US Regulators Contact Banks After $6.3B Binance Hack; India Names AI-Assisted Threat Actor Targeting Fintechs
The Fed and OCC began checking bank systems for anomalies after the record crypto exchange theft, while India's CERT-In warned of 'CRAFTY FALCON' attacking fintech APIs on weekends.
Reuters reported that Federal Reserve and OCC supervisors began contacting banks on November 2 to ask about unusual activity and service disruptions following the theft of about US$6.3 billion in crypto from Binance on October 29 — the largest such theft on record, attributed by the FBI to North Korea's TraderTraitor group. Binance's briefing said the campaign began with a fake job interview that compromised a DevOps engineer's laptop, later reaching wallet engineers; the company says it covered roughly 98 percent of customer losses from its own funds.
Separately, India's computer emergency response team CERT-In named an actor it calls CRAFTY FALCON — described as an AI-assisted financial threat that targets fintech, payment and wallet APIs, deliberately attacks during weekends when monitoring is thin, and re-targets victims whose remediation was left incomplete.
Three separate authorities in one week converged on the same lesson: the entry point is human, and regulators increasingly expect banks to demonstrate resilience evidence against third-party incidents, not merely maintain their own controls.