STRIKE0 / OFFENSIVE SECURITYAUTONOMOUS RED TEAMING / HUMAN-DIRECTED
PUBLIC INCIDENT DOSSIER / 7 MAY 2019
THEFT / COMPANY CONFIRMED

Binance (exchange)
Security incident.

Binance disclosed that attackers withdrew 7,000 BTC from its exchange hot wallet in a coordinated 2019 security breach.

~$40M
7,000 BTC TAKEN FROM A HOT WALLETApproximate USD value at the time of theft; not the current market value of 7,000 BTC. Separate from BNB Chain 2022 and Binance 2026.All incidents ↗
01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS
WHAT HAPPENED

What the evidence shows.

Binance described stolen API keys and two-factor codes among the methods involved. It said its SAFU fund would cover losses to protect users.

MEASUREMENT / INTERPRETATION

What the number means.

Approximate USD value at the time of theft; not the current market value of 7,000 BTC. Separate from BNB Chain 2022 and Binance 2026.

CONTROL QUESTIONS

How to test resilience.

Hot-wallet containment, withdrawal anomaly controls and session/API credential monitoring.

Read cited source ↗
TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗