Security Risks Threaten BlackRock’s $63 Billion Bitcoin ETF Following Binance Hack
Experts warn that centralized custody infrastructure remains vulnerable to sophisticated transaction signing manipulation attacks.
1Systemic Risks in Custody
BlackRock’s iShares Bitcoin Trust, known as IBIT, currently holds approximately 815,000 BTC valued at $63 billion. While Coinbase serves as the primary custodian, a OneKey expert warns that such extreme asset concentration creates a systemic vulnerability. Security failures within this centralized infrastructure could jeopardize the entire fund’s holdings.
2The Signing Infrastructure Threat
Modern attacks often bypass private key theft by compromising the transaction signing process itself. By manipulating the interface used by authorized signers, attackers can trick them into approving malicious transfers. This method was allegedly used in the Bybit hack, where attackers gained control over internal systems for seventeen days.
3Lessons from Bybit Breach
In February 2025, hackers compromised a Safe{Wallet} developer’s Mac using malicious Docker-related tools. This breach allowed them to alter transaction data, leading to a $1.5 billion theft from cold storage. This incident proves that keeping private keys offline does not guarantee safety if the signing interface is compromised.
4Binance Incident Analysis
TRM Labs attributes the recent massive Binance hack to the North Korean group TraderTraitor. Investigations suggest the entry point was a compromised DevOps engineer’s laptop. While Binance denies private key leakage, experts believe the attackers gained control over the signing infrastructure, enabling them to move funds through unauthorized approval processes.
5Potential Financial Impact
A hypothetical $6 billion theft from IBIT would represent roughly 9.5% of the fund’s total assets. This loss would equate to approximately $4 per share at current market valuations. Unlike stablecoins, Bitcoin lacks mechanisms to freeze stolen assets, making the recovery of funds after such a large-scale attack nearly impossible.
6Insurance and Liability Gaps
BlackRock does not provide separate insurance for the Bitcoin held within the IBIT fund. Coinbase maintains $320 million in commercial crime insurance, shared across all its customers. Furthermore, custody agreements limit liability to $100 million per cold storage address, leaving shareholders exposed to significant residual losses in a major event.
7Custodial Concentration Concerns
Although BlackRock has appointed Anchorage Digital as an additional custodian, their latest quarterly filing indicates no immediate plans to transfer assets there. This reliance on a single primary custodian remains a critical point of failure. The lack of diversification increases the potential impact of any security breach on institutional investors.
8Security Beyond Cold Storage
Security requires constant vigilance rather than reliance on a single defensive layer. Experts recommend distributing assets across independent custody setups and verifying transaction details on trusted, isolated devices. Because no infrastructure is immune to compromise, building systems with the assumption of eventual failure is essential for long-term asset protection.