Skip to content
IT
Crypto & Finance

Binance Blocks 1,567 Billion in USDT: How Stablecoins Help Track Stolen Funds

The coordinated intervention of Tether, Circle and decentralized protocols to limit the damage from the largest hack in history

Published on By Sebastiano, GoYou.it 8 min read
Listen to the full article Full reading · 11:32 · from the channel GoYou Crypto
Binance Blocks 1,567 Billion in USDT: How Stablecoins Help Track Stolen Funds

KEY TAKEAWAYS

  • Binance has blocked 1.567 billion in USDT in collaboration with law enforcement to trace the stolen funds.
  • Tether and Circle have immobilized respectively 1.567 billion and 823 million in stablecoin within a few minutes of the theft.
  • Decentralized protocols like Arbitrum have blocked 30.5 million in ARB and ETH, demonstrating the ability to act even without a central issuer.
  • Aave has temporarily frozen the markets to prevent further deposits and loans, keeping the overcollateralized positions.
  • Binance has promised to cover all losses with the Secure Asset Fund for Users (SAFU) and corporate funds.

Binance collaborates with law enforcement to track stolen funds

Binance has announced close collaboration with investigative authorities to track the funds stolen during the attack on its hot wallet, which saw a total of 10,092 BTC, 5,857 ETH, and other assets worth a total of $101 million. The platform immediately activated advanced security protocols, including the freezing of 1.567 billion USDT by Tether, which occurred just 37 minutes after the transfer of stolen funds to the attacker's main wallet on Ethereum.

Quick Response

  • Binance collaborates with law enforcement to track stolen funds
  • Tether froze 1.567 billion USDT in 37 minutes
  • Arbitrum transferred 30.5 million ARB and ETH to a frozen wallet
  • 2.84 billion dollars have been frozen, while 3.33 billion remain under the control of the attackers

The coordinated intervention of stablecoin issuers

Circle quickly followed with the freezing of 823 million USDC just three minutes after Tether's action. Even smaller issuers like Ripple and World Liberty Financial contributed to the collective response. These interventions demonstrate the effectiveness of the stablecoin blacklisting mechanism, which allows stolen assets to be quickly immobilized.

The innovative approach of decentralized protocols

Despite the absence of a central issuer, decentralized protocols like Arbitrum have adopted proactive measures. Arbitrum's Security Council transferred 30.5 million ARB and ETH to an intermediate frozen wallet, accessible only after further actions by the council or a vote by Arbitrum's DAO governance. This approach underscores the ability of blockchain technology to adapt to crisis situations without centralized compromises.

The complexity of fund recovery

It is crucial to distinguish between frozen and recovered funds. The immobilization of assets prevents improper use by the attackers, but does not automatically guarantee their return to Binance users. This distinction is essential to understanding the operational limitations of security responses in the crypto sector.

The impact of the Aave protocol on the situation

The decentralized lending protocol Aave added an additional layer of complexity. Between 20:58 and 21:01 UTC, a wallet associated with the attackers deposited 60 million USDT in Aave V3 on Ethereum and borrowed 44.6 million WETH. LlamaRisk, a risk service provider for Aave, confirmed that the attacker's position maintained a collateral of 59.9 million USDT against a debt of 43.8 million dollars, remaining overcollateralized and not putting the protocol's suppliers at risk.

The technical challenges of freezing assets

Marc Zeller, founder of Aave Chan Initiative, explained that freezing the attacker's wallet could not automatically recover the collateral held by the protocol. This is because the USDT had already been deposited in Aave's lending pool, and the protocol cannot distinguish between legitimate and illicit funds once deposited. Aave temporarily froze the V3 and V4 markets to prevent further deposits and loans, although existing users could still operate within the protocol.

The evolution of the situation and future prospects

Elliptic estimated that, at 7:00 am UTC on Friday, 2.84 billion dollars had been frozen, while the attackers still controlled 3.33 billion dollars in non-freezable assets. Despite the freezing having halved the potential profit of the attackers, the complete recovery of the funds remains a complex challenge. Bitcoin and Ether, not having a central issuer, make it difficult to freeze assets once converted into these native cryptocurrencies.

Binance's commitment to user security

Binance has promised to cover all losses using the Secure Asset Fund for Users (SAFU) and corporate funds. According to the latest update from CEO Richard Teng, the exchange is already engaged in recovering the stolen assets for users. This commitment strengthens confidence in Binance's ability to manage security crises and protect user assets.

The importance of compliance and cybersecurity in the crypto sector

This incident underscores the critical need for advanced crypto AML compliance and crypto anti-money laundering solutions, as well as robust identity management and managed Security Operations Center. Companies in the sector must invest in Managed Detection and Response and SOC as a Service to effectively prevent and respond to such attacks. Furthermore, ISO 27001 certification and compliance with regulations such as the NIS2 Directive and the DORA Regulation are fundamental to ensuring digital operational resilience.

To learn more about our guide on how to protect yourself from ransomware attacks and improve your cyber insurance, see also: how to protect yourself from ransomware attacks.

Impact on the market and systemic implications

The attack on Binance has triggered shockwaves across the crypto sector, with an immediate impact on the prices of major stablecoins. The value of USDT showed unusual volatility, temporarily falling to 0.995 dollars before stabilizing. USDC also recorded fluctuations, with a 0.3% drop in the hours following the incident. These movements reflect investor concerns about the ability of issuers to maintain parity with the dollar.

Legal and regulatory challenges

The incident raises complex questions on a legal and regulatory level. The collaboration between Binance and law enforcement represents a case study for crypto AML compliance and the application of KYC exchange in emergency contexts. Legal experts emphasize the need for a clearer regulatory framework for managing stolen digital assets, especially in relation to the MiCA regulation and crypto taxation Italy.

Lessons for users and investors

For Binance users and other crypto platforms, this event underscores the importance of prudent crypto wealth management. Experts advise diversifying assets between centralized exchanges and institutional crypto custody solutions to reduce exposure to single points of failure. Additionally, it is essential to constantly monitor official communications from platforms to stay updated on any developments.

Future prospects for blockchain security

The episode has accelerated the debate on advanced technological solutions for blockchain security. Among these, the adoption of zero trust architecture and the implementation of Security Information and Event Management (SIEM) could become standards in the sector. Furthermore, the use of regular penetration tests and vulnerability assessments could become common practice to prevent similar attacks.

The evolution of incident response strategies

The coordinated response from Tether, Circle, and other stablecoin issuers has demonstrated the effectiveness of incident response strategies in the crypto sector. However, breach remediation experts emphasize the need for more sophisticated protocols for managing stolen assets, especially in decentralized contexts. The adoption of MDR service and managed Security Operations Center could become crucial to addressing future threats.

Impact on user trust and sector reputation

The incident has tested user trust in the crypto sector. Despite Binance's commitment to covering losses, some analysts predict a temporary decline in trading activity and institutional investments. However, the transparency and speed of the response could contribute to restoring long-term trust. ISO 27001 certification and compliance with the NIS2 Directive could become key elements for rebuilding the sector's reputation.

Implications for stablecoin issuers

For stablecoin issuers, the event has highlighted the need for more robust security mechanisms. The ability to quickly freeze stolen assets has become an essential feature to maintain user trust. Additionally, the adoption of Data Loss Prevention and corporate DLP solutions could become a priority to prevent future breaches.

Prospects for institutional investors

Institutional investors are closely monitoring developments, with particular attention to institutional crypto custody and crypto AML compliance. The ability of platforms to manage security crises could become a decisive factor for future investments. Additionally, identity management and the adoption of disaster recovery as a service could become standards to attract institutional capital.

Lessons for decentralized protocols

For decentralized protocols like Aave, the event has underscored the importance of flexible and reactive governance mechanisms. The adoption of identity access management and the implementation of enterprise backup could become common practices to address future security challenges. Furthermore, collaboration with investigative authorities could become a key component of business continuity in the sector.

Prospects for the future of crypto security

The attack on Binance has highlighted both the vulnerabilities and the potential of the crypto sector. The ability to respond quickly and coordinated demonstrated by stablecoin issuers and decentralized protocols represents a significant step forward. However, the sector must continue to invest in advanced solutions for NIS2 compliance and the DORA Regulation to ensure digital operational resilience. The road to greater security and trust is still long, but recent developments indicate a promising future for the crypto sector.

Frequently Asked Questions

What is the total amount of stolen funds?

The attack saw the theft of 10,092 BTC, 5,857 ETH, and other assets worth a total of $101 million.

How have stablecoin issuers responded?

What are the implications for Binance users?

Binance has promised to cover all losses using the Secure Asset Fund for Users (SAFU) and corporate funds.

What are the future prospects for crypto security?

The sector must continue to invest in advanced compliance and security solutions to ensure digital operational resilience.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not engage in real-time information activities.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims all liability for the improper use of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.

Source: cointelegraph.com · GoYou.it is not a registered news outlet; all content is for informational and educational purposes.

Listen GoYou Cryptoevery article read in full
Go to the channel

You may also like

Behind every article is the work of our passion. If you enjoy GoYou.it, you can support its development and continuity.

Support with PayPal