Binance freezes about $3 billion after $6.3 billion hack as PHP flaw forces global patches
A record crypto breach and a critical language flaw drive a heavy security day
edit
By LineZotpaper
Published
Updated
Read Time2 min
Sources18 outlets
Two large security stories landed the same day: a multi-billion-dollar breach at the world's biggest crypto exchange, which it says it will cover in full, and a critical flaw in the PHP language that pushed governments and a major port to take sites offline. Both show how quickly an exploited weakness can spread across systems many people rely on.
Binance hit by record hack
Binance put the impact of a hack on its exchange at about $6.3 billion and said it froze roughly $3 billion with blockchain partners and would cover all losses. Deposits and withdrawals were suspended as a precaution while the company works with law enforcement; it vowed to reopen within a couple of days. Reports said researchers attributed the theft to a North Korean hacking unit.
A critical vulnerability in PHP, which underpins more than 70% of the world's websites, triggered a global response, with several European governments and the Port of Rotterdam taking sites offline and agencies in Australia, the US, the UK, Europe and Japan urging urgent patches. Researchers at Wiz found the flaw in August using their own tools and AI models, then found ways into Drupal and WordPress systems.
12 claims in this story checked against 6 sources: 5 supported.
Show each claim
Partly supportedBinance froze about $3 billion after a $6.3 billion hack.Yahoo Finance: “Binance says $6.3 billion impacted in suspected record crypto hack.”
Not in the sourcesThe Binance and PHP security stories landed the same day.
Not in the sourcesBinance is the world’s biggest crypto exchange.Quartz: “Binance was hit by the biggest crypto hack ever, losing about $6.3 billion.”
SupportedThe Binance breach was a record hack involving about $6.3 billion.Quartz: “Binance was hit by the biggest crypto hack ever, losing about $6.3 billion.”
Partly supportedBinance said it would cover all losses.WSJ.com: Markets: “How Binance Is Racing to Cover Losses in the Biggest Heist in Crypto History.”
Partly supportedBinance suspended deposits and withdrawals as a precaution.WSJ.com: Markets: “Binance Suspends Transactions After It Is Targeted in Biggest-Ever Cyber Heist.”
Partly supportedReports said researchers attributed the theft to a North Korean hacking unit.Philadelphia Inquirer: “Blockchain intelligence firms link North Korea to $6.3B hack on Binance.”
SupportedThe PHP flaw affects more than 70% of the world’s websites.Startup Daily: “Details have been published of a critical flaw in the programming language PHP, which is the backbone of more than 70% of all websites.”
Partly supportedThe PHP flaw forced global patches.Startup Daily: “The Australian Signals Directorate, America’s Cyber Defence Agency, and similar bodies from the United Kingdom, Europe and Japan have all warned web developers to apply urgent updates to their core systems”
SupportedSeveral European governments and the Port of Rotterdam took websites offline in response to the PHP flaw.Startup Daily: “In response, multiple European governments and operators including the Port of Rotterdam have taken websites offline.”
SupportedBinance and Polymarket both suspended trading after hacks.WSJ.com: Markets: “The Morning Risk Report: Binance and Polymarket Suspend Trading After Hacks.”
SupportedThe Australian reported that a spy agency admitted it was handing secrets to adversaries via a tender site."site:theaustralian.com.au/nation when:1d" - Google News: “Spy agency admits it was handing secrets to adversaries – via tender site - The Australian.”
Correction
An earlier version of this story attributed a description of the hack to Binance's founder. The sources do not support that attribution.
