Supervisors at the Federal Reserve and the Office of the Comptroller of the Currency (OCC) contacted U.S. banks this week to check whether their systems had weaknesses after the $6.3 billion theft from crypto exchange Binance, Reuters reported Thursday, citing several sources. The outreach is the first sign that bank regulators see the crypto heist as a possible risk to traditional finance, and it previews the questions bank boards may soon face from examiners.
What Happened
Supervisors from the two agencies began calling banks Monday morning, asking whether they had seen unusual activity or service disruptions, according to the report by Stephen Gandel and Nupur Anand. One bank that was contacted reported no disruptions; its staff prepared talking points for customers but received few questions.
Banks are studying the Binance attack and running diagnostics to prepare for similar ones. Within hours of the theft, a cybersecurity team at one of the largest U.S. banks contacted counterparts at Binance; that bank is preparing an internal report that could lead to a systems review and security updates. Reuters said it was unclear whether the bank is exposed to the same tactics.
One source told Reuters the main worry is that fast-improving artificial intelligence models make it hard for banks to keep pace with hackers, and that banks are spending heavily on reviewing and patching security code.
The Fed and OCC declined to comment. Binance said it was unaware of the talks and of any effect on U.S. banks. "We are in close contact with regulators all over the world, keeping them up to date on this security breach," a Binance spokesperson said, according to Reuters.
Why It Matters
The concern, Reuters reported, is that closer ties between crypto markets and traditional finance could carry cyber risk into the wider financial system. Those ties have been encouraged: the Fed rescinded a 2022 policy that had told banks to seek supervisory approval before starting crypto activities, Reuters noted.
How Binance was breached suggests where examiners may look. The Primary Wire reported that Binance traced the theft to a fake job interview that infected an engineer’s work computer and to an internal AI tool the attacker used to reach other engineers’ machines. Bank boards should expect questions on recruiting lures aimed at engineers, developer laptops, access to internal AI tools and crypto exposure.
What to Watch
The FBI has blamed the theft on North Korea’s TraderTraitor hacking group, The Primary Wire reported. Watch whether the Fed and OCC turn their calls into written guidance or an examination priority, and what the large bank’s internal review finds.
