> Security practice, audits and incident analysis from the DFNS team. - Canonical: https://dfns.co/blog/security - All DFNS pages and articles: https://dfns.co/llms-full.txt --- [Security November 10, 2026 | 21 min read](https://dfns.co/article/the-binance-hack) # [The Binance Hack](https://dfns.co/article/the-binance-hack) [How Binance's own signing service signed away about $6.34 billion, most of it in 20 minutes, which controls were missing at the signer, and what every institution running hot wallets should take away from this incident.](https://dfns.co/article/the-binance-hack) [Thibault de Lachèze-Murel CISO](https://dfns.co/article/the-binance-hack) [All 261 ](https://dfns.co/blog)[Learn 14 ](https://dfns.co/blog/learn)[Product 128 ](https://dfns.co/blog/product)[Research 10 ](https://dfns.co/blog/research)[Security 12 ](https://dfns.co/blog/security)[Update 97](https://dfns.co/blog/update) | | | | | | -------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------- | | Security 20 min read | ### The NEAR HackHow a trusted signer paid out a corrupt ledger, which controls were missing, and what every financial institution running a ledger next to a pool of wallets should take away from this incident. | Thibault de Lachèze-Murel | [](https://dfns.co/article/the-near-hack) | | Security 3 min read | ### ISO 27001, ISO 27017 and ISO 27018 MaintainedDFNS passes its first ISO/IEC 27001, 27017 and 27018 surveillance audit with a positive recommendation from MSECB on all three standards and the certifications are maintained. | Elis Veysalova | [](https://dfns.co/article/iso-27001-27017-27018-maintained) | | Security 21 min read | ### The Bitget HackHow forged instructions got valid signatures, which controls bound each step, and what no provider, DFNS included, prevents. | Thibault de Lachèze-Murel | [](https://dfns.co/article/the-bitget-hack) | | Security 29 min read | ### The Coldcard HackHow a five-year-old build error turned a trusted hardware wallet into predictable keys, and what it really teaches about generating, operating, and governing secrets. | Thibault de Lachèze-Murel | [](https://dfns.co/article/the-coldcard-hack) | | Security 9 min read | ### CGGMP21 Vulnerabilities Patched and ExplainedCGGMP21 vulnerabilities have been disclosed and fixed. DFNS clients remain fully secure. | Denis Varlakov | [](https://dfns.co/article/cggmp21-vulnerabilities-patched-and-explained) | | Security 4 min read | ### A Month of Pentesting CompletedDFNS completes a month-long pentest with Borg Security, finding zero vulnerabilities. | Thibault de Lacheze-Murel | [](https://dfns.co/article/borg-security-pentesting-completed) | | Security 8 min read | ### Certified ISO 27001, ISO 27017 and ISO 27018DFNS achieves ISO 27001, 27017 and 27018 certifications, raising the bar on security, cloud assurance, and data privacy. | Thibault de Lacheze-Murel | [](https://dfns.co/article/certified-iso-27001-iso-27017-and-iso-27018) | | Security 23 min read | ### The Bybit / Safe HackHow one compromised laptop led to the largest crypto heist in history. This deep dive breaks down the attack, the systemic weaknesses it revealed, and why crypto must embrace real security beyond best practices. | Thibault de Lacheze-Murel, Christopher Grilhault des Fontaines | [](https://dfns.co/article/the-bybit-safe-hack) | | Security 7 min read | ### SOC 2 Renewed by KPMGDFNS has successfully renewed its SOC 2 Type II certification for 2024 after a rigorous nine-month audit by KPMG, one of the Big Four firms. | Thibault de Lacheze-Murel | [](https://dfns.co/article/soc-2-renewed-by-kpmg) | | Security 7 min read | ### Cracks in Wallet Iframe SecurityDFNS' security team has identified security risks in wallet iframes, based on vulnerabilities discovered in a major derivatives exchange. In this post, we'll explain how we uncovered and demonstrated the issue. We'll also explore how advanced methods like MPC and WebAuthn provide safer, non-custodial options to better protect user funds. | Thibault de Lacheze-Murel | [](https://dfns.co/article/cracks-in-wallet-iframe-security) | | Security 7 min read | ### The Magic Link VulnerabilityA year ago, our security team discovered a vulnerability in magic links that changed our industry's approach to wallet authentication. | Thibault de Lacheze-Murel | [](https://dfns.co/article/the-magic-link-vulnerability) |