Binance confirms $6.3 billion theft, largest crypto heist in history

Key points

• Binance reported a $6.3 billion theft on October 29, suspending all deposits and withdrawals immediately after the breach.
• The exchange stated it has frozen approximately 44% of the stolen funds, primarily stablecoins, and pledged to cover all customer losses from its reserves.
• TRM Labs and Chainalysis attribute the attack to North Korean hackers known as TraderTraitor, noting the theft took roughly 20 minutes across multiple blockchains.
• Binance initially cited a compromised laptop but later acknowledged additional points of breach, describing the incident as a complex attack.
• The incident triggered a significant sell-off in crypto-related stocks, including an 11% drop in Coinbase shares, amid broader market volatility.

Background

This breach dwarfs previous major crypto thefts, including the $1.5 billion Bybit hack in February 2025 and the $625 million Ronin Network theft in 2022. It also surpasses the FTX collapse, which involved an $8 billion shortfall but was driven by internal fraud rather than an external hack. Earlier archive reports indicated initial estimates of a $2.5 billion breach before the full scale was confirmed.

How outlets are covering it

WIRED and The Atlantic emphasize the speed and scale of the theft, noting it took only 20 minutes and likely involved North Korean actors. Yahoo Finance focuses on the historical comparison, highlighting how this theft exceeds previous major heists. While blockchain analytics firms like TRM Labs and Chainalysis strongly link the attack to the TraderTraitor group, Binance has not officially confirmed the North Korean connection, citing a compromised laptop and additional breaches. The Atlantic also notes a separate, unrelated $2.6 million theft from Polymarket occurred on the same day, complicating the narrative of a single coordinated attack.

Why it matters

The breach represents the largest financial theft in the cryptocurrency sector's history, raising serious concerns about the security of centralized exchanges. The inability to freeze the remaining 56% of the stolen funds, which includes Bitcoin and Ether, highlights the limitations of current blockchain security. The incident has also triggered a broader market sell-off, impacting the valuations of major crypto-related equities and signaling potential systemic risks in digital finance.

What to watch

Binance is working with law enforcement to identify the perpetrators, while outside investigators race to track the remaining unfrozen funds. Crypto tracing firms are monitoring for new laundering patterns, noting that the stolen assets are being moved through automated transactions to obscure their trail. The exchange has promised to cover all losses, but the recovery of the non-stablecoin portion remains uncertain.