Two cryptocurrency security stories led reporting on Monday, both concerning the aftermath of a compromise rather than the compromise itself. Binance announced the departure of its chief financial officer nine days after the largest crypto theft on record. Separately, a Consensys-owned authentication provider exposed private keys belonging to tens of thousands of wallet holders who had opted out of managing their own recovery phrases. Here’s a closer look at today’s top cybersecurity headlines.
Binance confirmed on Saturday that chief financial officer Kaiser Ng is leaving the exchange, naming former Airwallex finance vice-president Justin Yek as his successor. Ng has held the role since January 2022 and previously worked at rival exchange Kraken. Co-chief executive Yi He said Ng “has decided to pursue a new venture after more than five years at Binance, with a transition plan implemented over the last half year.” The exchange has explicitly rejected any link between the departure and the 29 October breach. Ng confirmed the move publicly on Sunday, describing the shift from chief financial officer to founder as a significant step. The announcement comes nine days after attackers removed $6.34 billion in digital assets, a theft the FBI and blockchain analytics firm TRM Labs have attributed to the North Korean group TraderTraitor. Binance has covered the full loss from its own reserves.
Source: Fintech News Singapore citing Reuters, Coinpaper
Web3Auth, the authentication infrastructure provider owned by Consensys, suspended its embedded wallet service at approximately 21:13 UTC on 6 November after a security issue exposed user private keys. Keplr, a widely used Cosmos ecosystem wallet that relied on Web3Auth for Google and Apple sign-in, disabled social logins the following day. Blockchain forensics firm Bitquery has traced roughly $6.01 million in outflows from at least 44,041 wallets across eight Cosmos chains, with Cosmos Hub accounting for around $3.5 million, Osmosis $1.04 million and Injective $615,000. Wallets created using a recovery phrase or connected hardware device were not affected, and neither were MetaMask or Trust Wallet users. Two findings stand out. Bitquery recorded 86 percent of outflows occurring after Keplr issued its public warning. Web3Auth has also disputed the $6 million total, on the basis that white-hat recovery transfers moving at-risk assets into protective custody appear on-chain as indistinguishable from theft. Neither company has published a root-cause analysis.
Source: Bitquery, crypto.news, Cryptobriefing
Both cases show that an incident does not end at containment. Binance has reimbursed customers in full and is managing an executive transition under public scrutiny. Keplr’s own application code was not compromised, yet 44,000 of its users were exposed, because the component holding their keys sat with a third party.