Binance Reports $6.3 Billion Crypto Theft; Says $3 Billion Frozen
Summary
Binance reports a cryptocurrency theft estimated at about $6.3 billion. Its investigation points to a DevOps engineer’s compromised laptop as a possible entry point; the exchange says about $3 billion has been frozen and it will cover losses.
Key points
- Binance says attackers submitted unauthorized withdrawal transactions after possibly using a DevOps engineer’s compromised laptop to access a service container.
- The exchange said it found no evidence that wallet private keys were leaked and identified additional breach points.
- TRM Labs estimates about $6.36 billion left Binance wallets across ten blockchains, mostly within about 20 minutes.
- TRM Labs and Chainalysis linked the theft to TraderTraitor, a North Korean hacking group; this attribution is reported, not independently established in the article.
- Binance says about $3 billion has been frozen with blockchain partners and it will cover losses; recovery totals remain developing estimates.
- Binance says Binance.US was not affected and advises Binance.com users to check accounts, use official support channels, and beware of fake recovery offers.
Article Details
- Victim Organization
- Binance
- Victim Domain
- Binance.com
- Incident Type
- Cryptocurrency theft involving unauthorized withdrawal transactions; a compromised DevOps engineer’s laptop was identified as a possible entry point.
- Disclosure Date
- 2026-10-30
- Affected Data Size
- TRM Labs estimated that approximately $6.36 billion in cryptocurrency left Binance wallets across ten blockchains. Binance said approximately $3 billion had been frozen; figures were described as developing estimates.
- Operational Impact
- Unauthorized cryptocurrency withdrawals occurred. Binance said it would cover losses using its emergency fund and company funds. It reported no evidence that wallet private keys had been leaked.
- Claim Status
- confirmed