Binance Halts Withdrawals for 34 Hours After Record $6.3bn North Korean Heist

Key points

• Binance confirmed a $6.3bn theft on Thursday, the largest in cryptocurrency history, and suspended withdrawals for approximately 34 hours to restore systems.
• The exchange froze roughly $3bn in stablecoins and pledged to cover all losses from its reserves, though recovering non-stablecoin assets remains difficult.
• Blockchain tracing firms attribute the attack to TraderTraitor, a North Korea-linked group previously responsible for a $1.5bn theft from Bybit.
• Binance initially cited a compromised engineer laptop but later identified additional points of breach, while the FBI and US officials are investigating the incident.
• Competitors like Coinbase, Kraken, and Gemini implemented heightened security measures, including cold storage adjustments and additional fund movement restrictions.

Background

This incident follows a series of major crypto breaches in 2026, including the $1.5bn Bybit hack attributed to TraderTraitor. The scale of the Binance theft has intensified debates about centralized custody risks and the potential role of AI in automating complex cyberattacks.

How outlets are covering it

The Financial Times emphasizes the immediate operational response, noting Binance's containment of compromised infrastructure and the industry-wide rush to tighten security. The New York Times highlights the internal coordination, describing an informal war room with 100 participants, including crypto tracers, to manage the crisis. Yahoo Finance focuses on the speculative dimension, questioning the extent of AI involvement and drawing parallels to traditional heist narratives, while noting the broader implications for banking regulation and insurance.

Why it matters

The $6.3bn theft underscores the systemic risks of centralized cryptocurrency exchanges and the evolving sophistication of state-sponsored cyberattacks. It has triggered a reassessment of security protocols across the industry and raised concerns about the potential for AI-powered, automated heists to become a recurring threat.

What to watch

Binance aims to restore withdrawals by Sunday morning. Industry leaders are calling for real-time security incident notifications and coordinated monitoring of suspicious funds. Regulators and insurers are likely to scrutinize the role of AI in the breach and its implications for future risk management.