# Security Risks Threaten BlackRock’s $63 Billion Bitcoin ETF Following Binance Hack Experts warn that centralized custody infrastructure remains vulnerable to sophisticated transaction signing manipulation attacks. - **Source:** [INCRYPTED](https://brifing.si/source/7cd4625d-3f08-4cc1-983d-4c7d991839ba) - **Published:** 2026-10-30 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/3714ef47-a122-4a42-a3bc-251189d3b9c1 ## Systemic Risks in Custody BlackRock’s iShares Bitcoin Trust, known as IBIT, currently holds approximately 815,000 BTC valued at $63 billion. While Coinbase serves as the primary custodian, a OneKey expert warns that such extreme asset concentration creates a systemic vulnerability. Security failures within this centralized infrastructure could jeopardize the entire fund’s holdings. ## The Signing Infrastructure Threat Modern attacks often bypass private key theft by compromising the transaction signing process itself. By manipulating the interface used by authorized signers, attackers can trick them into approving malicious transfers. This method was allegedly used in the Bybit hack, where attackers gained control over internal systems for seventeen days. ## Lessons from Bybit Breach In February 2025, hackers compromised a Safe{Wallet} developer’s Mac using malicious Docker-related tools. This breach allowed them to alter transaction data, leading to a $1.5 billion theft from cold storage. This incident proves that keeping private keys offline does not guarantee safety if the signing interface is compromised. ## Binance Incident Analysis TRM Labs attributes the recent massive Binance hack to the North Korean group TraderTraitor. Investigations suggest the entry point was a compromised DevOps engineer’s laptop. While Binance denies private key leakage, experts believe the attackers gained control over the signing infrastructure, enabling them to move funds through unauthorized approval processes. ## Potential Financial Impact A hypothetical $6 billion theft from IBIT would represent roughly 9.5% of the fund’s total assets. This loss would equate to approximately $4 per share at current market valuations. Unlike stablecoins, Bitcoin lacks mechanisms to freeze stolen assets, making the recovery of funds after such a large-scale attack nearly impossible. ## Insurance and Liability Gaps BlackRock does not provide separate insurance for the Bitcoin held within the IBIT fund. Coinbase maintains $320 million in commercial crime insurance, shared across all its customers. Furthermore, custody agreements limit liability to $100 million per cold storage address, leaving shareholders exposed to significant residual losses in a major event. ## Custodial Concentration Concerns Although BlackRock has appointed Anchorage Digital as an additional custodian, their latest quarterly filing indicates no immediate plans to transfer assets there. This reliance on a single primary custodian remains a critical point of failure. The lack of diversification increases the potential impact of any security breach on institutional investors. ## Security Beyond Cold Storage Security requires constant vigilance rather than reliance on a single defensive layer. Experts recommend distributing assets across independent custody setups and verifying transaction details on trusted, isolated devices. Because no infrastructure is immune to compromise, building systems with the assumption of eventual failure is essential for long-term asset protection. ## Sources covering this story - https://incrypted.com/ekspert-onekey-predupredyl-o-ryskakh-dlya-bytkoyn-etf-ot-blackrock-s-63-mlrd-na-fone-vzloma-binance/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._