Crypto - Security Breach at Binance! Your Wallet is in Danger!

In June 2024, the crypto community is shocked after the hacking of a Chinese trader’s Binance account, who loses 1 million dollars. The attack, made possible by the malicious Aggr plugin on Chrome, reveals the risks faced by crypto holders. Binance is criticized for its lack of responsiveness and transparency.

Crypto: An Unexpected Scam with Heavy Consequences

On May 24, trader CryptoNakamao notices suspicious movements on his Binance account. When he checks the Bitcoin rate, it is too late: the hacker has already made many trades before draining the funds.

The victim then realizes that the Aggr plugin installed on Chrome was a Trojan horse stealing browsing data and cookies. The hackers were able to hijack the active session of the crypto trader without a password or two-factor authentication.

Sophisticated Hacking Techniques

This attack shows the creativity of hackers in circumventing security measures and stealing Bitcoins and other cryptos. Here, they used the stolen cookies to perform cross-trading, placing simultaneous buy and sell orders on a low-liquidity pair.

Concretely, they bought many tokens in USDT, placed sell orders at excessive prices on BTC, USDC pairs, etc. Then they used leverage to inflate prices and pocket profits, without leaving a trace on the blockchain.

Binance’s Inaction Pointed Out

The trader claims that Binance knew about this fraudulent plugin for a while, without acting to protect crypto users. Despite unusual volumes and the victim’s complaints, the platform did not react in time.

For CryptoNakamao, Binance failed by not alerting its community and not quickly freezing suspicious funds. This reflects the concerns of crypto users about the security and transparency of major centralized exchange platforms.

This case reminds us that despite progress, the crypto ecosystem remains risky. As digital assets attract more investors, platforms like Binance must strengthen their anti-fraud and protection measures. Everyone must also be aware of the dangers and adopt good cybersecurity practices to protect their crypto assets. Because in this digital Wild West, a simple plugin can empty an account.