Binance exploit funds locked after misdirected transfer to NEWT contract
Security & Exploits ยท
An attacker behind a Binance exploit appears to have sent roughly $3.5 million in tokens to the immutable Newton (NEWT) contract, a move that reportedly makes the funds permanently inaccessible.
The transfer is said to have included approximately 8 million NEWT tokens along with 17 other assets, all routed into the NEWT token contract itself rather than a wallet the attacker controls. Because the contract is immutable, there is no function available to move or recover tokens sent to it, which would leave the roughly $3.5 million stranded regardless of who holds the private keys tied to the original exploit, according to ๐/@NewtonFndn.
The underlying theft has been linked to a Binance exploit, though the specifics of how the attacker obtained the tokens before the misdirected transfer have not been detailed. Suspicion has fallen on North Korea-linked actors as a possible source of the exploit, but this attribution remains unconfirmed. One account tracking the incident flagged the development via ๐.
The episode illustrates a recurring theme in crypto security: attackers who successfully breach a system do not always execute the final steps of laundering or moving stolen funds without error. In this case, a transaction meant to move or consolidate assets instead sent them into a contract with no withdrawal mechanism, converting a theft into a loss for the attacker as well as the original victims. Immutable contracts, by design, cannot be upgraded or patched to add a recovery function after deployment, which is precisely what makes the locked tokens unrecoverable barring some unforeseen technical workaround.
The event sits within a broader pattern of exploit activity across the industry, including a separate incident in which an attacker reportedly minted 1 billion DOT on Ethereum through a Hyperbridge gateway exploit for a $237,000 profit, and a suspected Thorchain exploit that drained more than $7.4 million across Bitcoin, Ethereum, BSC, and Base. Security tooling has also been expanding in response to this environment, with efforts such as a DeFi vulnerability scanner and an AI-based auditing tool aimed at catching flaws before they are weaponized.
Unresolved questions include the identity of the attacker, whether the North Korea connection will be substantiated, and whether Binance or Newton will comment further on the exploit's origin or the final disposition of the locked $3.5 million.