What caused the $6.3bn Binance hack?
Simply sign up to the Cyber Security myFT Digest -- delivered directly to your inbox.
The writer is a professor at Cornell University, senior fellow at Brookings, and author of The Doom Loop.
The cryptocurrency revolution promised the decentralisation of finance, removing power from commercial banks, central banks, and governments, and placing it in the hands of the common people. It aimed to eliminate single points of failure through a decentralised architecture and enhance security with public digital ledgers. Trust was to be established through community oversight, replacing traditional financial intermediaries.
However, the massive $6.3bn hack of Binance, the world's largest cryptocurrency exchange, challenges these ideals. This heist highlights how the lofty promises of decentralisation have been subverted by centralisation. The breach appears to be the result of a combination of human errors (a compromised laptop) and technological vulnerabilities.
While blockchain technology, the foundation of cryptocurrencies, deserves credit for its security, the ecosystem surrounding decentralised blockchains has introduced weaknesses.
Human psychology plays a role; investors and traders often keep significant assets in centralised exchanges like Binance, seeking convenience and familiarity. These exchanges introduce centralisation into a supposedly decentralised environment, contradicting the promise of eliminating single points of failure.
The Binance hack is not an isolated incident; many similar breaches have occurred within the cryptocurrency sector. Automated transactions, lacking sufficient safeguards, can be executed for substantial sums, leaving the security of transparency championed by crypto enthusiasts vulnerable to technological flaws.
Consider oracles, software that facilitate information exchange between blockchains. While oracles, created and supervised by the community, enhance decentralisation, they also present a weakness. Even the vigilant crypto community cannot protect them from skilled hackers, as AI-powered tools increasingly probe and exploit subtle flaws in the crypto ecosystem.