Binance, the largest cryptocurrency exchange by volume, is dealing with a significant security breach, resulting in estimated losses of $6.3 billion from a suspected cyberattack.
In response, Binance has frozen billions in digital assets while attempting to trace the missing funds. So far, $2.54 billion worth of cryptocurrency has been frozen, and the exchange has paused all deposits and withdrawals.
Although Binance assures users that their funds are secure, they promise to compensate for any losses.
Investigation Underway
Binance is actively investigating the security incident after detecting unusual activity. Initial findings suggest that an attacker compromised a devops engineer’s laptop, allowing unauthorized withdrawals through an internal service. Binance claims there is no evidence of exposure of private keys for cryptocurrency wallets.
Blockchain intelligence firm Chainalysis reported that approximately $5.912 billion was stolen during the attack, with the overall impact estimated at $6.3 billion. The investigation is ongoing, and financial impacts may change based on new findings.
Billions in Cryptocurrency Frozen
Following the incident, Binance is collaborating with other cryptocurrency firms, blockchain intelligence companies, and law enforcement to identify and freeze funds linked to the suspect. Reports indicate that over $2.5 billion in funds have been frozen, with some estimates suggesting that the total amount blocked could reach around $3 billion.
Stablecoin issuers Tether and Circle have also frozen assets related to the incident, with Tether blocking over $1.5 billion in USDT and Circle freezing more than $800 million in USDC. This proactive approach helps limit suspicious asset movements.
However, concerns remain regarding the significant amount of potentially stolen cryptocurrency.
Binance Commits to User Compensation
Binance reassures customers that they will not incur losses from the attack and will compensate all affected users. Changpeng Zhao, the founder and largest shareholder of Binance, acknowledged the situation and expressed confidence that customers will be fully compensated. Although Zhao stepped down as CEO in 2023, he remains committed to resolving the issue and is working with law enforcement to identify those responsible.
Suspected North Korean Involvement
Experts in blockchain intelligence and cybersecurity have indicated that North Korean hacking groups may be behind the attack. TRM Labs believes, with high confidence, that the TraderTraitor group, linked to North Korea, executed the breach based on transaction patterns and other intelligence. The investigation remains ongoing.
Market Impact on Cryptocurrencies
The security breach has created uncertainty in the cryptocurrency market, causing Bitcoin to drop about 5% to below $77,000, with other major cryptocurrencies also experiencing declines. This raises concerns about the security of centralized exchanges and investor confidence.
Potential for Historic Crypto Heist
If the reported losses are confirmed, this could mark the largest theft in cryptocurrency history, surpassing the $1.5 billion stolen from Bybit in February 2025, which was also linked to North Korean hackers. The incident highlights the increasing challenges cryptocurrency platforms face as cybercriminals grow more sophisticated. Binance is focused on minimizing damage and recovering or freezing stolen assets, depending on the investigation’s outcomes.