# OneKey CEO Warns BlackRock Bitcoin ETF Faces Potential Cyberattack Risks Yishi Wang identifies BlackRock's IBIT as a prime target for North Korean hackers. - **Source:** [Bitcoin News](https://brifing.si/source/d8aeaf1e-9839-4dad-9d25-7a6bf3fbeef8) - **Published:** 2026-10-30 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/baffea43-96a0-470d-b52d-4884f71a937f ## Targeting Institutional Crypto Assets Following the massive $6.3 billion breach at Binance, industry experts are evaluating potential future targets for threat actors. Yishi Wang, CEO of OneKey, specifically identified BlackRock’s iShares Bitcoin Trust as a high-value objective. The fund currently manages approximately 815,000 BTC, representing a significant concentration of digital assets for potential attackers. ## Single Custodian Infrastructure Risks A primary concern regarding BlackRock’s IBIT is its reliance on Coinbase as the sole custodian for its $63 billion in holdings. Wang argues that this architecture creates a single point of failure. Regardless of the custodian's security budget, any critical infrastructure compromise could jeopardize the entire fund's massive asset pool. ## Irreversible Nature of Bitcoin Theft Unlike stablecoins, which can be frozen by centralized issuers, stolen Bitcoin cannot be recovered once moved. During the recent Binance incident, Circle and Tether successfully froze $2.3 billion in assets. IBIT lacks this protective mechanism, meaning any successful breach would result in permanent, unrecoverable losses for the fund's institutional and retail holders. ## Quantifying Potential Financial Impact Wang estimates that a security breach similar to the Binance incident would result in the loss of 9.5% of IBIT’s total assets. At current market valuations, this impact would be socialized across shareholders, potentially costing $4 per share. Such a loss would represent a significant blow to the world's largest Bitcoin ETF. ## Limitations of Insurance Coverage Coinbase currently maintains $320 million in criminal insurance coverage, but this is shared across its entire customer base. Custody agreements further limit liability to $100 million per cold storage address. These figures are insufficient to cover the potential multi-billion dollar losses associated with a breach of the IBIT fund holdings. ## Lessons from the Binance Breach Initial investigations into the $6.3 billion Binance hack suggest that an employee laptop compromise may have been the entry point. This incident highlights that even the most sophisticated cryptocurrency exchanges are vulnerable to human-centric security failures. Such events underscore the persistent threat posed by state-sponsored actors like those from North Korea. ## The Illusion of Security Wang warns against assuming that a clean historical track record guarantees future safety. He advocates for a 'bunker mode' mentality, a concept popularized by researcher Justin Drake. Investors should remain vigilant, as no security setup is immune to evolving threats, and institutional convenience does not equate to absolute digital asset protection. ## Future of Institutional Custody The growth of Bitcoin ETFs provides convenience but introduces systemic risks that the industry must address. As these pools of capital expand, they become increasingly attractive to sophisticated threat actors. The reliance on centralized custodians remains a critical vulnerability that requires more robust, multi-layered security frameworks to ensure long-term asset safety. ## Sources covering this story - https://news.bitcoin.com/security/onekey-ceo-warns-hackers-target-blackrocks-bitcoin-etf/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._