PANews reported on June 3 that @CryptoNakamao, a user of X platform, disclosed that on May 24, hackers stole nearly all the funds in his account, or $1 million, through "counter-trading" without obtaining his Binance account password or two-factor authentication (2FA). He and the security company pinned the blame on an ordinary Chrome plug-in, Aggr.
@CryptoNakamao claimed: "I became a victim of an undercover agent in the cryptocurrency circle, and $1 million in my Binance account was wiped out." He stated that the problem with the plug-in could have been announced and fermented a week or a few weeks before Alpha Tree announced the plug-in problem to the crypto community. He found the KOL who promoted the plug-in to determine whether he was an accomplice of the hacker. In the process, he learned that Binance had long known about the existence of the plug-in and even encouraged the KOL to further obtain more information from the hacker. @CryptoNakamao said: "And I was stolen when the plug-in was further promoted. Binance traced the hacker's address at least 3 or 4 weeks ago, and also obtained the name and link of the plug-in from the KOL. But even so, Binance may have continued to track down the hacker to avoid alerting the enemy, and did not promptly notify the suspension of the product, so I became a victim."
@CryptoNakamao accused "Binance staff of being very slow to respond and not helping users recover any losses." He wrote: "According to the timeline summary: 1. Binance did nothing for weeks and did not take precautions when it knew there were problems with the hacker and the plug-in, allowing the promotion to continue, causing the loss of funds to expand. 2. Binance did nothing when it knew about the frequent thefts and cross-trading. The hacker manipulated the account for more than an hour, causing extremely abnormal transactions in multiple currency pairs without any risk control; 3. Binance did not freeze the obvious cross-trading funds of the hacker's single account on the platform in time; 4. It missed the best opportunity, and it took more than a day before Binance contacted the relevant platform to freeze the funds."