Are Banks More Vulnerable Than Crypto Exchanges? CZ on AI Cyberthreats

Banks may be more vulnerable than crypto exchanges to rising AI cyberthreats, according to Binance co-founder Changpeng Zhao (CZ). In an interview published on November 3, 2026, he argued that if a major crypto exchange can be breached, traditional banks sit in an even weaker position as artificial intelligence hands attackers faster, lower-cost tools than institutions can currently match.

Below, we unpack what CZ said, what investigators have confirmed, and what it all means for crypto vs banking security.

Key Takeaways

• CZ says AI-driven cyberattacks will keep rising and, in his opinion, banks could be more exposed than crypto exchanges, though he offered no direct comparison data.

• The Binance hack of about $6.3 billion is attributed by the FBI to North Korea's TraderTraitor, and there is no public evidence that AI broke into Binance.

• About $2.85 billion has been frozen, Binance says most affected tokens have been replenished, and CZ wants shared industry security standards.

What Did CZ Say About Banks and Crypto Exchanges?

CZ's core claim is simple. If a well-resourced crypto exchange can be hacked, he believes traditional banks are in a worse position. He said attackers are getting access to AI capabilities faster than financial institutions can build defenses, and that automated tools are lowering the barrier for complex breaches.

He framed it as a lopsided contest. Attackers only need to find one weakness, while defenders must find and fix every single one. That imbalance, he suggested, grows as AI improves.

His Plan: Fight AI With AI

CZ argued that the industry has no real alternative to using AI for defense. He also called for common security standards or an industry alliance so firms can respond to attacks together. Talks are reportedly underway, but no details have been agreed.

He expects many more hacks in the near term. Over time, though, he believes AI could strengthen financial security and reduce losses.

What CZ Did Not Say

CZ did not present evidence that AI played a role in the Binance attack, and he did not mention North Korea during the interview. His bank comparison is also an opinion, not a measured study of breach rates at banks versus exchanges.

Banks vs Crypto Exchanges: AI Cyberthreats in Simple Terms

An AI-driven cyberattack is an intrusion that uses artificial intelligence to speed up tasks such as finding software flaws, crafting convincing lures or automating the movement of stolen money. The goal does not change. What changes is how quickly and cheaply attackers can try.

Banks and exchanges both hold valuable funds and run large, connected systems, so both are targets. Banks are reacting: a KPMG survey found 84% of banking executives are raising cybersecurity spending because of AI risks, although that does not always mean they are buying defensive AI tools.

Binance Hack 2026 at a Glance

How the Binance Hack Unfolded

A Fake Job Interview Opened the Door

Binance says the campaign ran for months. In September, a software engineer was approached on a legitimate job platform by someone posing as a project director, then interviewed by a fake HR contact. A second round with a supposed CEO ended with a coding assignment that carried zero-day malware.

Separately, in June, another engineer installed a tampered Homebrew package while searching for an AI tool. Binance replaced that device, but the engineer and wallet-team colleagues stayed exposed.

The October 20 to 30 Timeline

On October 20, attackers used the compromised machine and an internal AI tool to reach two wallet engineers' computers. On October 29, stolen credentials let them deploy a container and run a malicious script, and funds began leaving at 20:05 UTC.

They used Ethereum's EIP-7702 to gain execution rights over a hot wallet. Because Binance's hot wallets rely on multiparty computation, no single key could revoke that access, which slowed containment. Binance completed containment at 00:10 UTC on October 30.

Explore how leading platforms prioritize security and risk controls. Register on Bitrue to access trading tools, market insights, and account protection features.

Who Is TraderTraitor? The Key Players in the Story

TraderTraitor is a North Korea-aligned hacking group that targets crypto firms, often with recruitment-themed lures. Here are the main entities in this story:

• TraderTraitor: also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces and UNC4899. Active since at least 2020 and linked to earlier heists against DMM Bitcoin, Bybit, KelpDAO and Bitget.

• FBI, U.S. Secret Service and IRS Criminal Investigation: the agencies involved in the case. The FBI published wallet addresses it believes the attackers use.

• Binance and CEO Richard Teng: the exchange says it blocked 57 suspected North Korea-linked attempts this year.

• CZ: Binance's co-founder, who no longer runs the exchange.

• Tether, Circle, Ripple, Arbitrum and Optimism: helped freeze stolen funds on-chain.

• Lazarus Group: reports do not say TraderTraitor is part of it, but its fake-job tactics resemble Lazarus campaigns such as Operation Dream Job.

Was AI Actually Used in the Binance Attack?

Not as far as public evidence shows. Analytics firms Elliptic and Chainalysis say the laundering looks automated, with thousands of transactions moving funds across wallets, but they see no sign of an AI agent making decisions. That finding covers moving the money, not how the breach began.

AI does appear in the story in smaller ways, such as the internal AI tool on the attackers' route and the AI tool search that led to a tampered package. Analysts say the main new worry is speed, because faster laundering leaves less time to freeze assets.

Aftermath: Frozen Funds and Reimbursements

Roughly $2.85 billion has been frozen or seized with help from stablecoin issuers and law enforcement. Binance says it has replenished most affected tokens from company funds, with reported figures of about 95% to 98%, and that users will not be affected. It has also brought in independent cybersecurity experts to review the incident.

Customer Outflows and Withdrawals

CZ said the first $3.6 billion in outflows was about 2% of Binance's holdings, and he had expected 10% to 30%. Teng later reported $10.97 billion in withdrawals and $5.28 billion in net outflows over 46 hours, though hourly deposits had begun to exceed withdrawals.

Binance paused withdrawals, began restoring them in phases on November 1 and later said all 15 networks had resumed.

Interpretation Cheat Sheet: How to Read the Banks vs Crypto Security Debate

Summary

The reported entry points in the Binance breach were ordinary social engineering and software supply chain tricks, not a super-intelligent AI. Even so, CZ's warning carries weight because AI can make every stage of an attack cheaper and faster, for exchanges and banks alike.

Whether banks are truly more vulnerable than crypto exchanges remains unproven. The direction is clear, though: defenders on both sides are being pushed toward AI defenses, shared standards and faster response. Watch for official updates from Binance and law enforcement as the review continues.

Disclaimer: The views expressed belong exclusively to the author and do not reflect the views of this platform. This platform and its affiliates disclaim any responsibility for the accuracy or suitability of the information provided. It is for informational purposes only and not intended as financial or investment advice.

FAQ

Are banks more vulnerable than crypto exchanges?

CZ believes they may be, saying that if exchanges can be hacked, banks are in a worse position. That is his opinion, and no public study in this story compares the two directly.

What did CZ say about AI cyberthreats?

He warned that AI will enable more attacks on exchanges and banks, and that attackers are gaining AI tools faster than institutions can deploy defenses. He urged firms to use AI for defense and to adopt shared security standards.

Who hacked Binance in 2026?

The FBI attributes the roughly $6.3 billion theft to TraderTraitor, a North Korea-aligned group. Reports describe tactics similar to Lazarus Group campaigns but do not say it is part of that group.

Did AI cause the Binance hack?

No public evidence shows that. Analytics firms say the laundering followed automated scripts, and the reported break-in began with a fake job interview and malware.

Are Binance user funds safe after the hack?

Binance says users will not be affected and that it has replenished most affected tokens from company funds. About $2.85 billion of stolen assets has also been frozen. Check Binance's official channels for the latest updates.

Disclaimer: The views expressed belong exclusively to the author and do not reflect the views of this platform. This platform and its affiliates disclaim any responsibility for the accuracy or suitability of the information provided. It is for informational purposes only and not intended as financial or investment advice.