Cryptocurrency exchange Binance suffered a historic cyberattack on Thursday that resulted in the theft of approximately $6.3 billion in digital assets, marking the largest crypto heist on record. The incident, which unfolded in about 20 minutes, has been linked by multiple blockchain analysis firms and U.S. authorities to TraderTraitor, an elite hacking group affiliated with North Korea’s government.

According to investigations, the attackers exploited vulnerabilities to move funds across ten different blockchain networks, rapidly laundering much of the stolen digital currency. The breach involved the unauthorized transfer of 18,270 bitcoins and 420,000 ethereum tokens, among other cryptocurrencies, prompting a sudden drop in the price of Bitcoin by more than 4 percent following the news.

Binance said it had frozen roughly half of the stolen assets, amounting to about $3 billion, in cooperation with blockchain partners and other cryptocurrency issuers such as Circle and Tether. The exchange also suspended all withdrawals temporarily to prevent further unauthorized transactions while it conducts a thorough security review.

Initial findings from Binance indicated that the breach may have begun with the compromise of a laptop belonging to one of its engineers, although further investigations revealed multiple points of intrusion indicating a highly sophisticated and well-coordinated attack. Richard Teng, co-chief executive of Binance, described the hacking operation as involving a “self-destruct mechanism” that erased digital traces, hindering investigators.

Market analysts and security experts have noted that the scale and speed of this theft expose significant vulnerabilities in the cryptocurrency industry's financial infrastructure. Advanced techniques including automation and laundering patterns previously unseen were reportedly used to obscure the trail of the stolen funds.

The U.S. Secret Service and FBI are actively investigating the theft. Authorities have linked North Korea’s TraderTraitor unit, also known as the Lazarus Group, to a series of previous high-profile crypto thefts, including a $1.5 billion heist from another exchange, Bybit, in February 2025. These cyberattacks are believed to be part of Pyongyang’s efforts to generate foreign currency to fund its military and nuclear weapons programs amid severe economic sanctions.

Binance, founded in 2017 by Changpeng Zhao, who previously faced legal challenges related to anti-money laundering compliance, has pledged to cover all customer losses resulting from the hack. The company emphasized that user deposits remain safe despite the breach.

This record-breaking cyber theft has reignited concerns about the security of centralized cryptocurrency platforms, which remain targets for state-sponsored and criminal hackers. Financial regulators and institutions worldwide are closely monitoring the situation for broader implications across the crypto market and the global financial system.