Binance hackers had 8 weeks of access before $6.3B exploit, Security Alliance estimates

The hackers behind the $6.3 billion exploit of Binance likely had access to the exchange's systems for eight weeks before executing the theft, according to estimates from cybersecurity firm Security Alliance. The prolonged access window allowed the attackers to study internal processes and plan a multi-stage intrusion, similar to patterns seen in other major crypto heists. Security Alliance noted that the same sophisticated approach was used in the $388 million Bitget hack, suggesting a coordinated or copycat threat actor group targeting major cryptocurrency exchanges. The Binance breach, one of the largest in crypto history, underscores the growing sophistication of cybercriminals and the need for exchanges to detect and respond to intrusions more quickly. The eight-week dwell time raises questions about Binance's monitoring capabilities and incident response protocols. As the crypto industry faces increasing regulatory scrutiny, this incident may accelerate calls for stricter security standards and mandatory breach reporting. The takeaway: exchanges must assume breach and prioritize rapid detection, as even the largest platforms remain vulnerable to patient, well-resourced attackers.