Binance Hit by Potential $6.3 Billion Security Hack

Cryptocurrency platform Binance announced on Thursday that $6.3 billion (£4.7 billion) in digital assets have been impacted by what may be the largest security breach in history. The exchange, which is the largest cryptocurrency trading platform in the world, stated that roughly half of the affected funds have been frozen, though significant assets remain under the control of the attackers. Binance pledged that it will cover all losses resulting from the incident.

Preliminary investigations indicate that the breach likely originated from a compromised laptop belonging to an engineer, which enabled an attacker to execute unauthorized withdrawals. The security issue specifically impacts Binance.com, whereas the separate platform Binance.US stated that its services were unaffected. Coinbase also reported that its operations remain unaffected.

Analytics Firms Point to North Korea Link

Blockchain analytics firms TRM Labs and Chainalysis have linked the attack to TraderTraitor, a hacking unit associated with North Korea. TRM Labs reported that the methodologies used in the Binance breach align with previous incidents tied to North Korea, including a $1.5 billion hack on the Bybit exchange in 2025. Ari Redbord, global head of policy at TRM Labs, referred to the event as a watershed moment for the industry, emphasizing that efforts to trace the remaining stolen assets are ongoing.

Chainalysis stated it has high confidence in the connection to the North Korean group. Western security agencies have previously asserted that illicitly obtained cryptocurrency funds are utilized to support North Korea's nuclear and missile programs, though the regime has consistently denied involvement in cyberattacks. Binance did not address potential ties to North Korea directly but stated it is cooperating with law enforcement to identify those responsible.

Industry Response and Asset Freezes

In response to the exploit, Binance co-chief executive Yi He confirmed that withdrawals have been temporarily disabled until the platform's environment is secured. Major stablecoin issuers have moved to restrict the flow of stolen funds. Tether chief executive Paolo Ardoino confirmed the freezing of approximately $1.6 billion in related USDT assets, while Circle chief executive Jeremy Allaire announced that over $800 million in USDC assets linked to the event have been frozen. World Liberty Financial also confirmed it worked alongside partners to freeze compromised funds.

Following early reports and the subsequent confirmation of the breach, major digital currencies experienced immediate price drops, with Bitcoin falling by over 4% alongside sharp declines in Ethereum and Solana. Founded in 2017, Binance serves more than 300 million registered users globally and reported holding over $160 billion in assets under custody in 2024.