Cybersecurity: What the $6.3 Billion Hack Warns Argentina About

The attack on the world's leading cryptocurrency exchange, attributed to North Korea, did not require breaking the cryptography. $6.3 billion was moved in twenty minutes. According to financial cybersecurity companies TRM Labs and Chainalysis, this is the largest cryptocurrency theft in history: four times that suffered by Bybit in 2025. Argentina, the country with the highest crypto usage in the region, still lacks a Cybersecurity Law or any other tools to prevent a hack of this nature. The most important aspect is not the amount, but how the hack was orchestrated. In an initial investigation, Binance identified the starting point on the computer of an operations engineer, who accessed an internal service and requested withdrawals that the system accepted as valid. According to the company, no private keys were leaked nor was the mathematics that protects cryptocurrencies compromised: it was just one person and a request for access. A concerning fact: days before the theft, the company announced it had thwarted several attacks from groups linked to North Korea, who posed as employers to conduct fake job interviews and administered a "technical test" that installed malicious software on the candidates' computers. Who is behind the hack and why should it matter to Argentina? TRM Labs and Chainalysis attribute it to TraderTraitor, a unit linked to the North Korean regime. The same one that the FBI pointed to for the theft at Bybit in 2025. Chainalysis saw in real-time how Binance's funds mixed with those from another theft, which Bitget suffered in September, also attributed to North Korea. This is not common crime. According to United Nations estimates, cybercrime finances a substantial part of North Korea's weapons program. Hacking is a state tool. For Argentina, this case is of utmost importance, as it is the country with the highest crypto adoption in Latin America: one in five people (according to Chainalysis). Millions of Argentines use digital wallets to save dollars, and Binance has been listed since 2024 in the registry of virtual asset providers of the National Securities Commission. However, this registry is merely a control against money laundering; it is not a license and does not guarantee anyone's funds. The need for a Cybersecurity Law In light of this concerning panorama, a debt -among many- that Argentina has in terms of technology comes back into focus. With the rise of "abliterated" open-source AI models (unrestricted versions), finding flaws in software has ceased to be the work of specialists. Globally, in September, an attacker used AI agents to breach over 1200 websites and compromise 100 companies, including agricultural machinery company Deere and appliance company SharkNinja. Locally, on October 20, the Executive Director of the National Cybersecurity Center, Ariel Waissbein, resigned along with his deputy, leaving the state without leadership just as hacking became cheaper. Three days later, ransomware (malicious software) against Program Consultores -a Córdoba-based company that provides management systems- left over 250 municipalities unable to collect fees or carry out procedures, forcing them to use bitcoins to resolve the conflict. Cybersecurity must be a state policy and, while we wait for a law that has not arrived, the National Sovereignty Defense project that the Executive Power sent to Congress in September is a necessary step, as it incorporates the protection of critical infrastructure within the obligations of the National Security Council -led by the president and composed of representatives from the SIDE- that it proposes to create. North Korea has already demonstrated that a cyber attack can be a state policy, and the response to one should also be. The criticism from government opponents who claim that the proposal concentrates power and that the Council could impose sanctions without prior judicial control is valid, but in the face of a hacking risk, today we have only a void. And the Binance case shows that the speed of action is fundamental: an attack does not wait for a file, the $6.3 billion was stolen in 20 minutes and the first response came 54 minutes later. Imagine how long a scheme requiring prior judicial authorization to act could take. Control must exist, but after acting, not before. Furthermore, the state needs its own capacity. What stopped the bleeding at Binance was the coordination between private companies, stablecoin issuers, and analysts, which ended up blocking nearly half of what was stolen. The state must be able to move at that speed, and the creation of a National Security Operations Center (SOC) in 2027 comes too late. There is an even deeper gap; today Argentina does not have an inference provider (infrastructure that runs Artificial Intelligence) that offers models with cybersecurity capabilities. Attackers are already using AI agents, and defense needs them too. If we depend on models running abroad and with foreign rules to defend ourselves, the sovereignty that the PEN project speaks of is left halfway. Security is almost never broken by mathematics; it is broken by people and processes. North Korea understood this years ago and lives off it. The question is whether Argentina will prepare to stop any possible attack.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.