Hackers stole more than $40 million worth of bitcoins in a single transaction on one of the world’s biggest cryptocurrency exchange, the company has admitted.
The head of Binance said the “large scale security breach” was accomplished through “a variety of techniques, including phishing, viruses and other attacks.”
“The hackers had the patience to wait, and execute well-orchestrated actions through multiple seemingly independent accounts at the most opportune time,” Binance CEO Changpeng Zhao wrote in a blog post Tuesday.
“The transaction is structured in a way that passed our existing security checks. It was unfortunate that we were not able to block this withdrawal before it was executed.”
Zhao also posted a link to the electronic history of the theft, which shows the hackers swiped more than 7,074 bitcoins, worth $41.6 million.
Zhao said the hackers targeted Binance’s “hot wallet,” which is connected to the internet and which he said holds about 2 percent of the exchange’s bitcoin holdings.
“All of our other wallets are secure and unharmed,” he said.
Binance will cover all losses “in full,” but deposits and withdrawals were suspended pending a “thorough security review,” which Zhao said would likely take a week.
Binance ranks No. 4 worldwide in trading volume over the past 30 days, but a 26 percent drop in trades downgraded it to No. 13 for the past 24 hours, according to the CoinMarketCap website.
The company was founded in Hong Kong in 2017, but last year announced it was moving to Malta amid a crackdown by Chinese regulators.
Cybercrooks stole around $1.7 billion in cryptocurrency last year, up more than 400 percent from 2017, according to security firm CyperTrace.