Record crypto theft and recovery efforts
Binance has suspended deposits and withdrawals following a breach estimated at US$6.3bn, more than four times the previous record for a crypto theft. Preliminary investigations indicate an attacker accessed an internal service via a compromised engineer's laptop. Around US$3bn has been frozen with assistance from industry partners, including roughly US$1.57bn in Tether and over US$800m in Circle, while approximately US$3.3bn remains outstanding, including about US$2.4bn in bitcoin and ether that cannot be frozen by any issuer.
Insurance wordings and state-backed attribution
TRM Labs has linked the attack to TraderTraitor, a North Korean group previously blamed by the FBI for the Bybit theft. This attribution directs claims teams to examine Lloyd's Market Bulletin Y5381, which mandates that standalone cyber policies written at Lloyd's since 31 March 2023 exclude war and state-backed attacks that significantly impair a state's security capabilities. Because wordings vary and formal attribution is required for insurers to prove an exclusion applies, the incident tests grey areas in digital asset and fintech coverage.