Hey there, crypto followers! It looks like we have some wild and pretty shocking news shaking up the digital currency world today. If you thought you had seen it all when it comes to online security breaches, get ready—because the crypto space just hit a staggering new milestone that completely shatters all previous records.
Binance, which proudly holds the title of the world’s biggest cryptocurrency exchange, announced that hackers managed to walk away with roughly $6.3 billion. Yes, you read that number right. This massive incident has officially taken the crown as the largest crypto heist in history, completely blowing past previous attacks we have seen in the past.
Co-founded by Chinese-born Canadian billionaire Changpeng Zhao, the company had to slam the brakes on all deposits and withdrawals right away. Naturally, a panic like this makes everyone wonder about their digital wallets, but Binance was quick to step up. They promised to cover all the losses out of their own pocket and assured everyone in a statement that user funds were safe.
How Did This Massive Heist Go Down?
According to what blockchain analysis firms TRM Labs and Chainalysis shared with the public, the vast majority of the theft happened in an astonishingly short window of about twenty minutes, kicking off late on a Thursday.
TRM reported that an attacker successfully shifted approximately 6.36 billion USD right out of Binance wallets across 10 different blockchains. To put that into perspective, this completely dwarfs the previous record holder from February 2025, when hackers stole $1.5 billion from the Bybit exchange.
The good news? Binance didn’t sit entirely idle. They managed to freeze about $3 billion of those stolen funds. Stablecoin issuers Tether and Circle played a huge role here, helping to freeze more than $2.3 billion of that total, as reported by Reuters. However, as of now, Binance hasn’t given any clear update on what has happened to the remaining $3.3 billion left floating around.
And if that wasn’t worrisome enough, Binance put out a warning on X mentioning that the $6.3 billion price tag “may continue to increase” as their team keeps digging, tracing, and trying to freeze more assets.
Who is Behind the Attack?
While the dust is still settling, the finger-pointing has already begun. Two US blockchain analysis firms have come forward claiming that the whole operation traces right back to North Korea.
TRM stated they assessed with “high confidence” that the attack was pulled off by TraderTraitor, a North Korean hacking unit that has ties to the notorious Lazarus Group. According to the Council on Foreign Relations (CFR), the Lazarus Group typically targets entities in South Korea for espionage and destruction, but they are also well known for running cyber operations purely for financial gain—especially targeting crypto exchanges.
Back in 2019, the US Department of the Treasury actually sanctioned the Lazarus Group, noting they operated under North Korea’s primary intelligence bureau. Unsurprisingly, North Korea always denies any involvement in these kinds of hacks. Even so, Chainalysis reached the exact same conclusion about the source of the breach, and the FBI previously blamed the same unit for the Bybit hack.
TRM explained that the attackers forced Binance’s wallets to empty themselves into wallets under the hackers’ control, which follows a very similar playbook to the Bybit incident.
Binance itself has been a bit more careful before pointing fingers straight away. Co-CEO Richard Teng posted on X that their investigation hasn’t officially blamed any specific individual yet. At first, the platform thought the breach might have started because an engineer’s laptop got hacked. But by Friday, they updated everyone to say that further digging actually uncovered “additional points of breach.”
Interestingly, Binance mentioned they haven’t found any proof that a wallet’s private key—essentially the core digital password that controls a crypto wallet—was leaked. On the flip side, Mark Karpeles, the former head of the now-defunct Tokyo exchange Mt Gox, told Reuters that he believes the attackers probably did get their hands on keys for at least two Binance wallets.
Why Does North Korea Care About Crypto?
Experts point out that even though North Korea denies everything, stealing cryptocurrency has turned into a vital lifeline for Pyongyang. It brings in much-needed foreign currency to prop up their struggling economy and helps fund their nuclear program, which is currently sitting under heavy United Nations sanctions.
Back in December 2022, South Korea’s spy agency estimated that North Korean hackers had managed to steal around 1.5 trillion won—about $1.1 billion—in crypto and virtual assets over a five-year span.
Ari Redbord, TRM’s global head of policy, pointed out to Al Jazeera that when theft happens on this enormous scale, the money goes straight toward weapons proliferation and other destabilizing actions. That turns crypto theft into a massive global security issue, rather than just a digital robbery.
How Did the Market React?
As you can probably guess, the markets felt the shockwaves pretty quickly, though things managed to steady a bit after the initial panic. Bitcoin dropped to a six-week low of $76,368, while Ether tumbled more than 3 percent down to a two-month low of $2,178. Meanwhile, shares in Coinbase—another major crypto exchange that stated it was completely unaffected by the breach—dropped 4.8 percent.
Analysts chatting with Reuters noted that this hack happened at a time when the crypto market was already sweating under pressure from higher US interest rates and weaker demand from exchange-traded fund buyers.
To put the financial hit into perspective, this stolen sum is more than six times larger than Binance’s own $1bn emergency fund, known as the Secure Asset Fund for Users. Created back in 2018 and held entirely in Bitcoin, that fund was designed precisely to protect users in the event of a security breach. Teng reiterated that company funds would step in to cover all user losses regardless.
The Big Vulnerability: Centralized Exchanges
This whole ordeal has brought a major weak point back into the spotlight: large, centralized exchanges that hold user assets on their behalf. Sean Foley, a crypto market expert at Macquarie University in Sydney, explained to Al Jazeera that any asset kept on a centralized exchange is only as secure as the exchange itself. Naturally, the bigger the pile of holdings, the juicier the target it becomes for hackers.
To make matters trickier, insurance doesn’t offer a foolproof safety net here. Most standard crime and cyber insurance policies simply do not cover stolen cryptocurrency, leaving crypto-specific coverage as a very niche business handled mostly by specialized insurers.
At the end of the day, digital thefts are happening way too often. According to TRM’s 2026 Crypto Crime Report, hackers managed to steal $2.87 billion across nearly 150 different attacks just in the year 2025 alone.
Binance has also had its fair share of legal drama over the years. Founder Changpeng Zhao actually pleaded guilty back in 2023 to a felony charge related to failing to prevent money laundering on the platform, though US President Donald Trump later pardoned him in 2025.
Looking forward, Binance announced on Friday that they are actively coordinating with law enforcement agencies and are still on schedule to resume normal withdrawals within a 45-hour window. We will definitely be keeping an eye on this story as it develops, so stay safe out there in the digital asset world!
source: aljazeera.com (www.aljazeera.com)
Photo by TheDigitalArtist on Pixabay