WuBlockchain
Bitfinex hacker Ilya Lichtenstein told CNN on November 1 that the Binance hack resembled North Korean tactics focused on exploiting weak links. He said attackers may target employees with phishing that leads them to download malware, rather than breach an exchange’s website directly.
Why it matters
The account highlights employees as a potential route into exchange systems. A phishing attack can target people and their devices instead of the public-facing platform, shifting attention to internal security practices.
Market impact
Lichtenstein said the first 48 hours are crucial for tracing stolen funds. He added that AI agents can speed transfers, while blockchain records remain traceable years later.
Lichtenstein stole about 120,000 BTC from Bitfinex in 2016. He and his wife pleaded guilty to money-laundering conspiracy in 2023. Sentenced to five years in 2024, he was released early in January 2026 and says he now works as a white-hat hacker.
Frequently asked questions
-
What attack method did Lichtenstein say may have been used?
He said attackers may phish employees into downloading malware, targeting weak links rather than breaching the exchange website directly.
-
Why did Lichtenstein emphasize the first 48 hours?
He called the first 48 hours crucial for tracing stolen funds.
-
Can stolen funds still be traced after transfers speed up?
Lichtenstein said AI agents can speed transfers, but blockchain records remain traceable years later.
-
How much bitcoin did Lichtenstein steal from Bitfinex?
He stole about 120,000 BTC from Bitfinex in 2016.
-
What is Lichtenstein doing after his release?
Released early in January 2026, Lichtenstein says he now works as a white-hat hacker.
CryptoSlate
CoinDesk
Lookonchain
CoinTelegraph
Crypto News