In what is being described as the largest cryptocurrency heist in history, global exchange Binance confirmed on Thursday, October 29, 2026, that approximately $6.3 billion in digital assets were compromised during a major security breach. ​In response to the incident, the world’s largest cryptocurrency exchange suspended all customer deposits and withdrawals while initiating a global containment effort alongside industry partners and law enforcement agencies. ​
An initial internal investigation revealed that the breach likely originated from a compromised laptop belonging to a Binance engineer. The compromised endpoint allowed attackers to gain unauthorised access to internal signing systems and hot wallet infrastructure, executing unauthorized withdrawals across multiple blockchain networks, including Ethereum and Arbitrum.
Blockchain analytics firms TRM Labs and Chainalysis attributed the attack to “TraderTraitor,” a state-sponsored hacking unit linked to North Korea. Investigators noted that the exploit involved sophisticated smart-contract delegations (EIP-7702) that transformed a central hot wallet into an automated sweeper controlled by the perpetrators.
​Through immediate coordination with stablecoin issuers, decentralized protocols, and security partners, approximately $2.7 billion of the stolen funds were frozen shortly after the breach. Stablecoin operators reacted swiftly, with Tether freezing roughly $1.57 billion in USDT and Circle halting $800 million in USDC.
Ripple added another $200 million to the freeze list, while the Arbitrum Security Council and World Liberty Financial secured the remaining balance across various tokens and layer-2 networks. ​Despite these interventions, market analysis from Elliptic indicates the attackers successfully converted roughly $3.3 billion into un-freezeable assets, primarily Bitcoin and Ethereum, before protocol circuit breakers could be applied. ​
Binance leadership moved quickly to assure customers that user balances would remain intact despite the massive breach. ​”Your money is safe and we’re covering every loss,” stated Richard Teng, Co-CEO of Binance, in an official statement on X. “Our investigation has not attributed responsibility to any individual, and we are working tirelessly with authorities to trace all affected assets.”
​Yi He, Binance Co-Founder, confirmed that internal reserves and the exchange’s Secure Asset Fund for Users (SAFU) would be mobilized to cover all remaining losses. ​”Our teams are actively investigating and securing our wallet infrastructure,” a Binance spokesperson added. “As a precaution, all deposits and withdrawals remain temporarily suspended, but we anticipate full service restoration within 48 hours.” ​
External industry leadership also commented on the swift ecosystem reaction. “We are closely monitoring reports of the exploit involving Binance, freezing affected funds, and coordinating with relevant parties across the market,” said Jack McDonald, Senior Vice President of Stablecoins at Ripple. ​
The news sent immediate shockwaves through digital asset markets. Bitcoin dropped more than 4% toward $76,300, while Binance’s native token, BNB, slid 5% to around $709. Crypto-adjacent equities, including Coinbase and MicroStrategy, also traded lower during U.S. trading sessions. ​Binance expects to resume normal deposit and withdrawal operations over the weekend following comprehensive protocol upgrades and endpoint security sweeps.
