← News Topics
Intermediate

The Binance Heist: Money, Technology, and Power

Day 1 — Twenty Minutes, $6.3 Billion: How Binance Lost Control

バイナンス強盗事件：お金、技術、そして権力 ― 第1日：20分で63億ドル―バイナンスはどのように制御を失ったか

31 October 2026

Multiple trading monitors on a desk at night showing blockchain wallet charts and red transfer alerts during a large cryptocurrency theft investigation

On October 29, something extraordinary happened at Binance, the world’s largest cryptocurrency exchange. In roughly 20 minutes, hackers moved most of an estimated $6.3 billion in digital assets from Binance into wallets they controlled. It was not a sudden fall in cryptocurrency prices. The money was actually leaving the exchange. By the time the scale of the attack became clear, Binance was facing the largest cryptocurrency theft ever recorded.

10月29日、世界最大の暗号資産取引所であるバイナンスで、並外れた出来事が起きました。およそ20分のあいだに、ハッカーは推定63億ドル相当のデジタル資産の大部分を、バイナンスから自分たちが制御するウォレットへ移しました。それは暗号資産価格の急落ではありませんでした。お金は実際に取引所から出ていっていたのです。攻撃の規模が明らかになったころには、バイナンスは記録上最大の暗号資産窃盗に直面していました。

How could so much money disappear so quickly? Binance allows customers to buy, sell, and store cryptocurrencies such as Bitcoin. To process customer withdrawals, it keeps some assets in internet-connected accounts called hot wallets. These wallets are designed to move funds quickly when customers make legitimate requests. But that convenience creates a danger. If attackers can make the system accept false instructions, enormous amounts of money can move before anyone has time to intervene.

なぜ、それほど多額のお金が、これほど速く消えてしまったのでしょうか。バイナンスは、顧客がビットコインなどの暗号資産を売買し、保管することを認めています。顧客の出金を処理するため、同社はホットウォレットと呼ばれるインターネット接続の口座に一部の資産を置いています。これらのウォレットは、顧客が正当な依頼をしたときに資金をすばやく動かすよう設計されています。しかし、その便利さは危険も生みます。攻撃者がシステムに偽の指示を受け入れさせられれば、誰かが介入する時間がないうちに、莫大なお金が動いてしまうのです。

Investigators believe that something like this happened. Binance initially reported that an engineer’s laptop may have been compromised, allowing attackers to access internal systems and submit unauthorized transactions. Later investigations uncovered additional points of entry. Interestingly, Binance says it has found no evidence that the wallets’ private keys—the secret codes used to authorize transfers—were stolen. The exact method remains under investigation, but the attackers appear to have exploited the system responsible for approving transactions.

捜査関係者は、このようなことが起きたと考えています。バイナンスは当初、技術者のノートPCが侵害された可能性があり、攻撃者が内部システムにアクセスして不正な取引を提出できたと報告しました。その後の調査では、追加の侵入経路も見つかりました。興味深いことに、バイナンスは、ウォレットの秘密鍵―送金を承認するために使われる秘密のコード―が盗まれた証拠は見つかっていないと述べています。正確な手口はなお調査中ですが、攻撃者は取引を承認するシステムを突いたように見えます。

The attack was probably not a sudden decision. Blockchain investigators found evidence that the operation had been prepared and tested before the theft began. They also noticed similarities to the February 2025 attack on Bybit, another major cryptocurrency exchange, in which hackers stole about $1.5 billion by manipulating the system used to approve transactions. Some investigators have attributed the Binance attack to TraderTraitor, a sophisticated hacking group associated with North Korea, although responsibility has not been officially confirmed. What looked like a twenty-minute robbery may have been the result of weeks or even months of careful planning.

この攻撃は、おそらく突然の決断ではありませんでした。ブロックチェーンの調査者は、窃盗が始まる前に作戦が準備され、試験されていた証拠を見つけました。彼らはまた、2025年2月のバイビット攻撃との類似点にも気づきました。別の大手暗号資産取引所であるバイビットでは、ハッカーが取引承認システムを操作して約15億ドルを盗みました。一部の捜査関係者は、バイナンス攻撃を、北朝鮮と関連づけられる高度なハッキング集団トレーダートレイターの仕業だとみなしていますが、責任は公式には確認されていません。20分の強盗のように見えたものは、何週間、あるいは何か月もの慎重な計画の結果だったのかもしれません。

Meanwhile, Binance and other cryptocurrency companies were racing to stop the stolen money from moving further. By October 30, approximately $3 billion had been frozen, according to Binance. The company also promised to cover customers’ losses using its emergency fund and corporate reserves, setting aside more than $6.34 billion for that purpose. This was an important reassurance for customers, but it did not solve the whole problem. Replacing stolen assets with company money is different from recovering the original assets from the thieves.

そのあいだ、バイナンスやほかの暗号資産企業は、盗まれたお金がさらに動かないよう急いでいました。バイナンスによると、10月30日までに、およそ30億ドルが凍結されました。同社はまた、緊急資金と企業の準備金を使って顧客の損失を補填すると約束し、その目的のために63.4億ドル超を確保しました。これは顧客にとって重要な安心材料でしたが、問題全体を解決したわけではありません。盗まれた資産を会社のお金で置き換えることは、盗んだ側から元の資産を取り戻すこととは違います。

The incident reveals a weakness that is easy to overlook. Cryptocurrency networks use blockchain technology to keep records of transactions, making unauthorized changes to those records extremely difficult. But a secure record cannot guarantee that every transaction was properly approved in the first place. If criminals gain control of the instructions, the system may faithfully record the transfer of stolen money. The Binance heist exposed a troubling distinction: a technology can be highly secure while the institutions and systems that people depend on to use it remain vulnerable.

この出来事は、見落とされやすい弱点を明らかにしています。暗号資産ネットワークはブロックチェーン技術を使って取引の記録を残すため、その記録への不正な変更はきわめて難しくなっています。しかし、安全な記録は、すべての取引がそもそも正しく承認されたことを保証できません。犯罪者が指示を制御すれば、システムは盗まれたお金の送金を忠実に記録してしまうことがあります。バイナンス強盗事件は、厄介な区別を浮き彫りにしました。技術そのものは高度に安全でも、人々がそれを使うために頼る組織やシステムは、なお脆弱でありうるということです。

Vocabulary

  1. withdrawal — The act of taking money out of a bank account or financial service. Example: The bank temporarily blocked withdrawals after detecting unusual activity.
  2. legitimate — Allowed by law or rules, or considered reasonable and acceptable. Example: The security system must distinguish legitimate payments from fraudulent transactions.
  3. intervene — To become involved in a situation in order to change what is happening or prevent something harmful. Example: Regulators intervened when the bank showed signs of serious financial trouble.
  4. compromise — To gain unauthorized access to a computer, account, or system, making it insecure. Example: Hackers compromised an employee’s account and used it to access confidential information.
  5. authorize — To give official permission for something to happen. Example: Only senior managers can authorize transfers above $1 million.
  6. attribute — To identify someone or something as responsible for an action or event. Example: Investigators attributed the cyberattack to a criminal organization operating overseas.
  7. freeze — To prevent money or assets from being moved, withdrawn, or used. Example: Authorities froze the suspect’s bank accounts while investigating the fraud.
  8. reserves — Money or other assets kept available for future needs, emergencies, or financial obligations. Example: The company used its financial reserves to cover unexpected losses.
  9. heist — A carefully planned theft, especially one involving a large amount of money or valuable property. Example: The thieves spent months preparing for the museum heist.

Comprehension Questions

  1. What made the Binance incident on October 29 particularly remarkable?
    1. Cryptocurrency prices fell by $6.3 billion in twenty minutes.
    2. Most of approximately $6.3 billion in digital assets was stolen in about twenty minutes.
    3. Binance permanently closed its trading operations.
    4. All cryptocurrency transactions stopped worldwide.

    10月29日のバイナンス事案をとりわけ注目すべきものにしたのは何ですか？

  2. Why can hot wallets create security risks for cryptocurrency exchanges?
    1. They are designed to operate without an internet connection.
    2. They automatically reject all large withdrawals.
    3. Their ability to move funds quickly can be exploited if attackers gain control of transaction instructions.
    4. They prevent exchanges from checking customer identities.

    ホットウォレットが暗号資産取引所にとってセキュリティ上のリスクになりうるのはなぜですか？

  3. What has Binance reported about the possible cause of the attack?
    1. The private keys were definitely stolen from customers.
    2. A technical problem in the Bitcoin blockchain caused the losses.
    3. The entire attack was caused by a sudden decline in cryptocurrency prices.
    4. An engineer’s compromised laptop may have been involved, but other points of entry were also discovered.

    攻撃の考えられる原因について、バイナンスは何を報告していますか？

  4. Why does the article mention the 2025 Bybit attack?
    1. Investigators identified similarities between the two attacks, including the manipulation of transaction approval systems.
    2. Bybit and Binance were attacked on the same day.
    3. The Bybit attack was carried out by Binance employees.
    4. Bybit lost more money than Binance in the 2026 incident.

    記事が2025年のバイビット攻撃に言及するのはなぜですか？

  5. What distinction does the article make about Binance’s response?
    1. Freezing stolen assets automatically returns them to customers.
    2. Binance recovered all the stolen assets before promising compensation.
    3. Using company money to cover losses is different from recovering stolen assets from the attackers.
    4. Once assets are recorded on a blockchain, they cannot be stolen.

    バイナンスの対応について、記事はどのような区別をしていますか？

Discussion Questions

  1. Cryptocurrency exchanges need to process transactions quickly, but speed can create security risks. How should an exchange balance convenience, speed, and security, especially for large withdrawals?

    暗号資産取引所は取引をすばやく処理する必要がありますが、速さはセキュリティ上のリスクも生みます。とくに大口の出金について、取引所は利便性、速さ、セキュリティのバランスをどのように取るべきでしょうか？

  2. Binance promised to cover customers’ losses using its own funds. How might this affect customer confidence, and what additional evidence would customers need before trusting the exchange again?

    バイナンスは自社資金で顧客の損失を補填すると約束しました。これは顧客の信頼にどう影響しうるでしょうか。また、顧客が再び取引所を信頼する前に、どのような追加の証拠が必要でしょうか？

  3. Investigators have linked the Binance attack to a North Korean hacking group, but responsibility has not been officially confirmed. How should companies, governments, and news organizations communicate such findings while an investigation is continuing?

    捜査関係者はバイナンス攻撃を北朝鮮のハッキング集団と結びつけてきましたが、責任は公式には確認されていません。調査が続いているあいだ、企業、政府、報道機関はそのような知見をどのように伝えるべきでしょうか？

  4. The article distinguishes between secure blockchain records and vulnerable systems operated by cryptocurrency exchanges. What does this suggest about the relationship between technological security and the organizations that manage technology?

    記事は、安全なブロックチェーン記録と、暗号資産取引所が運用する脆弱なシステムとを区別しています。これは、技術的なセキュリティと、技術を管理する組織との関係について、何を示唆しているでしょうか？

  5. If a cryptocurrency exchange becomes so large that its failure could affect millions of customers, what responsibilities should governments and regulators place on it? How might excessive regulation create problems of its own?

    暗号資産取引所があまりに大きくなり、その破綻が何百万人もの顧客に影響しうる場合、政府や規制当局はそれにどのような責任を課すべきでしょうか。過度な規制は、それ自体どのような問題を生みうるでしょうか？

Speaking Practice

One-Minute News Briefing

Imagine you are explaining the Binance incident to a colleague who knows very little about cryptocurrency. Give a short briefing of approximately one minute, covering the following points: What happened at Binance, and why was the scale of the theft extraordinary? How might the attackers have exploited the exchange’s systems? What did Binance do to protect its customers? What broader lesson does the incident teach us about technological security? Try to use at least three expressions from today’s Vocabulary.

1分ニュース・ブリーフィング。暗号資産をほとんど知らない同僚に、バイナンス事案を説明しているつもりで話してください。およそ1分で、次の点をカバーしてください。バイナンスで何が起き、窃盗の規模が並外れていたのはなぜか。攻撃者は取引所のシステムをどのように突いた可能性があるか。バイナンスは顧客を守るために何をしたか。この出来事が技術的なセキュリティについて教える、より広い教訓は何か。今日のVocabularyから少なくとも三つの表現を使ってください。