Uneasy Money: What the $6B Binance Hack Revealed About Who Can Freeze Stolen Funds
Uneasy Money: What the $6B Binance Hack Revealed About Who Can Freeze Stolen Funds
1 hour ago•Unchained•Laura Shin
Podcast1 hr 17 min
Listen to Episode
Note: AI-generated summary based on third-party content. Not financial advice. Read more.
Quick Insights
  • Treat exchange-held crypto as a distinct risk: the Binance hack showed that an exchange incident can spill into DeFi and affect assets across chains.
  • The discussion was constructive on Ethereum (ETH) development, but offered no price target or clear buy signal; avoid treating incident-driven price moves as reliable indicators of value.
  • Aave (AAVE) operated as designed during the incident, but the episode gave no investment outlook; assess protocol risk controls before investing.
  • Be cautious with THORChain exposure given the reported laundering activity, double-spend incident, and potential legal risks.
Detailed Analysis

Binance

  • The episode discussed a major hack affecting Binance users, with the hosts describing approximately $6 billion as stolen. They said the attacker moved funds across multiple chains and that a large amount reached Ethereum.
  • The hosts described a rapid, coordinated response involving Binance, stablecoin issuers, DeFi protocols, and security researchers. They viewed the effort to limit the attacker’s access to funds as comparatively successful.
  • The incident also highlighted that an exchange’s security failure can create risks for assets and protocols elsewhere in the crypto ecosystem.

Takeaways

  • Treat exchange exposure as a distinct risk from holding crypto directly: an exchange incident can affect users and trigger knock-on effects across DeFi.
  • The episode offered no specific view on Binance as an investment or on a Binance-related price target.

Ethereum (ETH)

  • The attacker exchanged some stolen stablecoins for ETH, including by supplying $60 million of USDT to Aave and borrowing roughly $45 million of ETH.
  • Aave’s risk team said that position had little room before liquidation. If ETH rose enough, the collateral position could be liquidated.
  • ETH was also discussed as an asset whose price can be difficult to assess during a fast-moving incident: market prices and available liquidity may not reflect the price at which a large, motivated seller can actually trade.
  • Separately, the hosts expressed optimism about the pace of Ethereum development, saying its roadmap appeared to be accelerating.

Takeaways

  • Large on-chain trades and leveraged positions can have consequences beyond the immediate trader, including liquidation risk and pressure on DeFi markets.
  • The discussion was constructive about Ethereum’s development pace, but it did not give an ETH price target or a specific buying recommendation.

Aave

  • The guest emphasized that Aave itself did not lose funds in the incident: the lending protocol operated as designed, with loans backed by collateral.
  • The attacker used Aave to borrow ETH against USDT. Aave temporarily froze the affected markets to prevent new borrowing and new deposits while allowing users to repay loans, withdraw funds, and continue facing normal liquidation rules.
  • The episode described Aave’s response as a manual process involving risk teams and multisignature operators. The guest said the team was working on more automated risk controls, while also acknowledging trade-offs between speed, security, and open access to capital.

Takeaways

  • Aave’s response illustrated how DeFi protocols can limit new exposure without necessarily blocking existing users from withdrawing or repaying.
  • The incident also highlighted the importance of protocol risk controls and the challenges of adding automation without creating new risks. The episode did not offer a price outlook for AAVE.

Tether (USDT)

  • The attacker moved large amounts of USDT and used $60 million of USDT as collateral on Aave to borrow ETH.
  • The hosts said Tether acted quickly to freeze some funds. They discussed the ability of centralized stablecoin issuers to freeze tokens as an important part of the response.

Takeaways

  • USDT’s issuer-level freeze capability can help contain stolen funds, but it also means that token balances are not entirely beyond the issuer’s control.
  • The discussion focused on USDT’s role in the incident, not on its yield or investment merits.

USD Coin (USDC)

  • The hosts said Circle froze funds quickly during the incident, reportedly within minutes of Tether’s action.
  • They discussed the speed of that response as notable, while also noting that issuer intervention can affect token holders.

Takeaways

  • USDC’s role in the response showed how a centralized stablecoin issuer may be able to limit the movement of funds during a theft.
  • Consider issuer controls and the possibility of freezes when evaluating stablecoins; the episode made no specific recommendation to buy or avoid USDC.

Synthetix (SNX)

  • The hosts said approximately 9 million SNX had been stolen in the incident. They described the amount as significant for the Synthetix ecosystem.
  • Synthetix participants examined what intervention was possible and used the protocol’s token authority to create an approval and transfer the tokens to the DAO.
  • The discussion framed this as a difficult trade-off between preventing North Korea from retaining stolen assets and preserving expectations around decentralization and token-holder control.

Takeaways

  • The incident showed that protocol governance and administrative powers can become relevant during a crisis, including in ways that may surprise token holders.
  • For SNX holders, the episode underscored the importance of understanding a protocol’s upgrade powers and emergency controls. It did not provide an SNX price target.

THORChain

  • The hosts said THORChain processed laundering activity involving funds attributed by U.S. authorities to North Korea.
  • They also described a double-spend linked to a one-block Ethereum reorganization. THORChain paused much of its activity, updated its software, and later resumed.
  • The hosts said THORChain subsequently processed close to $200 million in volume involving the stolen funds. They warned that operators had been explicitly called out in a U.S. government notice and raised concerns about possible legal exposure.

Takeaways

  • The episode presented THORChain as facing substantial technical, operational, and potential legal risks at that time.
  • These issues are relevant to assessing exposure to the protocol; the transcript did not discuss a specific THORChain token price or investment recommendation.

Chainlink

  • Chainlink was discussed as an oracle and data-infrastructure provider. The guest described work with Chainlink on pricing feeds for tokenized assets and said Chainlink’s runtime environment could allow teams to implement custom risk logic.
  • The discussion emphasized that price feeds require choices about data sources, aggregation, timing, and liquidity; they are not simply a definitive “true” price.

Takeaways

  • Oracle infrastructure is an important risk layer for DeFi, especially as protocols support assets with more complicated trading hours and liquidity.
  • This was a discussion of Chainlink’s technology and role in the ecosystem, not a direct investment view on LINK.

Tokenized Stocks

  • The guest said a tokenized-stock instance had recently launched on Base and described the challenge of creating reliable prices across regular, overnight, and early-morning trading sessions.
  • The discussion stressed that differing liquidity and trading volumes across sessions make pricing and risk management more complex.

Takeaways

  • Tokenized stocks were presented as an emerging DeFi theme, but with significant pricing and liquidity challenges.
  • The episode did not name specific stocks or recommend any tokenized stock.

Nexo

  • Nexo appeared in a sponsored advertisement, which described a platform for earning daily interest on crypto and borrowing against digital assets. The ad stated that eligibility, geographic restrictions, and terms apply.

Takeaways

  • The transcript provides only promotional claims, not an independent assessment of Nexo’s products, rates, or risks.
  • Review the applicable terms and eligibility conditions before considering a crypto lending or yield platform.

Bitcoin (BTC)

  • Bitcoin was mentioned briefly as an example while the hosts discussed how crypto prices can depend on market conditions, liquidity, and the size or urgency of a trade.
  • No Bitcoin-specific outlook, price target, or recommendation was discussed.

Takeaways

  • The relevant point was about the difficulty of interpreting market prices during stressed or illiquid conditions, not a specific view on BTC.

Ask about this postAnswers are grounded in this post's content.
Episode Description
The $6B Binance hack sent stolen funds through Aave. LlamaRisk CEO Adam Sadowski walks through the market freeze and why nothing was taken from the protocol. ======================================================== Thank you to our sponsor! Put your crypto to work with Nexo: earn daily interest or borrow funds against your assets on one platform trusted by more than 10 million clients. Find out more at⁠⁠⁠ Nexo⁠⁠⁠. Geo-restrictions, eligibility and terms apply. ======================================================== Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for. Our ⁠listener survey⁠ takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who finishes it gets a free month of Premium, Unchained or Bits + Bips, your pick. Open through Sunday, November 8. — Laura ======================================================== North Korean hackers pulled roughly $6 billion out of Binance, and within minutes Tether and Circle were freezing stablecoins as the attackers raced to swap into ETH, routing part of the haul through Aave. Adam Sadowski, CEO of LlamaRisk, Aave's risk provider, joins Kain Warwick and Taylor Monahan to walk through the overnight market freeze, why nothing was stolen from Aave, and whether anyone should be able to deposit $1 billion and borrow all the ETH in a single block. They also cover Aave's 4-of-7 guardian multisig, AI agents hunting for exploits, why Kain says there is no such thing as the price of an asset, how an AI model helped Synthetix recover 9 million stolen SNX, and Taylor's warning after THORChain processed nearly $200 million for North Korea despite an FBI callout. Once a protocol has the power to stop a theft, can it still choose not to? Hosts: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Kain Warwick⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ - Host of Uneasy Money and Founder of Infinex and Synthetix ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Taylor Monahan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ - Co-host of Uneasy Money and Security Expert⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Guest: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Adam Sadowski - CEO of LlamaRisk Timestamps 🎬 00:00 Intro 📋 00:22 Unchained Survey: complete the listener survey at https://unchainedcrypto.com/survey 🎙️ 01:17 Bits + Bips: search Bits + Bips and subscribe to our weekly crypto and macro show at https://www.youtube.com/@Bitsandbips 🚨 01:49 The $6B Binance hack and how Tether and Circle froze funds in minutes 🔍 10:16 How the Binance hacker routed $60M in USDT through Aave to borrow ETH ⚖️ 14:16 Should anyone be able to deposit $1B and borrow all the ETH in one block? 💰 23:18 Nexo: Generate daily interest on your crypto or borrow funds against your assets at https://unchainedcrypto.com/go/nexo-podcast-yt 🤝 24:00 Why Kain ranks the Binance response among crypto's best anti-heist efforts 🛡️ 27:51 Aave's guardians, risk stewards, and the race against AI exploit agents 🧩 31:40 Why Kain thinks adding complexity is the most dangerous move for Aave 📈 37:23 Who decides the price? Oracles, tokenized stocks, and Chainlink CRE 🪙 44:57 How an AI model found Synthetix a way to recover 9M stolen SNX ⛓️ 54:42 How a one-block Ethereum reorg made THORChain double spend mid-hack 🚔 01:00:41 Why Taylor fears the FBI callout could send Thor node operators to prison 🏦 01:07:24 A French bank heist, ZachXBT, and the $30M that couldn't be frozen Learn more about your ad choices. Visit megaphone.fm/adchoices
About Unchained
Unchained

Unchained

By Laura Shin

Crypto assets and blockchain technology are about to transform every trust-based interaction of our lives, from financial services to identity to the Internet of Things. In this podcast, host Laura Shin, an independent journalist covering all things crypto, talks with industry pioneers about how crypto assets and blockchains will change the way we earn, spend and invest our money. Tune in to find out how Web 3.0, the decentralized web, will revolutionize our world. Disclosure: I'm a nocoiner.