Binance Hack: $6.3 Billion in Cryptocurrency Stolen as Withdrawals Are Suspended
Binance, the world’s largest cryptocurrency exchange, has suspended deposits and withdrawals following a suspected security breach involving approximately $6.3 billion in cryptocurrency. The incident is being described in reports as one of the biggest financial heists on record.
Binance co-founder Yi He announced the suspension on X, reassuring customers that their funds were safe and that the company would cover the losses. Co-CEO Richard Teng also assured users that the exchange would take responsibility for the financial impact.
According to Binance’s initial investigation, the breach may have involved a compromised laptop belonging to a DevOps engineer. The attacker allegedly used access to a service container to submit unauthorized withdrawal transactions.
The exchange and cryptocurrency tracking firms are now working to freeze and recover the stolen assets.
Binance Suspends Withdrawals After Suspected $6.3 Billion Hack
Binance temporarily suspended deposits and withdrawals after detecting suspicious activity involving its digital wallets.
Co-founder Yi He announced the precautionary measure on X, stating that user funds were safe and that Binance would cover the hacking losses.
Co-CEO Richard Teng also reassured customers, saying:
“Bottom Line — your money is safe, and we’re covering every loss.”
The exchange subsequently published an official disclosure explaining the suspected security incident and the immediate measures taken to protect its platform.
Binance estimated the total financial impact at approximately $6.3 billion, while multiple reports initially described the stolen amount as around $6 billion.
How Did the Binance Security Breach Happen?
Binance’s initial investigation suggested that the incident may have involved a compromised DevOps engineer’s laptop.
According to the company’s disclosure, the attacker may have used the compromised device to access a service container and submit unauthorized withdrawal transactions.
The exchange also addressed concerns about the security of its wallet infrastructure.
Binance stated:
“We have found no evidence of any wallet private key leak.”
The investigation remains ongoing, and the company said it would publish a detailed technical post-mortem after the facts had been fully verified.
Around $3 Billion in Stolen Cryptocurrency Frozen
Cryptocurrency firms and blockchain partners have already helped freeze approximately $3 billion of the affected assets.
Binance confirmed that it was working with blockchain partners to identify and restrict the movement of stolen funds.
However, roughly half of the estimated $6.3 billion impact remained outside the frozen amount, according to the figures disclosed by the exchange.
Chainalysis, one of the firms tracking the stolen cryptocurrency, said the funds were moving across multiple blockchains, including Bitcoin and Ethereum.
A spokesperson for the company told CNN that it had high confidence North Korea was behind the attack.
TRM Labs also attributed the theft to an elite North Korean hacking unit, citing similarities with previous attacks and its analysis of on-chain and off-chain intelligence.
Singapore-based Pangolin Intelligence reached a similar conclusion after examining the cryptocurrency transactions and comparing them with earlier incidents.
An analyst from the firm warned that recovering the remaining funds could take time, describing the situation as a continuing “cat and mouse game.”
Binance Promises to Cover All Customer Losses
Binance has assured customers that they will not be responsible for the losses resulting from the suspected breach.
The exchange said it would use its Secure Asset Fund for Users (SAFU) and company funds to cover the financial impact.
Binance stated:
“Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe.”
The company also promised to publish an updated Proof of Reserves once the remediation process is complete.
The announcement is intended to reassure customers while the exchange continues its investigation and recovery efforts.
Security Measures Taken by Binance After the Hack
Binance outlined three immediate steps taken following the suspected security breach.
- Suspension of deposits and withdrawals: The exchange temporarily stopped these services while security checks were being completed.
- Revocation of address authorisation: Binance revoked the authorisation associated with the affected address.
- Cooperation with investigators: The company engaged law enforcement agencies and blockchain intelligence partners to trace and recover the stolen cryptocurrency.
The exchange also said its teams were working around the clock to resolve the incident safely.
Binance confirmed that it would cooperate with law enforcement to establish the identity of those responsible and support efforts to bring them to justice.
North Korea Suspected in Major Cryptocurrency Theft
Several cryptocurrency intelligence firms have pointed to North Korea as the likely source of the attack.
Chainalysis said it had high confidence in the North Korea attribution, while TRM Labs linked the incident to an elite hacking unit based on similarities with previous attacks.
Pangolin Intelligence also supported the assessment after analysing the on-chain activity and comparing it with information from earlier known incidents.
The reports place the Binance breach within a wider pattern of cryptocurrency theft and cyberattacks.
The incident also draws comparisons with last year’s Bybit exchange theft, in which North Korea-linked hackers reportedly stole approximately $1.5 billion in cryptocurrency.
The Binance investigation is still underway, and the attribution has not been presented as a final confirmed finding by the exchange.
Binance Hack Raises Questions About Cryptocurrency Security
The suspected breach comes during what has been described as “Black October,” a period marked by cyberattacks, data breaches and security vulnerabilities identified with the help of AI tools.
The scale of the reported Binance theft has renewed attention on the security challenges facing major cryptocurrency exchanges.
Although approximately $3 billion has reportedly been frozen, the remaining funds continue to be traced across different blockchain networks.
The exchange has promised a detailed technical report once its investigation is complete. Until then, questions remain about the full extent of the breach, the identity of the attackers and how much of the stolen cryptocurrency can ultimately be recovered.
For related international coverage, read our reports on Venezuela granting Starlink seven licences after an earthquake, the Trump-Xi state visit and Nigerian nationals extradited to the United States. You can also explore more global developments in our World News section.
Key Facts About the Binance Hack
- Company: Binance, the world’s largest cryptocurrency exchange.
- Incident: Suspected cryptocurrency security breach.
- Estimated financial impact: Approximately $6.3 billion.
- Initial reported theft: Around $6 billion.
- Co-founder: Yi He.
- Co-CEO: Richard Teng.
- Suspected entry point: A potentially compromised DevOps engineer’s laptop.
- Potential attack method: Unauthorized withdrawal transactions through a service container.
- Frozen assets: Approximately $3 billion.
- Remaining funds: Roughly half of the estimated impact had not been frozen.
- Customer protection: Binance says it will cover all losses through SAFU and company funds.
- Suspected perpetrators: Cryptocurrency intelligence firms have attributed the attack to North Korea-linked hackers.
- Investigation: Ongoing, with a detailed technical report promised after completion.
Frequently Asked Questions About the Binance Hack
1. What happened in the Binance hack?
Binance reported a suspected security breach involving unauthorized cryptocurrency withdrawals. The exchange estimated the total financial impact at approximately $6.3 billion.
2. How much cryptocurrency was stolen from Binance?
Multiple reports initially placed the stolen amount at around $6 billion, while Binance’s official disclosure estimated the total impact at approximately $6.3 billion.
3. Why did Binance suspend withdrawals?
Binance temporarily suspended deposits and withdrawals as a precaution while security checks were carried out following the suspected breach.
4. Are Binance customer funds safe?
Binance has stated that user funds are safe and promised to cover all losses resulting from the incident through its SAFU fund and company funds.
5. How did hackers allegedly access Binance?
The exchange’s initial investigation suggested that a DevOps engineer’s laptop may have been compromised, allowing an attacker to access a service container and submit unauthorized withdrawal transactions.
6. How much of the stolen cryptocurrency has been frozen?
Binance reported that approximately $3 billion in affected assets had been frozen through cooperation with blockchain partners.
7. Has Binance confirmed a private key leak?
No. Binance stated that it had found no evidence of a wallet private key leak.
8. Is North Korea suspected of carrying out the Binance hack?
Yes. Chainalysis, TRM Labs and Pangolin Intelligence have attributed the incident to North Korea-linked hackers based on their respective investigations. The attribution remains an assessment by these firms.
9. What happened to Binance deposits and withdrawals?
The exchange temporarily suspended both services while it completed security checks, revoked affected address authorisation and worked with law enforcement and blockchain intelligence partners.
10. Will Binance publish a report about the security breach?
Yes. Binance said it would release a detailed technical post-mortem after the investigation is complete and the facts have been fully verified.
Latest Cryptocurrency, Technology and International News
Stay informed about cryptocurrency developments, major cyberattacks, financial security and international affairs through News As It Happens – World News.
For news tips and editorial enquiries, contact Info@newsaih.com.
