Binance, the world's largest cryptocurrency exchange, is investigating a major security breach involving an estimated $6.3 billion in digital assets. The incident occurred on October 29, 2026, at approximately 20:05 UTC (8:05 PM UTC) and could become the largest cryptocurrency theft ever recorded. The attack has raised concerns about exchange security and the risks of storing large amounts of cryptocurrency on centralized platforms.
Binance's initial investigation suggests that hackers gained access through a compromised laptop belonging to a DevOps engineer. The attacker reportedly used this access to enter a service container and submit unauthorized withdrawal transactions.
The exchange later identified additional points of breach, indicating that the attack involved a more complex process than initially understood. Binance has found no evidence that wallet private keys were leaked and plans to release a detailed technical report after completing its investigation.
Following the incident, Binance worked with blockchain intelligence firms and cryptocurrency companies to trace and freeze the affected funds. The exchange reported that approximately $3 billion had been frozen on-chain, while the status of the remaining assets was still being investigated.
Companies including Tether and Circle also took action to restrict assets connected to the attack. Binance temporarily suspended deposits and withdrawals while conducting security checks.
The exchange assured users that their funds were safe and promised to cover all losses through its Secure Asset Fund for Users (SAFU) and company funds. It is also working with law enforcement agencies to identify the attackers and trace the stolen cryptocurrency.
Blockchain intelligence firms TRM Labs and Chainalysis have linked the incident to TraderTraitor, a hacking group associated with North Korea. TRM Labs expressed high confidence in its assessment, although Binance has not officially confirmed the identity of those responsible.
North Korean hacking groups have previously been linked to major cryptocurrency thefts, including the February 2025 Bybit hack, which involved approximately $1.5 billion in stolen digital assets.
If the reported Binance theft is confirmed, it would significantly exceed the Bybit incident and become the largest recorded cryptocurrency theft.
The news affected cryptocurrency markets, with Bitcoin falling to a six-week low and Ether reaching a two-month low. BNB also recorded losses as investors reacted to the security concerns.
The incident has renewed questions about the safety of centralized cryptocurrency exchanges. While these platforms make crypto trading more accessible, large-scale security failures can expose significant amounts of digital assets to unauthorized withdrawals.
The investigation remains ongoing as Binance and its partners continue tracking the affected funds. The incident also highlights the importance of secure transactions, reliable platforms, and careful handling of digital assets.