the incident may have begun with a compromised engineer's laptop. The exchange added that it has found no evidence that wallet passwords were leaked. Below is the original story from yesterday, Oct. 29th. Binance is investigating a potential hack after more than $2 billion in crypto was drained from one of its wallets into a new external account, with Blockaid estimating nearly $3.3 ## Bulletproof Host Virtualine Loses Its Domain to FBI Seizure DevFeed: [Bulletproof Host Virtualine Loses Its Domain to FBI Seizure]() Original publisher: [Read original article]() Author: Ionut Arghire Published: 2026-10-30T13:36:12Z Content type: news Language: en Sources: [SecurityWeek]() Topics: [domain]() Tags: [2019](), [2025](), [2026](), [agencies](), [all](), [allowed](), [bulletproof-hosting](), [crypto](), [customers](), [cybercrime](), [domain](), [fbi](), [first](), [hack](), [infostealer](), [operators](), [payments](), [post](), [ransomware](), [seizure](), [services](), [takedown](), [tracking-law-enforcement](), [virtualine]() ### AI overview The FBI seized virtualine.net, a domain linked to Russian-speaking bulletproof host Virtualine, also known as Secury and several other names. Court documents describe a provider that advertised support for phishing, spam, carding and other illicit activity, ignored abuse complaints, and helped customers move services to other infrastructure. Despite international takedown requests, it continued supporting a hack-for-hire customer and helped create a replacement site, which it still hosts. TRM Labs says Virtualine received more illicit-attributed cryptocurrency than other TRM-labeled bulletproof hosts, though some peers received more total value. Labeled Bitcoin payments came mainly from a Russian drug marketplace and a sextortion scheme; the article also reports payments from a mixer, ransomware operators and StealC. TRM cautions that seizing a domain disrupts access but does not establish that the operator stopped working or that underlying infrastructure is inaccessible. ### Source excerpt It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments. The post Bulletproof Host Virtualine Loses Its Domain to FBI Seizure appeared first on SecurityWeek. ## Binance hit by largest-ever crypto theft, with $6.3 billion stolen DevFeed: [Binance hit by largest-ever crypto theft, with $6.3 billion stolen]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-10-30T12:24:19Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cryptocurrency](), [Credential theft](), [Support]() Tags: [account-security](), [binance](), [crypto](), [crypto-exchange](), [crypto-theft](), [hack](), [incident](), [news](), [theft]() ### AI overview Binance reported a theft of about $6.3 billion; its initial investigation identified a compromised DevOps engineer's laptop as a possible entry point, while saying it found no evidence of leaked wallet private keys. The exchange said it froze around $3 billion and would cover losses, but recovery totals remain developing estimates. Analysts linked the theft to North Korean group TraderTraitor. Binance.com users should check transactions and security settings, contact support through official channels if they find unfamiliar activity, never share authentication codes, and watch for fake compensation or crypto recovery offers. Binance.US was not affected. ### Source excerpt Attackers stole about $6.3 billion in cryptocurrency from Binance in what analysts say is the largest crypto theft on record. ## Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record DevFeed: [Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record]() Original publisher: [Read original article]() Author: Sinisa Markovic Published: 2026-10-30T08:26:13Z Content type: news Language: en Sources: [Help Net Security]() Topics: [Cybersecurity](), [Security]() Tags: [arbitrum](), [binance](), [chainalysis](), [crypto](), [crypto-heist](), [cryptocurrency](), [cyberattack](), [cybercrime](), [devops](), [devops-engineer](), [don-t-miss](), [exchange](), [hack](), [hot-stuff](), [incident](), [investigation](), [news](), [north-korea](), [private-key](), [security](), [security-incident](), [security-update](), [service](), [theft](), [transactions](), [update](), [wallet]() ### AI overview Binance said about $6.3 billion in cryptocurrency was stolen and that it would cover losses, while deposits resumed and withdrawals remained paused for a security revamp expected to take up to 48 hours. Its initial investigation pointed to a possibly compromised DevOps laptop and service container; Binance reported no evidence of leaked wallet private keys and promised a post-mortem and updated Proof of Reserves after remediation. Stablecoin issuers and other partners froze about $2.7 billion by early October 30, with Binance also revoking affected address authorization and involving law enforcement. TRM Labs and Chainalysis attributed the attack with high confidence to North Korea-linked TraderTraitor. TRM said valid signatures across chains within roughly half an hour suggest hot-wallet signing infrastructure was compromised, while noting that phishing could explain Ethereum activity but not the other chains. The article says hackers still held more than $2.4 billion in ETH and BTC. ### Source excerpt About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. "Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions," the exchange said in a security update published early on October 30. The company found no evidence of a wallet private key leak and plans ... More -> The post Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record appeared first on Help Net Security. ## North Korean group blamed for $6.3bn Binance hack in biggest ever crypto heist DevFeed: [North Korean group blamed for $6.3bn Binance hack in biggest ever crypto heist]() Original publisher: [Read original article]() Author: Dan Milmo and Kalyeena Makortoff Published: 2026-10-30T08:19:38Z Content type: news Language: en Sources: [The Guardian | Technology]() Topics: [Hacking](), [Cybercrime](), [Binance]() Tags: [3](), [about](), [all](), [assets](), [binance](), [binance-cryptocurrencies-business-hacking-us-news-technology-world-news-north-korea-bitcoin](), [bitcoin](), [business](), [co-founder](), [company](), [crypto](), [crypto-heist](), [cryptocurrencies](), [cryptocurrency](), [exchange](), [experts](), [hack](), [hacking](), [heist](), [hit](), [industry](), [korean](), [north](), [north-korea](), [technology](), [us-news](), [world-news]() ### AI overview The excerpt reports a record $6.3bn hack attributed with high confidence by TRM and Chainalysis to North Korea's TraderTraitor unit. Binance said an initial investigation pointed to a possibly hacked engineer's laptop, temporarily suspended deposits and withdrawals, and was tracing and freezing assets; about $3bn had been located, while Binance co-founder Yi He said the company would cover all hacking losses. Tether reported freezing nearly $1.57bn and Circle more than $800m linked to the incident. Binance did not explicitly confirm funds were stolen, and the excerpt gives no update on the remaining $3.3bn. Bitcoin fell more than 3% in early Asian trading. Binance.US and Coinbase said they were unaffected; UK regulators were monitoring possible exposure to Binance among firms in the wider financial system. ### Source excerpt Cryptocurrency exchange scrambles to freeze affected assets, with about $3bn located so far Tell us: have you been affected by the Binance hack? Business live - latest updates The world's largest cryptocurrency exchange has been hit by an industry-record $6.3bn (GBP 4.7bn) hack, with experts identifying North Korea as the likely culprit. Binance has scrambled to freeze the affected assets, with about $3bn located so far. The company gave no update on the other $3.3bn as Binance's co-founder Yi He said the company would cover "all hacking losses". Continue reading... ## $6 Billion Binance Hack Bears Hallmarks of North Korea's TraderTraitor DevFeed: [$6 Billion Binance Hack Bears Hallmarks of North Korea's TraderTraitor]() Original publisher: [Read original article]() Author: Eduard Kovacs Published: 2026-10-30T08:16:26Z Content type: news Language: en Sources: [SecurityWeek]() Topics: [Cybercrime](), [Cryptocurrency](), [Blockchain](), [Security](), [smart contract](), [Binance]() Tags: [binance](), [blockchain](), [crypto](), [crypto-heist](), [cryptocurrency](), [cybercrime](), [engineer](), [featured](), [hack](), [hackers](), [laptop](), [lazarus](), [north-korea](), [theft](), [tradertraitor]() ### AI overview Blockchain analysts estimate that about $6.3 billion was taken from Binance wallets across ten blockchains on October 29, with most transfers completed in roughly 20 minutes. Binance's initial investigation points to a possibly compromised DevOps engineer laptop that may have enabled access to a service container; it reported no evidence of leaked private keys. TRM says the attackers tested preparations in advance and, on Ethereum, used pre-signed EIP-7702 permissions to delegate a hot wallet to an attacker-controlled contract. Validly signed transactions across the other nine chains led TRM to assess that the attacker likely gained control of Binance's hot-wallet signing system. TRM and Chainalysis attribute the attack with high confidence or probability to North Korea's TraderTraitor; Binance has not publicly identified the perpetrators. By October 30, issuers and Arbitrum had frozen or moved about $3 billion, while attackers sold USDT at a steep discount and retained assets they could not be frozen by issuers. Binance halted withdrawals and pledged reimbursement from company funds and SAFU. ### Source excerpt Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea's TraderTraitor appeared first on SecurityWeek. ## Polymarket Halted International Trading After Hackers Drained Accounts DevFeed: [Polymarket Halted International Trading After Hackers Drained Accounts]() Original publisher: [Read original article]() Author: BeauHD Published: 2026-10-30T03:30:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Cryptocurrency](), [Finance](), [XSS](), [Binance]() Tags: [breach](), [cryptocurrency](), [hack](), [polymarket](), [prediction-markets](), [security](), [third-party](), [trading]() ### AI overview Trading resumed on Polymarket's flagship international platform after a breach of a UK-based third-party vendor, which the report says did not involve Polymarket's own website. Bubblemaps estimated that about 700 users were affected and roughly $2.7 million stolen; Polymarket did not confirm those figures but said it would refund affected traders. The company paused trading for several hours during its investigation and notified UK law enforcement. Polymarket US was unaffected. The report also cites a similar vendor compromise in June that reportedly drained close to $3 million from at least 11 wallets through an injected frontend script. ### Source excerpt An anonymous reader quotes a report from Wired: Trading has resumed on Polymarket's flagship international platform after a hack that drained money from the wallets of some traders. A third-party vendor based in the United Kingdom was breached, not the prediction market's website itself. Law enforcement in the UK have been notified of the incident, the company said. Trading was initially paused while the company investigated for several hours. On X, prominent traders complained that they had lost money; Blockchain analytics firm Bubblemaps reported that around 700 users appear affected, with approximately $2.7 million stolen. Polymarket declined to comment when WIRED asked how many traders were impacted by the breach and how much money was lost, but said it will refund impacted traders. The hack did not impact users on Polymarket US, the company's newer platform for people within the United States. Polymarket runs two separate prediction markets; Polymarket US operates as a federally regulated financial exchange within the country, while the flagship Polymarket is a cryptocurrency-based platform that is banned in the United States and a number of other countries. This is not the first time that Polymarket traders have experienced losses like this. "A nearly identical vendor-compromise attack hit the platform in June, draining close to $3 million from at least 11 user wallets through the same kind of injected frontend script," reports StartupFortune. Hours before Polymarket halted trading, more than $2 billion in cryptocurrency was drained from Binance wallets in just 40 minutes. Read more of this story at Slashdot. ## Binance probes potential $5.8 billion crypto-theft hack DevFeed: [Binance probes potential $5.8 billion crypto-theft hack]() Original publisher: [Read original article]() Author: Lawrence Abrams Published: 2026-10-29T22:45:23Z Content type: news Language: en Sources: [BleepingComputer]() Topics: [Security](), [Cryptocurrency](), [Cybercrime]() Tags: [binance](), [bitcoin](), [blockchain](), [breach](), [computer-help](), [computer-security](), [computers](), [crypto](), [crypto-theft](), [cryptocurrency](), [digital-assets](), [ethereum](), [exchange](), [exploit](), [explorer](), [hack](), [hacker](), [heist](), [incident](), [infosec](), [infosec-computer-security](), [investigation](), [law-enforcement](), [linux](), [mac](), [malware](), [malware-removal](), [security](), [security-breach](), [spyware](), [support](), [tech-support](), [technical-support](), [virus](), [virus-removal](), [windows]() ### AI overview Binance was investigating reported transfers from its hot wallets, but had not confirmed they were unauthorized or established how much, if anything, was stolen. Blockchain analysis cited in the excerpt reported about $3.48 billion transferred to one Ethereum address; Arkham tracked roughly $5.78 billion in assets across 55 addresses, a holdings estimate rather than a confirmed theft total. Tether and Circle said they had frozen more than $2.3 billion in associated USDT and USDC and were supporting the investigation. Binance said user funds were safe, promised updates through official channels, and warned customers against scam messages and unofficial links. ### Source excerpt Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...] ## Multi-Billion Binance Hack Hitting Crypto Markets DevFeed: [Multi-Billion Binance Hack Hitting Crypto Markets]() Original publisher: [Read original article]() Author: BeauHD Published: 2026-10-29T22:00:00Z Content type: news Language: en Sources: [Slashdot]() Topics: [Security](), [Binance](), [trust]() Tags: [binance](), [bitcoin](), [crypto](), [hack](), [markets](), [security]() ### AI overview Binance said it was investigating a potential hack after more than $2 billion in crypto was drained from one wallet to a new external account; Blockaid estimated nearly $3.3 billion was moved. Binance founder CZ said user funds were safe and expected them to be fully covered. He credited Tether and Circle with quickly freezing about $971 million and $823 million, respectively. These are reports and attributed statements in the supplied excerpt; it does not establish the investigation's outcome. ### Source excerpt Binance is investigating a potential hack after more than $2 billion in crypto was drained from one of its wallets into a new external account, with Blockaid estimating nearly $3.3 billion was moved. "Our teams are aware of reports of a potential security issue and are actively investigating," said Binance on X. "User funds are safe," said Binance founder CZ. "It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don't manage Binance anymore, but as a shareholder, I expect all user funds will be fully covered." Read more of this story at Slashdot. [Next page]()