Binance Cyberattack: Reported $6.3 Billion Crypto Heist

Cryptocurrency exchange Binance says it was targeted in a cyberattack that resulted in an estimated $6.3 billion in losses, potentially making it the largest cryptocurrency heist ever recorded. The company has suspended deposits and withdrawals while working with law enforcement and Cybersecurity partners to secure its systems and trace the stolen assets.

Binance disclosed the incident on Thursday, explaining that the attack originated from a compromised laptop. According to the company, the breach allowed an attacker to access a service container and submit unauthorised withdrawal transactions.

How the Binance Cyberattack Happened

Binance said the attacker exploited access obtained through a compromised laptop to reach part of its infrastructure. The unauthorised access was then used to initiate cryptocurrency withdrawals, resulting in an estimated financial impact of approximately $6.3 billion.

The exchange cautioned that the figure remains preliminary. The total value of affected assets could change as investigators examine transaction records, identify connected wallets and determine how much cryptocurrency can be recovered.

The incident highlights the risks associated with compromised devices and weaknesses in systems that connect internal services to financial transactions. Even large cryptocurrency platforms with extensive security operations can face significant threats when attackers gain access to sensitive infrastructure.

Binance Suspends Transactions and Promises to Cover Losses

Following the discovery of the breach, Binance suspended deposits and withdrawals as a precaution while its security teams investigated the incident. The company said it was working with law enforcement agencies to secure its infrastructure, identify those responsible and locate the stolen funds.

Binance also sought to reassure customers that their holdings would not be affected by the incident. The exchange said user funds were safe and that it would cover all losses arising from the attack.

Changpeng Zhao, Binance’s founder, said he expected all user funds to be fully covered in his capacity as a shareholder. His statement reinforced the company’s position that customers would not be required to absorb the reported losses.

However, the financial consequences of the incident could extend beyond immediate reimbursement. A breach of this scale may lead to additional security reviews, regulatory scrutiny and questions about the controls used to protect customer assets.

Billions of Dollars in Crypto Assets Identified and Frozen

Efforts to trace the stolen cryptocurrency have already resulted in the identification and freezing of a substantial amount of assets connected to the attackers. Binance said approximately $3 billion in cryptocurrency that passed through wallets linked to the hackers had been identified and frozen.

Stablecoin issuers Tether and Circle also reported freezing assets associated with the incident. Tether chief executive Paolo Ardoino said the company had frozen more than $1.567 billion worth of its digital currency.

Circle chief executive Jeremy Allaire said his company had frozen hundreds of millions of dollars in assets and was coordinating with law enforcement authorities.

These actions demonstrate how cooperation between cryptocurrency exchanges, stablecoin issuers, blockchain intelligence firms and investigators can help disrupt the movement of stolen digital assets. Although many blockchain transactions are publicly visible, tracing funds across multiple wallets and services can be complicated.

Binance warned that the amount recovered or frozen could increase as the investigation continues. The company said its teams were working with law enforcement, asset issuers and industry partners to identify additional funds and prevent their movement.

Potentially the Largest Cryptocurrency Heist on Record

If the estimated $6.3 billion impact is confirmed, the Binance incident would surpass the previous record for a cryptocurrency theft. That record was set in February 2025, when hackers linked to North Korea stole approximately $1.5 billion from cryptocurrency exchange Bybit.

The scale of the reported Binance breach illustrates how cyberattacks targeting major digital asset platforms can produce losses far beyond those associated with conventional financial fraud. Cryptocurrency exchanges hold or facilitate transactions involving large amounts of digital assets, making them attractive targets for sophisticated criminal groups.

Unlike traditional bank deposits, cryptocurrency holdings maintained through exchanges are not automatically protected by the same deposit insurance arrangements that apply to eligible bank accounts in many countries. Customers therefore depend heavily on an exchange’s security measures, financial resources and policies for handling losses.

Binance’s commitment to cover the reported losses could help limit the immediate impact on customers. Nevertheless, the incident may renew debate about how exchanges should safeguard customer assets, disclose security failures and demonstrate that they can meet their obligations after a major breach.

Bitcoin and Ethereum Decline as News of the Hack Spreads

News of the reported attack coincided with declines in major cryptocurrency prices. Bitcoin fell approximately 4.3%, while Ethereum lost around 4.6% of its value as the incident spread across online markets.

Large security breaches can affect investor confidence because they raise concerns about the safety of digital assets and the reliability of platforms used to trade and store them. Even when an exchange promises to reimburse customers, uncertainty about the scale of an attack and the possibility of further disruptions can influence market sentiment.

However, price movements in cryptocurrency markets are affected by several factors. The reported declines do not, by themselves, establish that the Binance incident was the sole cause of the market downturn.

Growing Cybersecurity Risks for Cryptocurrency Platforms

The Binance breach comes amid heightened global attention to cybersecurity threats, including concerns about how advances in artificial intelligence could help attackers develop more sophisticated techniques. AI-assisted tools may increase the speed and scale of certain cyber operations, although the available information about this incident does not establish that artificial intelligence was used in the attack.

Cryptocurrency companies have faced security threats for years, ranging from stolen private keys and compromised employee devices to phishing attacks and attempts to exploit weaknesses in digital infrastructure.

In 2025, Coinbase disclosed that criminals had stolen customers’ personal information and attempted to extort the company for $20 million. Coinbase refused to pay and instead offered a bounty for information that could help identify and arrest those responsible.

Such incidents show that cryptocurrency security involves more than protecting digital wallets. Exchanges must also secure employee devices, internal networks, transaction approval systems, customer information and the infrastructure connecting different services.

What the Binance Incident Means for Crypto Investors

The reported $6.3 billion breach could have wider implications for cryptocurrency exchanges and investors. For trading platforms, the incident may increase pressure to strengthen access controls, monitor unusual withdrawal activity and improve procedures for responding to compromised systems.

For investors, it is a reminder that holding cryptocurrency through an exchange carries risks that are different from those associated with keeping money in a regulated bank account. Customers should understand an exchange’s custody arrangements, security practices and policies for handling losses before relying on it to store significant holdings.

The ability to freeze certain digital assets can also be an important factor in recovery efforts. Stablecoins issued by centralised companies may include mechanisms that allow issuers to restrict specific tokens, while other cryptocurrencies can be more difficult to recover once transferred through multiple wallets.

The final financial impact of the Binance incident will depend on how much of the affected cryptocurrency can be traced, frozen and recovered. Investigators will also need to establish how the compromised laptop provided access to the exchange’s infrastructure and whether additional security weaknesses were involved.

Investigation Continues as Binance Works With Law Enforcement

Binance said it was cooperating with law enforcement partners to confirm the identities of those responsible and pursue legal action. The company is also working with cryptocurrency issuers, blockchain intelligence firms and other industry participants to trace transactions connected to the attackers.

Changpeng Zhao stepped down as Binance chief executive in 2023 and pleaded guilty to violating US anti-money-laundering laws. He was later granted a full presidential pardon by Donald Trump.

For now, the exchange’s immediate priorities are securing its infrastructure, tracing the stolen assets and maintaining customer confidence. The investigation’s findings will help establish the full scale of the breach and whether the reported $6.3 billion figure represents the final impact.

The incident could become a defining test of how the cryptocurrency industry responds to a major security failure. Its outcome will depend not only on the amount of money recovered but also on the effectiveness of the safeguards and cooperation used to prevent further losses.