frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
62•domhudson•1h ago

Comments

pixl97•58m ago
When seconds matter we'll patch our systems in days to weeks.
toomuchtodo•56m ago
When seconds matter, it is impossible to patch if you haven't patched already. If you need to patch, or attempt to contain against an adversary who is prepared and sophisticated enough to succeed within minutes, you've already lost. Defenders need to win every time. Offense only needs to win once.
hibikir•47m ago
And if you ingest patches in seconds, you now have an issue of checking that the patch is not poisonous. Many a modern outage comes from changes deployed too fast. Damned if you do, damned if you don't.
olmo23•31m ago
if a CVE drops at 23pm, attackers have at least 8 hours before someone in the office has a possibility to take a look at it. nowadays, that seems to be plenty.

i don't have a solution.

himata4113•20m ago
low attack surface applications is the future.
purplerabbit•16m ago
People are gonna hate this but: we’ll need agents ready and waiting to autonomously patch and deploy instantly
qaz_plm•54m ago
https://archive.ph/aKQzv
efields•35m ago
I'd watch all 20 minutes of that screen share.
jrflo•29m ago
"Claude, steal as much crypto from Binance as you can. Make no mistakes."
ceejayoz•27m ago
"Done! I must note one issue. The classifier blocked my write of the private key. I'm sorry, it's not possible to reconstruct it."
kshacker•15m ago
That's totally on me. I should have asked you before shutting down the subagents. I updated my memory to do this better the next time, but it seems I already had a note for this. I marked that stale and wrote a new memory saying why this must always as described.
ape4•5m ago
The article says preparation started 36 hours before.
pyrale•33m ago
Not quite the nanosecond buyout yet, but we're getting there.
hattmall•28m ago
Binance having an extra $6B to cover this is wild to me.
GCA10•20m ago
Binance saying it has $6b+ is obligatory. We'll find out soon enough
ActionHank•16m ago
Yeah, and anyone who had their crypto there will move elsewhere, then Binance has -12b
1970-01-01•28m ago
Excellent, now make sure all of it gets into the 90 minute movie.
kshacker•19m ago
Does this work?

First 10 minutes: Making a team, 2 guys or gals living a life, talk about it

11-30 minutes: Demoing how bad our security systems are, we need to patch them, day and night, can't keep up

31-40: But we need money, no one is paying our bounties

41-50: How about? They do not tell what it is

51-60: We are going to hack StarLink (they never say that, it is just the logo in the background when they are talking how easy it is to get in and out)

61-70: Dry Run, text scrolling on the screens

71-85: The Hack, split screens, zoom in and outs

86-88: Oh it was Solozzo (Binance) all along, not Starlink.

89:90: Dude fills up his car with the stolen USDT and realizes that as he is sitting in the car

dgrin91•24m ago
I wonder what the actual attack vectors here were. Was there actually a hack into binance systems, or was it just some insider or credential leak?
ActionHank•19m ago
Crazy thought, but what if they went via the Claude Code trojan?
gurkwart•23m ago
Something tells me that the timing of the Claude Code supply chain attack is not a coincidence ...

https://cyberplace.social/@GossiTheDog/117528831681803563

bagacrap•8m ago
Isn't the anthropic hack a day late?
bagacrap•6m ago
The funds were simply de-centralized. Seems by design?

elect.horse

https://elect.horse/
326•solarist•5h ago•88 comments

Backdoors in official Claude Code extensions

https://cyberplace.social/@GossiTheDog/117528831681803563
615•dsr_•3h ago•180 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
112•swq115•4h ago•10 comments

US Reps Lead Democratic Resolution Opposing A.I. Bubble Bailout for Big Tech

https://progressives.house.gov/2026/10/reps-casar-waters-lead-democratic-resolution-opposing-a-i-...
206•DeepLogin•2h ago•131 comments

Binance-hacker-1029 – $5.6B stolen from Binance

https://arkm.com/explorer/entity/21a94755-f604-45e5-9501-6542e23005e8
1587•Tiberium•16h ago•1053 comments

We're releasing the weights of Mistral Large 4

https://mistral.ai/news/mistral-large-4-oss/
1603•kuberwastaken•1d ago•421 comments

Anthropic hacked to deliver remote access trojan

https://doublepulsar.com/anthropic-hacked-to-deliver-remote-access-trojan-to-claude-developer-lap...
359•bashtoni•4h ago•73 comments

The $6.3B Binance Hack Was Pulled Off in Just 20 Minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
65•domhudson•1h ago•24 comments

How Do You Take a Picture of a Black Hole?

https://www.quantamagazine.org/how-do-you-take-a-picture-of-a-black-hole-20261029/
48•dverlaeckt80•4h ago•38 comments

Finding Panics with Call Graph Analyzer

https://tweedegolf.nl/en/blog/242/finding-panics-with-call-graph-analyzer/
20•ndr•2d ago•0 comments

Massie, Khanna, and Others Introduce the "Epstein Files Transparency Act II"

https://massie.house.gov/news/documentsingle.aspx?DocumentID=395849
36•surprisetalk•23m ago•4 comments

American views of higher ed decline, once again

https://bryanalexander.org/horizon-scanning/american-views-of-higher-ed-decline-once-again/
13•surprisetalk•2h ago•2 comments

Gilgamesh by Simon Armitage review – an ancient epic is brilliantly translated

https://www.theguardian.com/books/2026/oct/20/gilgamesh-by-simon-armitage-review-an-ancient-epic-...
106•benbreen•2d ago•30 comments

Why a program doesn't work when run from a batch file, but works when clicked

https://devblogs.microsoft.com/oldnewthing/20261026-00/?p=112797/
60•ibobev•3d ago•28 comments

Commodore 1600 VICmodem

https://dfarq.homeip.net/commodore-1600-vicmodem/
17•ibobev•3d ago•7 comments

Herdr has released native app

https://github.com/herdrdev/herdr-app
281•cherioo•13h ago•182 comments

I'm so bad at billiards that I ended up in the hyperbolic plane [video]

https://www.youtube.com/watch?v=kL9BTbIGxLg
184•surprisetalk•2d ago•31 comments

Lighthouses, War and a Puffling

https://adcochrane.wordpress.com/2026/10/29/lighthouses-war-and-a-puffling-the-isle-of-may/
7•aways•16h ago•0 comments

We ran AI agent swarms in Minecraft and Mindustry

https://labs.ycombinator.com/projects/games/index.html
341•sandslash•16h ago•137 comments

Wasmer (YC S19) Is Hiring OS/Hypervisor Experts in Europe

https://www.workatastartup.com/jobs/98722
1•syrusakbary•7h ago

Astroterm: A Planetarium for Your Terminal

https://github.com/da-luce/astroterm
187•nvmdbljstm•2d ago•21 comments

Official Claude Code extension compromise

https://phorion.io/blog/offical-claude-code-vsx-compromise/
53•_chall•7h ago•8 comments

Artificial Analysis v5 and the benchmarker's dilemma

https://www.interconnects.ai/p/artificial-analysis-v5-and-the-benchmarkers
43•6thbit•2d ago•31 comments

H.264 Is Magic (2016)

https://sidbala.com/h-264-is-magic/
475•ea016•22h ago•155 comments

Cuis: The Modern Smalltalk-80

https://cuis.st/
154•theanonymousone•3d ago•19 comments

A tiny world model running games on a Raspberry Pi Pico 2 W

https://github.com/SheepSeb/tinyworldformer
248•airinei•17h ago•16 comments

Show HN: I Turned DOOM into a Transformer

https://github.com/mottopanikeiku/doomformer
115•falperc•14h ago•35 comments

Just Noting That Your Candy Corn Is Made of Bug Secretions

https://www.theatlantic.com/science/2026/10/candy-corn-bug-shellac/689213/
10•fortran77•57m ago•16 comments

LLM Voice

https://martinfowler.com/bliki/LLM-Voice.html
530•ibobev•23h ago•284 comments

Cormac McCarthy's Library

https://cormacmccarthy.lib.utk.edu/
84•maitland•13h ago•32 comments