Binance Gone Wild: 1.5 Million Accounts Lost in a Captcha Catastrophe!

by

Binance is trying to look like the Boursier for Big Money while secretly letting hackers sip on your data.

The world’s biggest crypto marketplace is kicking off 2026 like a sassy diva on a stage, especially its over‑the‑counter (OTC) desk. In just January and February, half of its total trading volume for 2025 hung out in that private lounge. This shows institutional investors are already sipping on private deals, scrolling, and trying to keep the market from feeling the drama everyone else experiences.

Captcha, According to PexRat: “I Can’t Spell a Number of Ways”

It’s late afternoon in a room of cameras, and the big players want secret rooms where price bumps and awkward remarks won’t get overheard.

“These folks scan the horizon for deep liquidity so they don’t get crammed into a market with optical glitches,” explains Binance’s charming chief, Richard Teng. “The OTC desk lets them trade blocks without exposing their secrets to the public order book.”

Below that eyebrow‑raising polish, however, are red flags-like a crossword answer that might be wrong. On March 28, the security platform VECERT flagged a threat actor, PexRat, offering a 1.5‑million‑user “supplier” database. The data, as enticing as a dinner party in a basement, contains full names, email addresses, phone numbers, and KYC statuses-plus last‑login IPs, device user agents, and the kind of 2‑factor authentication you only see in fictional crime dramas.

🚨 FINANCIAL INTELLIGENCE ALERT: Binance Database Leak (1.5M Users) 🌐💰

– VECERT Analyzer (@VECERTRadar) March 28, 2026

And because the thrill of a hack never ends, the attackers claim to know whether their victims rely on SMS, email, or a humdrum authenticator app for 2FA. A risk that would make even the most photogenic Instagram model blush-that’s a threat to be “flagged.”

VECERT’s investigation indicates Binance’s servers were not directly breached. Instead, a fancy credential stuffing operation was behind it-nice metaphor for your inbox getting filled with spam; only the spam is the entire world’s account info.

“The evidence suggests that the attacker bypassed the Captcha gate, allowing unchecked requests in a flow that would’ve made a Houdini magician’s head spin.”

This confession follows a January exposé by Jeremiah Fowler, who unearthed roughly 420,000 Binance‑related credentials. It’s the sort of back‑to‑back audit that would give even the snarkiest detective a tactical workout.

In short, Binance’s cybersecurity might currently be feeling a bit like a diva’s anxiety room-dramatic, high‑stakes, and full of drama. It’s a stress test no one asked for. The exchange’s future could hinge on its ability to make sure the 1.5 million users feel safe enough to trade and not feel like they’re living on a crime scene outside a DMV.

Read More

2026-03-29 21:46