The lock held. The money left through the side door.On Thursday, someone stole $6.3 billion from Binance, the world’s largest crypto exchange. Most of it left in about 20 minutes.It’s the largest crypto theft ever and roughly four times the previous record, the $1.5 billion stolen from Bybit in 2025. The BBC’s cyber correspondent called it probably the biggest single theft of any kind.Ten days before the hack, I published the last chapter of Zero Knowledge, my novel about three founders whose algorithm breaks the cryptography that crypto (and almost everything else) runs on. Insert whatever “truth is stranger than fiction” or “life imitates art” cliché comes to mind.In chapter 9 of Zero Knowledge, a Bitcoin wallet from 2010 moves for the first time in twenty years, and a fictional exchange called Tessera starts posting to its status page. The first update says “All customer funds are safe and accounted for.” Twenty-one minutes later, Tessera pauses Bitcoin withdrawals. Forty-seven minutes after that, it pauses deposits and withdrawals on everything.On Thursday, Binance paused withdrawals and deposits. It then turned deposits back on about four hours later.On Friday, Binance’s co-CEO Richard Teng said:We never use any customer funds so they are not impacted.By chapter 36, Tessera has halted trading. A customer who sold all her Bitcoin months ago can’t get the $38,000 in cash she needs to close on a house. She waits six hours in the support queue to reach an agent named Ruth L., who keeps repeating the same line about customer funds. Then:Customer: What did you do with yours.Ruth L.: I moved mine on Tuesday.As I write this, withdrawals are still paused. Binance’s latest update says they’ll start coming back in phases “within approximately 34 hours, subject to the completion of security checks,” and that the results of its proof of reserves will be out by Monday, November 2.Based on what Binance and the people tracking the money have said so far, here is how the hack worked.Binance says it started with a compromised laptop belonging to a DevOps engineer, and that it has since found “additional points of breach.” The attackers used an Ethereum feature called EIP-7702, which lets an ordinary wallet hand control of its behavior to a piece of code by signing an authorization. Binance’s own hot wallet - the wallet an exchange keeps online to pay out withdrawals - signed 50 of those authorizations in a single transaction, each one pointing at a contract the attacker controlled. Teng said the transfers “did not pass through our normal approval controls.”None of it was improvised. Ari Redbord of TRM Labs told the BBC that the attacker funded an operator wallet 36 hours before the theft and had the signatures prepared in advance. Teng said the attackers used a “self-destruct mechanism” that destroyed their tools and traces as they went.TRM Labs and Chainalysis both say they have high confidence it was North Korea’s TraderTraitor group, also known as Lazarus. Edward Howell, an Oxford expert on North Korea, told the BBC that 40 to 50% of North Korea’s weapons of mass destruction programs are funded by cyber and crypto theft.One antagonist in Zero Knowledge is Sable, a patient foreign operative working for a government I never name. Sable prepares for a long time and then moves fast. While I made Sable up, TraderTraitor is real, is associated with North Korea, and appears to have just stolen $6.3 billion.While we don’t know with confidence exactly what happened or how it will resolve, it appears no one broke the math, which is a central theme in Zero Knowledge. One of the main protagonists, Samantha, who is the co-founder and CTO of Basalt Labs, invents an algorithm using a quantum computer that breaks the public-key cryptography under Bitcoin, banking, and software updates. In the book’s appendix, How It Actually Works, I wrote that the real damage from a break isn’t that secrets become readable. The damage is that “the world can no longer tell a true thing from a lie that’s signed correctly.” A forged signature is “a real signature now, just made by the wrong person.”That’s what happened at Binance, without a quantum computer. Binance’s hot wallet produced valid signatures, and every one of them checked out. The BBC’s explainer pointed out that “the blockchain wasn’t hacked,” only the exchange was. That’s true, and Vlad (another of the protagonists in Zero Knowledge and the invisible co-founder of Basalt Labs) would have something to say about that. Late in the book, he learns the hard way that the absence of a break is not the presence of safety.Thirty-seven minutes after the main sweep, Tether froze about $971 million of its USDT stablecoin sitting in the attacker’s main wallet. Three minutes later, Circle froze $823 million of USDC in the same wallet, “in coordination with law enforcement.” Ripple, World Liberty Financial, and Arbitrum’s Security Council froze more. Within a day, about $3 billion was frozen. So about half of the money got saved by companies with a button that freezes your money. The other half - more than 420,000 ETH and 18,270 BTC, roughly $2.4 billion according to TRM - is gone, because native Bitcoin and Ethereum don’t have an issuer, and nobody can freeze them.One of the key pitches of crypto is that nobody can freeze your money. Go reread the last paragraph. Hmmm…In chapter 36, a Bitcoin developer named Petra proposes a patch that would make 4.1 million exposed coins unspendable so nobody can steal them. Another developer shoots it down, telling her she’s proposing to “confiscate from the dead as a safety measure.” In real life, Tether didn’t need consensus. It needed 37 minutes.And then there’s SAFU.Binance has an emergency fund called SAFU, the Secure Asset Fund for Users. It’s about $1 billion. The hack was $6.3 billion. Binance says it has set aside $6.34 billion of its own money to cover the loss, and by Friday night it said it had already replaced about 80% of the stolen coins with the same coins and was buying the rest on the market. Its co-CEO Yi He pointed out that $3 billion is only about 2% of Binance’s user assets and reserves. In case anyone was still worried, Binance’s founder, CZ, told Elon Musk, who was mocking the hack on X, that it was a “bad time to troll” and that Binance’s SpaceX shares are worth more than $1 billion. Yi He then replied to CZ in public: “Reporting to the major shareholder: Our company’s revenue for the year is sufficient to cover the losses, so we do not yet need to sell the SpaceX shares you are bullish on.”Isn’t this kind of insane? A company lost more than six billion dollars on a Thursday and announced on Friday that it would cover the whole thing out of its own pocket. According to CNBC, Binance was holding about $145 billion the day before the hack, so this was about 4% of it. There’s no FDIC behind SAFU. There’s Binance, which is the insurer, the insured, and the one publishing the proof of reserves on Monday.Martin Mulyadi, an accounting professor, put it well in that CNBC piece: “A pledge to make customers whole is only as strong as the resources behind it.”In chapter 54, a credit union IT person in Greeley spends a Friday calling 63 banks, trying to get 412 paychecks of about $1,400 each accepted. A woman whose paycheck disappeared posts “is money real” and gets four million views. One reply quotes a Fed statement promising that deposit insurance is unaffected and asks “why would you say that unless one was about to.” I wrote that because reassurance is often what scares people. This week, Binance’s reassurance was $6.34 billion, and Bitcoin slid from about $80,000 to a six-week low of about $76,400. The BBC called that a sign the market has matured. Or maybe it is numbness. Or suspension of disbelief.In 2023, I wrote a post titled I Don’t Hate Crypto. I still don’t, and it’s been economically good to me.But I think crypto might be fucked.The industry made two promises. The math makes it secure, and nobody in the middle can take your money or stop it from moving. This week the math held, and it didn’t matter, because the keys live on computers on networks administered by people with laptops. The decentralized part worked exactly as designed, which is why $2.4 billion of North Korea’s money can’t be touched. What saved Binance’s customers was the opposite of crypto: centralized companies freezing tokens, and a centralized company with an enormous balance sheet writing a check.Now add the thing Zero Knowledge is about. This hack needed a compromised laptop, 36 hours of preparation, and a gap in one company’s controls. A quantum break needs none of those. Something like a quarter to a third of all Bitcoin sits in addresses whose public keys are already written on the chain for anyone to read. The fix, BIP-360, was accepted into Bitcoin’s proposal repository earlier this year, isn’t live, and even when it is, it can’t force old coins to move. If the largest exchange in the world can’t keep its own hot wallet’s signing authority away from one engineer’s laptop, I’m not optimistic that the world finishes migrating to new signatures before someone like Sable shows up.My entire shitty first draft, all 137 chapters, is free at zeroknowledge.ink. I’m about to start working on my second draft (in public) once I get a few more pieces of AuthorMagic finished so I can do this using my own software.I wonder what is going to happen next week.