Binance Confirms $6.3bn Security Breach as Crypto Exchange Freezes Billions in Assets

Cryptocurrency exchange Binance has confirmed a major security incident with an estimated financial impact of approximately $6.3 billion, making it one of the largest reported attacks involving a cryptocurrency platform.

In an announcement published on Friday, October 30, the world’s largest cryptocurrency exchange by trading volume said its initial investigation suggested that the incident may have involved a compromised laptop belonging to a DevOps engineer. The attacker allegedly used access gained through the device to enter a service container and submit unauthorised withdrawal transactions.

Binance said it had found no evidence that wallet private keys were exposed. However, the company acknowledged that the investigation was ongoing and promised to publish a detailed technical report after verifying the facts and completing its security review.

The exchange also disclosed that approximately $3 billion in affected cryptocurrency assets had been frozen on blockchain networks through cooperation with industry partners. The amount could increase as Binance and its partners continue tracing transactions and working with law enforcement agencies, cryptocurrency issuers and blockchain intelligence firms.

In response to the incident, Binance initially suspended deposits and withdrawals while its security teams conducted checks and secured the affected systems. The company said it expected withdrawals to resume within 48 hours.

Binance also pledged to cover all losses arising from the incident through its Secure Asset Fund for Users (SAFU) and company resources. The company maintained that customer funds were safe and said it would publish an updated proof of reserves after completing the remediation process.

The incident has prompted a coordinated response from cryptocurrency companies whose digital assets were reportedly linked to the affected transactions. Tether, the issuer of USDT, and Circle, which issues USDC, confirmed that they had frozen substantial amounts of cryptocurrency connected to the incident. Their intervention forms part of wider efforts to prevent the movement or conversion of affected assets.

Blockchain analytics firms have also been investigating the attack. Chainalysis estimated that approximately $5.912 billion had been stolen at the time of the incident, while TRM Labs attributed the operation with high confidence to TraderTraitor, a hacking group linked by cybersecurity investigators to North Korea. Binance has not independently confirmed the identity of the attackers.

The incident has renewed concerns about cybersecurity threats facing financial institutions and digital infrastructure. In Nigeria, the Nigerian Communications Commission’s warning about AI-driven fraud and threats to telecommunications and banking security provides further context on the growing risks associated with increasingly sophisticated cyberattacks.

The case also highlights the importance of international cooperation in tackling cybercrime and tracing stolen digital assets. A recent INTERPOL operation across 97 countries that resulted in 5,811 arrests and the recovery of $293 milliondemonstrates the scale of global efforts to combat cross-border financial and cyber-enabled crime.

Binance has said it is cooperating with law enforcement and blockchain intelligence partners to trace the affected assets and identify those responsible. The company has yet to release its complete technical findings, leaving important questions about the attack’s full scope and the methods used unresolved.