Opsek founder says Binance attackers may have had access for weeks before the hack

Opsek founder said attackers may have had access to Binance's systems for weeks before the hack, arguing the incident shows exchanges need an "assume compromise" security posture centered on internal access controls and staff devices rather than perimeter defenses alone. The claim suggests the breach was a prolonged intrusion rather than a quick exploit, raising questions about how long customer funds and internal keys were exposed before detection. The article did not disclose specific loss figures, affected tokens, or on-chain movements, so the financial impact remains unquantified in this report. For a wire audience, the takeaway is that security researchers are shifting blame toward operational security gaps—privileged access management and endpoint security on employee devices—as the likely weak point. Watch for Binance's incident response disclosures, any on-chain tracing of stolen funds, and whether the exchange details the intrusion timeline in coming days.