Binance Hit by $6.3 Billion Cyberattack in One of Crypto’s Biggest Security Breaches

Binance, the world's largest cryptocurrency exchange, has reportedly experienced one of the most significant cyberattacks in cryptocurrency history, with approximately $6.3 billion worth of digital assets affected. Following the incident, the company confirmed that nearly half of the stolen funds had been frozen through cooperation with other cryptocurrency platforms and industry partners. Binance also reassured its customers that it would take full responsibility for covering any losses resulting from the attack. According to preliminary investigations, hackers allegedly gained unauthorized access to an engineer's laptop, which may have allowed them to exploit the company's systems and transfer digital assets illegally. Two cryptocurrency analytics firms, TRM Labs and Chainalysis, have linked the attack to TraderTraitor, a North Korean-associated hacking group believed to be responsible for several major cryptocurrency thefts, including the $1.5 billion Bybit hack in 2025. TRM Labs stated that several elements of the Binance incident resemble previous cyberattacks associated with North Korean hacking operations. Ari Redbord, the company's Global Head of Policy, described the incident as an unprecedented setback for the cryptocurrency industry. He also warned that recovering the remaining stolen assets could prove difficult, as attackers may still control a substantial portion of the funds. Similarly, Chainalysis expressed strong confidence in the possible involvement of North Korean hackers. Its Head of Research, Eric Jardine, highlighted that cryptocurrency exchanges remain attractive targets because they hold enormous amounts of digital assets. He urged other exchanges to strengthen their security measures and remain vigilant against increasingly sophisticated cyber threats. In response to the incident, major cryptocurrency companies have taken action to prevent further movement of the stolen funds. Tether reportedly froze approximately $1.6 billion worth of USDT, while Circle froze more than $800 million in USDC. Together, the two companies have reportedly frozen around $2.4 billion in assets linked to the incident. World Liberty Financial, a cryptocurrency venture associated with U.S. President Donald Trump and his family, also stated that it was working with partners to help freeze the stolen funds. Binance co-CEO He Yi thanked the cryptocurrency companies that assisted in identifying and freezing suspicious assets. She emphasized that security remains the company's top priority and explained that withdrawal services had been temporarily suspended until the platform's security could be fully verified. Binance also confirmed that it was cooperating closely with law enforcement agencies to identify those responsible and bring them to justice. The company clarified that the incident involved its primary global platform, Binance.com, while Binance.US, its separate platform serving American customers, was not affected. Meanwhile, Coinbase confirmed that its platform remained secure and that it was closely monitoring the situation. Founded in China in 2017, Binance has grown into one of the world's largest cryptocurrency trading platforms, with more than 300 million registered users globally. Despite facing increasing regulatory scrutiny, the company reported holding over $160 billion in assets under custody in 2024. News of the cyberattack triggered immediate turbulence across cryptocurrency markets. Bitcoin reportedly fell by more than 4%, while Ethereum, Solana, and several other major cryptocurrencies also experienced significant price declines. The incident has once again raised serious concerns about cybersecurity, digital asset protection, and the vulnerability of centralized cryptocurrency exchanges. It also highlights the growing sophistication of state-linked cybercriminal groups and the importance of stronger security systems, international cooperation, and rapid response mechanisms across the global crypto industry.