Binance Hack: Exchange Says $6.3bn Stolen in Record Crypto Theft

Binance Hack says roughly $6.3 billion in digital assets was taken from its hot wallets in a major security incident, prompting emergency restrictions, on-chain asset freezes and a pledge that customers will not bear the losses. The Binance hack is now being described by researchers as the largest crypto theft on record, though the investigation and recovery figures are still developing.

Binance said the incident began around 20:05 UTC on October 29, after attackers gained the ability to make unauthorised withdrawals from hot-wallet infrastructure. In its latest public update, the exchange said the loss was about $6.3 billion and said it found no evidence of leaked private keys. Deposits and withdrawals were temporarily restricted while security checks and infrastructure work continued.

What Binance has confirmed

The exchange’s account is important because it distinguishes an early technical lead from a final root cause report. Binance initially said a compromised DevOps engineer’s laptop may have helped an attacker access a service container and submit unauthorized withdrawal transactions. It later said the inquiry had identified additional possible breach points and that the investigation was ongoing.

The Binance hack involved the company’s hot wallets, according to its public statements. Hot wallets are internet-connected wallets used to process operational transfers; they are different from cold storage, which is generally kept offline. Binance says it will absorb the financial impact through its Secure Asset Fund for Users and corporate treasury, rather than pass losses to customers.

That commitment will be closely watched. Binance said it had set aside more than $6.34 billion in company funds and held about $5 billion in the affected assets, while it sought the remaining token exposure through market and over-the-counter channels. The company has also promised an updated proof-of-reserves report after remediation.

How the Binance hack triggered asset freezes

Speed matters in a theft of this scale because stablecoin issuers can sometimes blacklist stolen tokens before they are swapped or bridged elsewhere. Binance says blockchain partners have frozen about $3 billion in affected assets on-chain. The total may change as tracing continues and firms confirm which assets are linked to the attack.

TRM Labs, a blockchain-intelligence company, estimates that approximately $6.36 billion moved from Binance-linked wallets across ten blockchains. Its analysis says the transfers occurred largely within about 20 minutes and included assets across Ethereum, Bitcoin, Tron, XRP Ledger, Solana and several other networks. Readers can follow Binance’s own security incident update for the exchange’s latest confirmed position.

Attribution and what remains unknown

TRM Labs has attributed the attack to TraderTraitor, a North Korea-linked hacking unit, saying it has high confidence in that assessment based on on-chain and off-chain intelligence. That attribution is an assessment by the researchers, not a final public finding by Binance or law enforcement. Binance has said it is cooperating with law-enforcement agencies and external security specialists.

The research firm says the attackers may have used an Ethereum delegation mechanism known as EIP-7702 as part of the operation. But the full sequence of events, the precise entry point and the final recoverable total remain unsettled. Those distinctions matter: a rapid early explanation can evolve as forensic teams review systems, signatures and transaction trails.

What users should watch

For customers, the immediate questions after the Binance hack are whether services reopen safely, whether balances remain accurate and how the exchange documents its safeguards after the event. Users should rely on official Binance announcements, avoid links shared through unsolicited messages and be suspicious of anyone offering account “recovery” or asking for seed phrases. No legitimate support team should request a wallet’s recovery phrase.

The Binance hack is a stark reminder that even large platforms can face operational-security failures. The headline figure is unprecedented, but the longer story will be about transparency, recovery and whether Binance can demonstrate stronger controls after withdrawals resume.