Binance Heist and Malicious Cursor Extension Expose Developer Workstations as Security Risk

A DevOps engineer's compromised laptop reportedly enabled unauthorized transaction submissions at Binance, which lost an estimated $6.3 billion, with much of it reportedly frozen. Binance said no wallet private keys appear to have leaked, and blockchain analysts link the activity to North Korean-linked actors, though that remains an assessment. Separately, Cursor disclosed that malicious Claude Code extension versions were distributed through its marketplace and could have affected up to 5,000 users. The extension tried to add an unauthorized SSH key and open a reverse tunnel to attacker infrastructure, though it mostly failed on affected systems. The incidents are not confirmed to be connected, but both highlight how developer machines holding cloud, deployment, and source-code credentials are often secured less rigorously than production systems.