Binance, the world’s largest cryptocurrency exchange, suffered a massive cyberattack last Thursday, resulting in the theft of at least $6.3 billion in digital assets. The breach, which unfolded within approximately 20 minutes, has been linked to North Korean state-sponsored hackers, marking the largest known crypto heist to date and underscoring ongoing vulnerabilities within the digital asset industry.
The attack took place on October 29 and involved sophisticated tactics that allowed the perpetrators to exploit a compromised DevOps engineer’s laptop, according to an initial investigation by Binance. The breach enabled unauthorized withdrawals from the platform, with further company infrastructure potentially affected, though details remain under review.
Following the breach, Binance swiftly acted to contain the damage. The company frozen an estimated $3 billion in stolen funds and collaborated with partners to immobilize an additional $27 million tied to stablecoin transactions. Despite these efforts, hackers managed to convert some of the stolen stablecoins into other cryptocurrencies such as ether through decentralized lending platform Aave. This maneuver allowed them to bypass centralized controls and escape with roughly $2.4 billion in unfreezable digital assets, according to crypto intelligence firms TRM Labs and Pangolin Intelligence.
In a series of public statements on the social media platform X, Binance founder Changpeng Zhao emphasized that user funds were safe and assured customers that the company would cover losses. Zhao confirmed that approximately 95% of the stolen assets have been replaced by Binance, with the remaining 5% remaining difficult to recover due to liquidity constraints. The exchange began gradually resuming withdrawals on Sunday, after a temporary suspension aimed at preventing further unauthorized transactions. Within hours of reopening, the platform experienced a net outflow of $3.64 billion in withdrawals.
The breach has intensified scrutiny on cryptocurrency security, a sector that has seen a rise in sophisticated cyberattacks this year. North Korean hacking groups have been implicated in nearly 89% of crypto-related losses in 2026, according to Chainalysis data, with the same group behind previous high-profile incidents such as the $1.5 billion ByBit breach in 2025.
Key Binance executives, including co-CEOs Yi He and Richard Teng, remained engaged throughout the crisis. Yi, who is based in the United Arab Emirates and reportedly seven and a half months pregnant, stayed awake through the night coordinating response efforts. Teng also participated actively from Hong Kong.
Despite Binance’s reassurances, the incident triggered widespread concern and comparisons to the collapse of the now-defunct crypto exchange FTX, which famously froze withdrawals before its downfall. Social media reaction highlighted anxiety about the broader stability and security of cryptocurrency platforms.
This event comes amid waning momentum in the cryptocurrency market following record highs in 2025, raising questions about crypto’s viability as a secure alternative to traditional financial systems. Industry experts describe the attack as a significant setback for the sector, reflecting persistent challenges in safeguarding digital assets despite growing adoption.