Binance Confirms Record $6.3B Crypto Hack: North Korean Hackers Suspected

Binance has disclosed that $6.3 billion worth of cryptocurrency was stolen from its platform in what security experts are calling the largest crypto heist ever recorded. The exchange has frozen approximately $3 billion of the stolen assets and committed to covering all user losses.

Binance Hack: What We Know So Far

The world's largest cryptocurrency exchange confirmed the massive security breach after initially reporting a "potential security issue" that prompted the temporary suspension of withdrawals across multiple networks. The attack represents a staggering four times the previous record for cryptocurrency theft.

According to Binance's investigation, the security incident involved a compromised laptop belonging to one of its DevOps engineers, which allowed attackers to access a service container and submit unauthorized withdrawal transactions. However, Binance co-CEO Richard Teng emphasized that the attack was more sophisticated than a single point of failure.

"To be clear: the attacker did not simply use one engineer's permissions, and this was not a single 'one-click' action. It involved a more complex attack process," Teng stated on X. "Our investigation has not attributed responsibility to any individual. So far, we have found no evidence of any wallet private key leak."

Binance Promises Full User Compensation

In a series of updates posted to X, Binance assured users that their funds remain safe and committed to covering any losses resulting from the hack. The company has allocated over $6.34 billion of its own funds to cover the incident, with $5 billion already held in the exact token assets that were impacted. Additionally, Binance maintains an emergency reserve fund of approximately $1.3 billion for such situations.

Deposits and withdrawals remain suspended in response to the breach, and the affected address has had its authorization revoked.

North Korean Hackers Suspected

While Binance has not officially attributed the attack to any specific group, leading blockchain analysis firms TRM and Chainalysis both link the breach to TraderTraitor, a North Korean cybercrime hacking group with a documented history of targeting cryptocurrency exchanges. According to TRM, most of the theft occurred over a remarkably short period of just 20 minutes.

"This is an extraordinary hack, for its size and for the response... Few financial systems have ever shown a theft of this scale," said TRM chief policy officer Ari Redbord. "The theft shows how exposed the system is to sophisticated attackers moving at a speed we have never seen."

Frozen Funds and Recovery Efforts

Financial technology giant Circle froze approximately $800 million in Tether as it passed through its networks, while Tether itself froze about $1.56 billion related to the Binance hack. These coordinated freezing efforts have helped secure roughly $3 billion of the stolen assets so far.

A Pattern of Escalating Crypto Theft

This incident marks Binance's second major security breach, following a 2019 hack that resulted in $40 million worth of stolen crypto assets at the time. The latest attack comes amid escalating concerns about large-scale cryptocurrency theft, with hackers stealing a record $1.4 billion from exchange Bybit in 2025—an incident also blamed on North Korean hackers.

The Binance hack also coincided with a separate security incident at prediction market giant Polymarket, which briefly halted trading after confirming a third-party company was compromised, resulting in approximately $2 million in stolen user funds.

What This Means for Crypto Security

The unprecedented scale of this breach raises serious questions about security infrastructure at even the largest cryptocurrency exchanges. With attackers demonstrating the ability to execute complex, multi-vector attacks with extraordinary speed, the industry faces mounting pressure to strengthen defenses against increasingly sophisticated cybercriminal operations, particularly those backed by nation-states.

Binance has stated it is working in coordination with law enforcement to resolve the incident and has promised to provide updates through official channels as verified information becomes available.

Disclaimer: This article is based on verified reports from Binance and security research firms. The situation is developing, and readers should follow official Binance channels for the latest updates.