Binance, the world’s largest cryptocurrency exchange by trading volume, has suffered a major security breach that resulted in the theft of approximately $6.3 billion in digital assets.
The incident, which occurred on October 29, 2026, has been described as the largest cryptocurrency theft on record. Initial reports placed the suspected stolen amount at around $5.7 billion, but Binance later confirmed that the financial impact was approximately $6.3 billion.
According to the exchange, attackers compromised its hot wallets, which are digital wallets connected to the internet and used to facilitate cryptocurrency transactions. The breach reportedly enabled unauthorised withdrawals across multiple blockchain networks.
In its initial investigation, Binance said the security incident may have involved a compromised laptop belonging to a DevOps engineer. The attacker allegedly used access to an internal service container to submit unauthorised withdrawal transactions.
However, the exchange later disclosed that investigators had identified additional points of breach. Binance also said it had found no evidence that wallet private keys were leaked.
Blockchain security researchers have been examining the transactions and tracing the movement of the stolen assets. Some investigators have pointed to similarities with previous attacks attributed to North Korean-linked hacking groups, although responsibility has not been conclusively established.
Following the incident, Binance announced that it would absorb the financial impact rather than pass the losses on to its customers.
The company said it would use its Secure Asset Fund for Users (SAFU) and corporate treasury to cover the affected assets. In an update published on October 30, Binance said it had set aside more than $6.34 billion to cover the losses, including funds held in the same types of tokens that were stolen.
The exchange also said approximately $3 billion of the affected assets had been frozen through cooperation with law enforcement agencies, blockchain intelligence firms, token issuers and other industry partners.
As a precaution, Binance temporarily suspended withdrawals while its security teams reviewed the affected systems and introduced additional safeguards.
The company said deposits and other unaffected services remained operational, while efforts continued to restore withdrawal services safely. Binance indicated that withdrawals would resume in phases after the necessary security checks had been completed.
The exchange also said it planned to publish an updated Proof of Reserves report, allowing users to review information about the assets backing customer balances.
The breach has renewed concerns about the security of centralised cryptocurrency exchanges, particularly the risks associated with hot wallets and internal systems that authorise transactions. Although blockchain technology provides transparent records of transactions, exchanges still rely on digital infrastructure, employees and security procedures to protect assets and approve withdrawals.
The Binance incident is also drawing attention to the growing scale and sophistication of cryptocurrency-related cyberattacks. For now, the investigation remains ongoing. Binance says it is working with security experts and law enforcement agencies to trace the stolen funds, recover what can be recovered and identify those responsible.
The company has promised to publish a detailed technical report once its investigation is complete.
Discover more from Scoop Hub
Subscribe to get the latest posts sent to your email.
