Internal AI governance failures enabled record Binance cryptocurrency heist

A chain of avoidable technical and human security failures enabled the largest cryptocurrency heist on record, according to CSO Online. Hackers stole approximately 6.34 billion dollars from the cryptocurrency exchange Binance. CSO Online reported that improper monitoring and access scoping of an internal artificial intelligence tool played a major role in assisting the hackers. [1]

Binance issued an initial findings report raising critical questions about its security policies, technical controls, and employee awareness training. CSO Online reported that the incident highlights significant gaps in how enterprise security leaders govern internal artificial intelligence tooling. [1]

As FTMQ Security reported earlier, the Federal Bureau of Investigation attributed the record Binance theft to North Korean state sponsored hackers known as TraderTraitor. The group is also tracked by security researchers under the names Lazarus Group, Jade Sleet, and APT38. Outlets previously reported the total stolen sum as ranging between 6.3 billion and 6.43 billion dollars. [4]

Binance was originally founded in 2017 by Changpeng Zhao, a software developer who launched the platform on July 14, 2017. CSO Online noted that the lessons learned from the Binance breach serve as an immediate warning for enterprise chief information security officers to enforce strict AI governance. [1][3]