{"id":45408,"date":"2025-09-03T02:46:47","date_gmt":"2025-09-03T02:46:47","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=45408"},"modified":"2025-09-03T02:46:47","modified_gmt":"2025-09-03T02:46:47","slug":"is-binance-safu-north-korea-just-stole-13-5m-in-xvs-crypto-heist","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=45408","title":{"rendered":"Is Binance Safu? North Korea Just Stole $13.5M in XVS Crypto Heist"},"content":{"rendered":"<div>\n<p><span style=\"font-weight: 400\">In a shocking phishing attack, North Korean-connected cybercriminals hit a BNB crypto whale to steal $13.5M in Binance coins, and now the XVS price could be in question \u2013 here\u2019s why.<\/span><\/p>\n<p><span style=\"font-weight: 400\">A major Venus Protocol user lost about $13.5M on Sept. 1 after a phishing attack targeted their positions. On-chain data and security reports confirmed the attack. It happened at 3:26 PM UTC.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">Venus Protocol <\/span><a class=\"general-link\" href=\"https:\/\/x.com\/VenusProtocol\/status\/1962828670084751582\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">paused<\/span><\/a><span style=\"font-weight: 400\"> operations immediately after the incident. The platform said its smart contracts were still secure, and investigations are ongoing.<\/span><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">We are aware of the user wallet being drained (smart contract is safe) and are actively investigating. <\/p>\n<p>Venus is currently paused following security protocols. We will keep you all updated as soon as we know more.<\/p>\n<p>\u2014 Venus Protocol (@VenusProtocol) <a href=\"https:\/\/twitter.com\/VenusProtocol\/status\/1962828670084751582?ref_src=twsrc%5Etfw\" rel=\"nofollow\" target=\"_blank\">September 2, 2025<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<h2><b>Was the BNB Hardware Wallet Really Safe from Phishing?<\/b><\/h2>\n<p><span style=\"font-weight: 400\">Security firm Beosin first <\/span><a class=\"general-link\" href=\"https:\/\/x.com\/BeosinAlert\/status\/1962827068208828661\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">reported<\/span><\/a><span style=\"font-weight: 400\"> losses of over $27M. Later, PeckShield <\/span><a class=\"general-link\" href=\"https:\/\/x.com\/PeckShieldAlert\/status\/1962844096856568262\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">revised<\/span><\/a><span style=\"font-weight: 400\"> the number to $13.5M. The initial figure included the user\u2019s debt position. PeckShield said, \u201cInitial estimates were higher as we did not exclude the debt position.\u201d<\/span><\/p>\n<p><span style=\"font-weight: 400\">Yu Xian, founder of SlowMist, <\/span><a class=\"general-link\" href=\"https:\/\/x.com\/evilcos\/status\/1962823780298101111\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">said<\/span><\/a><span style=\"font-weight: 400\"> the user\u2019s hardware wallet itself was secure. But attackers compromised the browser extension linked to it.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">This gave them borrowing and redemption access to the user\u2019s Venus Protocol holdings without the owner knowing. The case shows that hardware wallets can still be exposed if connected software is vulnerable. Even secure storage can fail against careful social engineering.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Analysis shows the attack was planned and well-funded. Gas fees came from Monero (XMR) exchanges and other funds traced back to eXch, a dark web exchange linked to North Korean hackers.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Xian said the whale was specifically targeted and it wasn\u2019t a broad attack. The Venus Protocol frontend was likely safe while the event raises concerns about state-backed actors using phishing to go after high-value DeFi users.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Venus Protocol paused the platform to protect the remaining assets. The team <\/span><a class=\"general-link\" href=\"https:\/\/x.com\/VenusProtocol\/status\/1962856368832192556\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">confirmed<\/span><\/a><span style=\"font-weight: 400\"> direct contact with the affected user, and they said resuming too soon could have put more funds at risk. The protocol focused on user security rather than restarting operations quickly.<\/span><\/p>\n<p><strong>DISCOVER:\u00a0<a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/next-crypto-to-explode\/\" target=\"_blank\" rel=\"nofollow noopener sponsored\">20+ Next Crypto to Explode in 2025\u00a0<\/a><\/strong><\/p>\n<h2><b>Is XVS Price Recovery Sustainable After Venus Protocol Phishing Attack?<\/b><\/h2>\n<div class=\"cpp-crypto-chart cpp-crypto-chart-99btc cpp-crypto-chart-XVS\" data-coin-symbol=\"XVS\" data-price-usd=\"XVS Price (USD)\" data-main-color=\"#4caf05\" data-watermark-image=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/06\/99bitcoins-logo.png\" data-chart-style=\"99btc\">\n<div class=\"cpp-chart-top-section\">\n<div class=\"cpp-chart-info-section\">\n<div class=\"cpp-chart-coin-details\">\n<div class=\"cpp-chart-labels-row\">\n<div class=\"cpp-chart-coin-name\">Venus<\/div>\n<div class=\"cpp-chart-price-info\">Price<\/div>\n<div class=\"cpp-chart-market-cap\">Market Cap<\/div>\n<\/div>\n<div class=\"cpp-chart-values-row\">\n<div class=\"cpp-chart-coin-symbol\">XVS<\/div>\n<div class=\"cpp-chart-price\"><\/div>\n<div class=\"cpp-chart-market-cap-value\">$99.56M<\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"cpp-chart-selectors cpp-chart-selectors-99btc\"><span class=\"cpp-chart-selector\" data-period=\"24h\">24h<\/span><span class=\"cpp-chart-selector\" data-period=\"7d\">7d<\/span><span class=\"cpp-chart-selector\" data-period=\"30d\">30d<\/span><span class=\"cpp-chart-selector\" data-period=\"1y\">1y<\/span><span class=\"cpp-chart-selector\" data-period=\"all_time\">All time<\/span><\/div>\n<\/div>\n<p><canvas id=\"cpp-chart-68b799d005793\" class=\"cpp-chart-container cpp-chart-container-99btc\"><\/canvas><\/div>\n<p><span style=\"font-weight: 400\">According to Coinglass <\/span><a class=\"general-link\" href=\"https:\/\/www.coinglass.com\/currencies\/XVS\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">data<\/span><\/a><span style=\"font-weight: 400\">, the market was mostly bullish between June and before the attack.<\/span><\/p>\n<p><span style=\"font-weight: 400\">The positive and steady funding rate indicates that the XVS token is supported by the general trend of the derivatives traders primarily being geared towards making gains.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">Although periods of bearishness were experienced, especially in mid-June, the general trend is that of a market with a long-term interest in long positions.\u00a0<\/span><\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-279034\" src=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573.jpg\" alt=\"\" width=\"1600\" height=\"423\" srcset=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573.jpg 1600w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573-300x79.jpg 300w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573-1024x271.jpg 1024w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573-768x203.jpg 768w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573-1536x406.jpg 1536w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000811.573-50x13.jpg 50w\" sizes=\"(max-width: 1600px) 100vw, 1600px\"><\/p>\n<p><span style=\"font-weight: 400\">(<a class=\"general-link\" href=\"https:\/\/www.coinglass.com\/funding\/XVS\" target=\"_blank\" rel=\"noopener nofollow\">Source \u2013 XVS Funding Rate, CoinGlass<\/a>)<\/span><\/p>\n<p><span style=\"font-weight: 400\">The XVS\/USDT pair saw high volatility over the past 24 hours as XVS fell up to -9% after the attack, then partially recovered.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">It briefly dropped below the $6.00 level before bouncing back above it. Currently, XVS <\/span><a class=\"general-link\" href=\"https:\/\/www.tradingview.com\/chart\/uj82ikFk\/?symbol=BINANCE%3AXVSUSDT\" target=\"_blank\" rel=\"noopener nofollow\"><span style=\"font-weight: 400\">trades<\/span><\/a><span style=\"font-weight: 400\"> at $6.11, up +0.58% on the 1-hour chart. Buyers tried to recover after a heavy sell-off.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-279035\" src=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461.png\" alt=\"\" width=\"1600\" height=\"936\" srcset=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461.png 1600w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461-300x176.png 300w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461-1024x599.png 1024w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461-768x449.png 768w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461-1536x899.png 1536w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000818.461-50x29.png 50w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\"><\/p>\n<p>(<a class=\"general-link\" href=\"https:\/\/www.tradingview.com\/chart\/uj82ikFk\/?symbol=BINANCE%3AXVSUSDT\" target=\"_blank\" rel=\"noopener nofollow\">Source \u2013 XVS USDT, TradingView<\/a>)<\/p>\n<p><span style=\"font-weight: 400\">A large red Heikin Ashi candle on high volume shows a possible liquidation or panic selling. Prices briefly fell under $5.60 but bounced quickly.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">This drop met strong buy-side support, and it could have been a liquidity grab or stop-hunt. Volume hit 3.23K, much higher than the usual hourly turnover.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Technically, the 50 EMA (red) and 100 EMA (blue) now act as resistance at $6.20 and $6.26. The price is below both EMAs, suggesting a short-term bearish trend.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">The 100 EMA slope is flattening, showing that recent bullish momentum is fading. Before the attack, XVS price had been moving sideways to slightly downward since August. It repeatedly failed to break $6.50. The breakdown shows bears have short-term control.<\/span><\/p>\n<p><span style=\"font-weight: 400\">Still, the fast swing around $6.00 indicates that buyers are protecting this level. The $6.00-$6.26 range is possibly a decision zone.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\">An upward move above the 100 EMA may lure momentum traders who want $6.40. A decline to below $6.00 may challenge recent lows of about $5.60.<\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-279036\" src=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890.png\" alt=\"\" width=\"1548\" height=\"842\" srcset=\"https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890.png 1548w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890-300x163.png 300w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890-1024x557.png 1024w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890-768x418.png 768w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890-1536x835.png 1536w, https:\/\/99bitcoins.com\/wp-content\/uploads\/2025\/09\/unnamed-2025-09-03T000823.890-50x27.png 50w\" sizes=\"auto, (max-width: 1548px) 100vw, 1548px\"><\/p>\n<p><span style=\"font-weight: 400\">(<a class=\"general-link\" href=\"https:\/\/hacken.io\/insights\/q1-2025-security-report\/\" target=\"_blank\" rel=\"noopener nofollow\">Source \u2013 Hacken<\/a>)<\/span><\/p>\n<p><span style=\"font-weight: 400\">This attack shows a common risk in DeFi: phishing scams that trick users into approving tokens. Attackers can drain funds until permissions are revoked. CertiK <\/span><a href=\"https:\/\/www.certik.com\/resources\/blog\/hack3d-the-web3-security-quarterly-report-q2-h1-2025#\" rel=\"nofollow\" target=\"_blank\"><span style=\"font-weight: 400\">reports<\/span><\/a><span style=\"font-weight: 400\"> phishing caused $410M in losses across 132 cases in the first half of 2025. Hacken <\/span><a href=\"https:\/\/hacken.io\/insights\/q1-2025-security-report\/\" rel=\"nofollow\" target=\"_blank\"><span style=\"font-weight: 400\">estimates<\/span><\/a><span style=\"font-weight: 400\"> social engineering and phishing cost $600M in the same period.<\/span><\/p>\n<p><strong>EXPLORE:\u00a0<a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/best-meme-coin-icos\/\" target=\"_blank\" rel=\"nofollow noopener sponsored\">Best Meme Coin ICOs to Invest in 2025<\/a><\/strong><\/p>\n<p><strong><a class=\"general-link\" href=\"https:\/\/discord.gg\/B7Uk6agkqj\" target=\"_blank\" rel=\"nofollow noopener\"><span data-preserver-spaces=\"true\">Join The 99Bitcoins News Discord Here For The Latest Market Updates<\/span><\/a><\/strong><\/p>\n<p>The post <a href=\"https:\/\/99bitcoins.com\/news\/altcoins\/is-binance-safu-north-korea-just-stole-13-5m-in-xvs-crypto-heist\/\">Is Binance Safu? North Korea Just Stole $13.5M in XVS Crypto Heist<\/a> appeared first on <a href=\"https:\/\/99bitcoins.com\/\">99Bitcoins<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In a shocking phishing attack, North Korean-connected cybercriminals hit a BNB crypto whale to steal $13.5M in Binance coins, and now the XVS price could be in question \u2013 here\u2019s why. A major Venus Protocol user lost about $13.5M on Sept. 1 after a phishing attack targeted their positions. On-chain data and security reports confirmed [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-45408","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/45408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=45408"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/45408\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=45408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=45408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=45408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}