Binance, the world’s most significant cryptocurrency trading platform, confirmed on Thursday that a major security incident has affected approximately $6.3 billion (£4.7 billion) in assets. The exchange stated that it has successfully frozen about half of the impacted funds through collaborations with other platforms and has pledged to cover all associated losses for its users. The exchange has been subject of regulatory scrutiny around the world.
Initial internal investigations suggest the breach may have stemmed from a compromised engineer’s laptop, which enabled an unauthorized actor to execute illicit withdrawals. According to early checks show the suspected hack may have involved an engineer’s laptop that had been compromised, which allowed an attacker to make unauthorised withdrawals, Binance, In a series of online updates.
While Binance.com handles the bulk of global operations, the smaller entity Binance.US, which serves American residents, reported that its systems remain unaffected.
Binance, which serves over 300 million registered users, noted it held over $160 billion in assets under custody as of 2024. Binance, which was founded in China by Zhao in 2017, allows users to trade digital assets and is estimated to have more than 300 million registered users worldwide.
Investigation and Industry Response
- Current Status: Withdrawals are temporarily disabled until the environment is deemed secure.
- North Korean Link: Investigation firm TRM Labs attributes the attack to the TraderTraitor unit, citing similarities to the 2025 Bybit hack.
- Frozen Funds: Tether and Circle have collectively frozen approximately $2.4 billion in assets linked to the breach.
- Leadership Statement: Former boss Changpeng Zhao confirmed the incident as a likely hack, though he no longer manages daily operations.
- Industry Impact: Bitcoin, Ethereum, and Solana experienced sharp price declines following news of the security lapse.
The incident has been characterized by experts as potentially the largest in history, surpassing the $1.5 billion Bybit exchange hack observed in 2025. TRM Labs chief policy officer Ari Redbord described the event as a watershed moment for the industry, noting that because the attacker still retains a substantial amount of stolen assets, recovery efforts remain complex and ongoing. According to we make this judgment with high confidence,” TRM, In a report, adding that several elements of the attack resemble earlier North Korean-linked incidents, including 2025’s Bybit hack.
Tether CEO Paolo Ardoino confirmed his company had frozen roughly $1.6 billion, emphasizing that protecting industry partners remains a primary priority.
Similarly, Circle CEO Jeremy Allaire stated his firm blocked over $800 million in assets, while World Liberty Financial—a venture linked to US President Donald Trump and his family—also confirmed efforts to secure stolen funds. One of the world’s largest US dollar-backed cryptocurrencies, circle is the issuer and co-creator of the USDC.
Conversely, Coinbase reported that its platform was not affected by the exploit.
Binance co-chief executive Yi He expressed gratitude to crypto issuers for their swift assistance in freezing assets. The company has promised to release a comprehensive investigation report once the inquiry concludes and urged users to avoid unofficial sources. While the exchange did not address specific questions regarding links to North Korea, it stated that it is working closely with law enforcement to identify the criminals and ensure they face justice.
Key Job Details
- Bitcoin dropped by more than 4% following the alerts. The price of other major cryptocurrencies including Ethereum and Solana also fell sharply.
