Binance, the world’s largest cryptocurrency exchange, reported on Thursday that it had been the victim of a cyberattack resulting in the theft of approximately $6.3 billion in digital assets, marking what is believed to be the largest cryptocurrency heist to date. The breach took place over a roughly 20-minute period late Thursday, prompting a swift response from Binance and other industry players to contain the fallout.

Binance initially indicated that the attack involved unauthorized withdrawals, stemming from a compromised engineer’s laptop, but later described the hack as more complex, with multiple points of breach. The company temporarily halted withdrawals to protect remaining assets and pledged to cover the losses.

Following the incident, several major stablecoin issuers moved quickly to freeze about half of the stolen funds. Tether and Circle, providers of stablecoins pegged to the U.S. dollar, announced they had frozen $1.57 billion and $800 million respectively. Additionally, World Liberty Financial, a cryptocurrency firm with connections to the Trump family, reported it had frozen $27 million related to the theft.

Cybersecurity firms TRM Labs, Chainalysis, and Pangolin Intelligence attributed the hack to a North Korean-backed group known as TraderTraitor. Analysts noted that the attack method resembled a prior 2025 attack on the Bybit exchange, which had also been linked to North Korean hackers. Experts highlighted the broader security implications, emphasizing how funds stolen in such cyberattacks might be used to finance weapons proliferation and other destabilizing activities, framing the breach as a national security concern.

The theft rattled global cryptocurrency markets, leading to a drop in prices across various digital currencies as investors reacted to the scale and audacity of the hack. The swift freezing of assets by stablecoin issuers and third-party firms helped mitigate some financial damage, but the incident has nonetheless raised fresh questions about the security and resilience of cryptocurrency exchanges amid evolving cyber threats.

Binance and its partners continue to investigate the incident, and while no official attribution of responsibility has been announced by Binance, the involvement of the North Korean-linked group remains the prevailing analysis among cybersecurity firms monitoring the situation.