--- title: In the year AI re-wrote the infosec rulebook, it’s... description: Binance paused trading after attackers compromised a DevOps engineer's laptop and used it to make unauthorized trades. The breach gave access to a service... canonical: https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security | daily.dev og:description: Binance paused trading after attackers compromised a DevOps engineer's laptop and used it to make unauthorized trades. The breach gave access to a service... og:url: https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc og:image: https://api.daily.dev/og/posts/3ATKCkKLC.png og:image:alt: In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary Binance paused trading after attackers compromised a DevOps engineer's laptop and used it to make unauthorized trades. The breach gave access to a service container that allowed unauthorized withdrawal transactions. Binance froze $2.5 billion in assets, later raising the at-risk figure to $6.3 billion, and halted all trading, deposits, and withdrawals. The company says no wallet private keys leaked and has promised to cover customer losses, but hasn't explained how the laptop was compromised. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How did attackers gain access to Binance's trading systems in this incident? Attackers compromised a DevOps engineer's laptop, which gave them access to a service container that was used to submit unauthorized withdrawal transactions. Binance has not disclosed how the laptop itself was compromised, though phishing or a supply chain attack on a package the developer used are both possibilities given the scant details provided. _Developers securing CI/CD and engineer endpoints follow breach postmortems like this on daily.dev._ ### How much money was affected by the Binance security breach and were user funds safe? Binance initially froze $2.5 billion worth of assets and later raised the at-risk figure to $6.3 billion. The exchange found no evidence of any wallet private key leak, suggesting customer holdings remain secure, and it halted all trading, deposits, and withdrawals while promising to cover any customer losses. _Engineers tracking fallout from major fintech breaches follow incident updates like this on daily.dev._ ## Similar posts on daily.dev - [Hackers steal $3.6 million from crypto ATM giant Bitcoin Depot](https://daily.dev/posts/hackers-steal-3-6-million-from-crypto-atm-giant-bitcoin-depot-zy1khutys) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#crypto](https://daily.dev/tags/crypto), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security","url":"https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc"},"datePublished":"2026-10-30T04:26:54.751Z","dateModified":"2026-10-30T06:30:49.635Z","description":"Binance paused trading after attackers compromised a DevOps engineer's laptop and used it to make unauthorized trades. The breach gave access to a service...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e248c24baa9fb56572d4817d9fc9f07b?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e248c24baa9fb56572d4817d9fc9f07b?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,crypto,phishing","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/in-the-year-ai-re-wrote-the-infosec-rulebook-it-s-comforting-to-know-crypto-exchanges-still-have-ba-3atkckklc#faq","mainEntity":[{"@type":"Question","name":"How did attackers gain access to Binance's trading systems in this incident?","acceptedAnswer":{"@type":"Answer","text":"Attackers compromised a DevOps engineer's laptop, which gave them access to a service container that was used to submit unauthorized withdrawal transactions. Binance has not disclosed how the laptop itself was compromised, though phishing or a supply chain attack on a package the developer used are both possibilities given the scant details provided. Developers securing CI/CD and engineer endpoints follow breach postmortems like this on daily.dev."}},{"@type":"Question","name":"How much money was affected by the Binance security breach and were user funds safe?","acceptedAnswer":{"@type":"Answer","text":"Binance initially froze $2.5 billion worth of assets and later raised the at-risk figure to $6.3 billion. The exchange found no evidence of any wallet private key leak, suggesting customer holdings remain secure, and it halted all trading, deposits, and withdrawals while promising to cover any customer losses. Engineers tracking fallout from major fintech breaches follow incident updates like this on daily.dev."}}]} ```