Ethereum co-founder Vitalik Buterin has raised the prospect of tougher consequences for crypto companies whose security failures allow stolen funds to reach North Korea.
+81
+76
+217
In a Nov. 4 interview with Moneycontrol, Buterin suggested persistent hacking could push regulators to demand more conservative security practices.
Describing an extreme scenario in which stolen funds reach North Korea, he said: “They should treat that as donating to North Korea.”
“Things are going to move in that direction in terms of pushing people to take things more seriously. Everyone is adapting now,” he said.
He also distinguished the security of blockchain applications from the infrastructure surrounding them.
In his assessment, recent major attacks have increasingly targeted user interfaces and centralized components, even as smart-contract security has improved.
Buterin said companies were recognizing that their immediate responsibility was:
“not to win but to survive”
He expects exchanges and institutions to adopt a defensive approach he called “bunker mode,” in which they prioritize resilience against attacks.
His recommendations included multisignature wallets and more deliberate questioning of security arrangements.
The comments follow the Oct. 29 Binance breach, which the exchange estimates affected approximately $6.34 billion in digital assets.
In its Nov. 3 investigation update, Binance said it would absorb “the financial impact of the stolen funds, not our users.”
The company said it had allocated more than enough funding to cover the loss and had replenished 98% of affected token assets as of Oct. 31.
It also reported approximately $2.85 billion in frozen or intercepted assets, subject to reconciliation and market-price changes.
“In the long term, the only solution is that we do have to make things actually secure,” Buterin added.
“The challenge is the set of things that you can do securely keeps going up and up.”
The North Korean connection extends beyond Buterin’s hypothetical comparison.
In an Oct. 31 alert, the FBI attributed the Binance theft to North Korea’s TraderTraitor operation.
The agency said investigators had observed stolen assets being converted primarily into Ethereum.
It urged exchanges and other service providers to block transactions associated with identified attacker addresses.
“If you have any information to provide, please contact your local FBI field office or FBI’s Internet Crime Complaint Center,” the report said.
Buterin also argued that recent major breaches have increasingly targeted interfaces and centralized infrastructure.
To combat this, he recommended multisignature wallets and greater scrutiny of security arrangements.
TRM Labs’ analysis of the Binance attack highlighted the importance of authorization controls, as the firm traced unauthorized transfers across ten blockchains.
On Ethereum, attackers used pre-signed EIP-7702 authorizations to make a hot wallet execute malicious instructions.
Transfers on other networks used conventional signatures, leading TRM to assess that Binance’s wallet-signing infrastructure had been compromised.
Binance announced it had rebuilt systems along the attack path and strengthened device controls.