Binance Hack May Stem From Private Key Misuse, Security Firm Says

A sophisticated cyberattack targeting Binance may have involved the deliberate misuse of private key infrastructure rather than outright theft of the keys themselves, according to Ido Ben-Natan, CEO of blockchain security firm Blockaid. The distinction is significant: instead of stealing credentials, attackers may have manipulated the systems that authorize and sign transactions, allowing them to move funds while leaving the underlying keys technically intact.

Ben-Natan drew direct comparisons to the high-profile Bybit hack, suggesting the two incidents share structural similarities in how the attackers approached the transaction-signing layer. If the parallel holds, it points to an emerging threat pattern in which sophisticated actors target the authorization pipeline of major exchanges rather than pursuing the more conventional route of credential exfiltration.

Read more Amazon Stock Falls Despite Bold New AWS Cloud Forecast →

The implication for the broader crypto industry is unsettling. Exchanges have invested heavily in protecting private keys through hardware security modules and cold storage, but an attack model that subverts signing infrastructure could render those defenses insufficient. Security researchers are increasingly warning that the signing process itself — not just key custody — represents a critical and underprotected attack surface.

Blockaid's analysis adds pressure on centralized exchanges to audit not only how keys are stored but how transaction approvals are constructed, validated, and executed end-to-end. The Bybit incident earlier this year already prompted a wave of internal security reviews across the industry, and a second high-profile exchange now facing similar scrutiny may accelerate those efforts.

Continue reading at Cointelegraph.