Changpeng Zhao says AI attacks on Binance showed how one vulnerability can be enough

After the recent breach at Binance, founder Changpeng Zhao said attackers may only need to find one weak point to succeed, while defenders have to map and close every gap in the stack. His takeaway for crypto and payments teams was blunt: “The industry should use AI to prevent AI-powered attacks. There is no other way.”

1. Zhao said banks may be even more exposed than crypto exchanges, and argued that AI-based defenses could reduce losses from cyberattacks over time. For PSPs and banks that sit anywhere near high-risk flows, the message is straightforward: security is no longer just perimeter control, but a continuous contest over who finds the flaw first.
2. He also floated a broader industry response: shared security standards or even a sector alliance for crypto companies, where participants would exchange threat intelligence and coordinate responses to hackers. Zhao said the idea is already being discussed, but there are no concrete agreements yet.
3. According to Zhao, hackers withdrew about $3.6 billion from Binance, or roughly 2% of assets. He said he had expected much larger losses, in the range of 10% to 30% ($18–54 billion), which gives a sense of how high the stakes are when internal controls fail.
4. The breach itself was not a classic perimeter smash-and-grab. The attackers allegedly entered Binance’s internal infrastructure by posing as employers and inviting staff to fake interviews, then used malware to gain access to employees’ work devices and internal systems. That is the part operators should notice: social engineering plus endpoint compromise is often enough to get inside the payment and trading environment.