Zhao Warns Banks Face Greater Cyber Risk Than Crypto Exchanges

Attackers drained roughly $6.3 billion from Binance hot wallets on Oct. 29, and the FBI attributed the intrusion to North Korea's TraderTraitor group. Industry partners froze nearly $3 billion of the stolen assets. Now Binance founder Changpeng Zhao is widening the alarm beyond crypto, warning that traditional banks may be more exposed to cyberattacks than exchanges as artificial intelligence hands attackers new capabilities.

"If a crypto exchange can be hacked, banks are in a worse position, in my opinion," Zhao said. Exchanges draw attackers because of the potential rewards, he argued, which means they also build the heaviest defenses. He urged financial firms to deploy AI in their own security stacks and to cooperate on shared security standards.

Zhao's warning followed one of the largest thefts in crypto history. And the mechanics of the breach matter as much as its size.

How did the attackers pull it off?

The intruders used an AI tool during the Oct. 29 operation, according to Zhao's account of the incident. The attack was not opportunistic. The attackers spent months preparing, running fake job interviews and planting poisoned software downloads before moving on the hot wallets.

That preparation is the operational detail that should worry bank security teams. A patient, socially engineered supply-chain campaign is exactly the kind of threat that legacy financial institutions, with sprawling vendor networks and slower patch cycles, struggle to contain.

Zhao has previously discussed how customer-loss coverage shapes the real-world impact of an exchange theft, framing insurance and reimbursement as the line between a hack and a catastrophe.

What does this change for financial firms?

The practical question is simple: what does this change for banks? Zhao's answer is that the threat model has shifted. AI lowers the cost of sophisticated attacks, and the Oct. 29 intrusion showed attackers already treating a major exchange as a months-long project rather than a target of opportunity.

If exchanges, which face constant attack pressure and invest accordingly, can still be breached, then institutions with thinner crypto-facing defenses sit further down the risk curve. Zhao's prescription is twofold: adopt AI-driven defensive tools to match AI-driven offensive tools, and build cooperative security standards across the financial system rather than each firm hardening in isolation.

Binance admits its own failures

Zhao did not spare his own company. In a separate Nov. 4 statement, he acknowledged serious security failures at Binance. He said the breach exposed weaknesses that should have been prevented.

That admission carries weight. A founder publicly conceding preventable lapses after a $6.3 billion theft sets a benchmark for post-incident disclosure at a time when regulators on both sides of the Atlantic are scrutinizing how crypto firms handle breaches and customer compensation.

What happens next?

The frozen $3 billion shows industry coordination can claw back part of a haul, but more than half the stolen assets remain unaccounted for. Expect the TraderTraitor attribution to keep law-enforcement attention on North Korean crypto theft through the coming months, and expect bank security budgets to factor AI-era threats into their next planning cycles.