October 30, 2026 — Binance, the world’s largest cryptocurrency exchange by trading volume, has suffered an unprecedented cybersecurity breach involving approximately $6.3 billion in digital assets, making it the largest cryptocurrency theft ever reported. The attack occurred on October 29, with investigators reporting that most of the stolen funds were transferred in approximately 20 minutes.
BILLIONS DRAINED IN A COORDINATED ATTACK
Blockchain investigators say the attackers exploited Binance’s transaction authorization infrastructure to move billions of dollars from exchange-controlled cryptocurrency wallets. The coordinated operation affected multiple blockchain networks, allowing unauthorized transactions to transfer enormous amounts of digital assets to addresses controlled by the attackers.
Binance’s preliminary investigation indicates that a compromised laptop belonging to a DevOps engineer may have allowed unauthorized access to an internal service container. The company said it has found no evidence that wallet private keys were leaked, suggesting that the attackers may have manipulated the systems responsible for authorizing transactions rather than stealing the keys themselves.
NORTH KOREAN HACKING GROUP UNDER SUSPICION
Blockchain intelligence firm TRM Labs has attributed the operation with high confidence to TraderTraitor, a North Korean-linked hacking group associated with the broader Lazarus cybercrime network. Investigators identified similarities between the Binance breach and previous attacks involving cryptocurrency platforms.
The findings have not yet been confirmed by Binance or law enforcement authorities. However, cybersecurity researchers say the methods used in the attack resemble those involved in the February 2025 breach of cryptocurrency exchange Bybit, when approximately $1.5 billion was stolen.
BINANCE FREEZES BILLIONS AND PROMISES TO COVER LOSSES
Following the incident, Binance temporarily suspended deposits and withdrawals while conducting security checks. The company confirmed that approximately $3 billion in affected assets had been frozen through cooperation with blockchain networks, stablecoin issuers and other industry partners.
Binance also announced that it would cover all losses using its Secure Asset Fund for Users (SAFU) and corporate resources. The exchange maintains that customer funds are safe and has promised to publish an updated Proof of Reserves once its security review and remediation process are complete.
LARGEST CRYPTOCURRENCY THEFT ON RECORD
The estimated $6.3 billion impact is more than four times the value of the previous record-setting Bybit hack. The scale of the breach has intensified scrutiny of security controls across the cryptocurrency industry, particularly the infrastructure used to authorize transfers from internet-connected wallets.
The attack also triggered volatility in cryptocurrency markets as traders reacted to the security incident and uncertainty surrounding the recovery of the affected assets. Investigators continue tracking the stolen funds, while Binance works with law enforcement and blockchain intelligence companies to determine the full extent of the breach and identify those responsible.
INVESTIGATION REMAINS ONGOING
Although billions of dollars have been frozen, the recovery of the remaining assets remains uncertain. Binance has pledged to release a detailed technical report once investigators establish how the attackers gained access and executed the unauthorized transactions.
The incident represents a major test for cryptocurrency exchanges and raises renewed questions about whether existing cybersecurity protections can withstand increasingly sophisticated attacks against digital financial infrastructure.
