Binance Halts Withdrawals After $6.3 Billion Breach, Largest Crypto Heist in History

Key points

• Binance suspended all deposits and withdrawals following a security incident that impacted approximately $6.3 billion in assets.
• The exchange pledged to cover all customer losses through its Secure Asset Fund for Users and company funds, promising to publish an updated Proof of Reserves once resolved.
• Initial investigations suggest a compromised laptop belonging to a DevOps engineer allowed attackers to access a service container and submit unauthorized withdrawal transactions.
• Stablecoin issuers Tether and Circle froze over $2.3 billion in assets related to the incident, with Tether freezing nearly $1.57 billion and Circle freezing over $800 million.
• Bitcoin prices fell below $78,000, reaching a six-week low, while BNB tokens declined more than 8% in 24 hours following the announcement.
• The breach is the largest in cryptocurrency history, surpassing the 2025 Bybit theft of $1.5 billion, and has intensified concerns about centralized exchange vulnerabilities.

Background

This incident follows a pattern of major cryptocurrency heists, including the $1.5 billion theft from Bybit in February 2025, which the FBI attributed to North Korean hackers. Previous breaches, such as the 2022 Ronin and 2021 Poly Network incidents, also involved significant asset thefts, with some linked to state-sponsored actors. Binance itself suffered a $570 million theft in 2022. The current breach has heightened concerns about the security of centralized exchanges and the potential for state-backed cyberattacks in the cryptocurrency industry.

How outlets are covering it

The New York Times reports that the incident could be the biggest crypto heist ever, with one research lab attributing the theft to North Korea’s elite hacking unit. The Financial Times contextualizes the $6.3 billion theft as the largest in the industry, comparing it to previous heists like the 2025 Bybit incident and the 2022 Ronin breach. CNBC highlights the broader market impact, noting that the hack contributed to a tech sell-off, with Bitcoin falling below $78,000 and Nasdaq futures declining. Fox Business focuses on the immediate response, detailing the freeze of assets by Tether and Circle and Binance’s pledge to cover losses. There is some disagreement on the nature of the incident, with Binance officially calling it a security incident while founder Changpeng Zhao described it as a hack. Additionally, while some outlets speculate about North Korean involvement, Binance has not officially attributed responsibility to any specific actor.

Why it matters

The $6.3 billion breach at Binance, the world’s largest cryptocurrency exchange, represents a significant security failure that has shaken confidence in the cryptocurrency industry. The incident has led to a sharp decline in Bitcoin prices and a broader sell-off in technology stocks, highlighting the interconnectedness of crypto and traditional markets. The freeze of over $2.3 billion in assets by stablecoin issuers underscores the scale of the breach and the coordinated response from industry players. The incident also raises questions about the security of centralized exchanges and the potential for state-sponsored cyberattacks, with some attributing the theft to North Korean hackers. The broader implications include increased scrutiny of cryptocurrency regulations and the need for stronger security measures to prevent future breaches.

What to watch

Binance is expected to publish an updated Proof of Reserves once the incident is resolved, providing transparency on the impact of the breach on its reserves. The company is working with law enforcement and industry partners to trace affected assets and secure its wallet infrastructure. Regulators are likely to increase scrutiny of cryptocurrency exchanges and stablecoin issuers, potentially leading to stricter regulations to prevent future breaches. The incident may also lead to increased investment in cybersecurity measures across the cryptocurrency industry, with a focus on securing DevOps environments and preventing unauthorized access to service containers. The broader market impact may continue to affect cryptocurrency prices and technology stocks in the short term, with investors closely monitoring the situation for any further developments.