How North Korea Stole $6.3 Billion From Binance Without a Private Key

North Korea’s theft from Binance is described as the largest hack ever, with roughly $6.3 billion drained in about 20 minutes and about half frozen afterward. The guests argue that the core failure was operational security: a compromised developer laptop likely gave attackers a foothold, after which they were able to reach Binance’s signing infrastructure and submit unauthorized withdrawals without needing the private keys themselves.

The discussion emphasizes that EIP-7702 was not the root cause, but it did help the attackers move faster once they could sign malicious transactions. One guest says the more important lesson is that every new feature expands attack surface, while the other argues the episode is mostly a story of malware, social engineering, and weak internal controls. They also note that the hackers tested parts of the scheme weeks earlier and that tracing those tests can help incident response, even if it would not necessarily have prevented the attack.

A major focus is the industry response: Circle, Tether, and the Arbitrum Security Council moved quickly to freeze funds, which reduced the loss but also pushed the laundering challenge onto DeFi rails and cross-chain liquidity. The guests argue that North Korea will keep adapting, that Thorchain has become a major laundering venue, and that the episode exposes how much crypto’s security and decentralization claims still depend on centralized actors and political judgments.