Binance, the world's largest cryptocurrency exchange, was targeted in a cyberattack on Thursday, October 29, 2026, that resulted in the theft of approximately $6.3 billion in digital assets. The FBI and blockchain analysis firms have attributed the heist to TraderTraitor, a hacking unit linked to the North Korean military. The hackers accessed investor accounts at 4:05 p.m. Eastern and transferred the funds within 20 minutes, using what Binance described as a compromised engineer's laptop to bypass withdrawal controls.
In response to the theft, Binance, working with industry partners and stablecoin issuers like Tether and Circle, has frozen approximately $3 billion of the stolen funds. Tether reported freezing $1.57 billion, while Circle froze over $800 million. Binance co-CEO Richard Teng described the event as a "complex attack" involving malicious software designed to delete evidence. The exchange has suspended withdrawals and stated it intends to use $6.34 billion of its internal funds to cover all customer losses.
The theft involved various cryptocurrencies, including Bitcoin, Ethereum, and stablecoins. Following news of the breach, Bitcoin fell to a six-week low of $76,368, and Ether dropped to a two-month low. The FBI noted that the attackers have been converting stolen assets into Ethereum and are expected to use decentralized finance (DeFi) and instant swap services to further conceal the movement of the funds. U.S. President Donald Trump stated that his administration is investigating the incident but noted that Binance indicated the situation was under control.
The scale of this event—which blockchain analysts at Elliptic called the largest known theft of any kind—may prompt institutional and retail investors to reevaluate the security of centralized exchanges. Because crypto exchanges do not operate under the same strict regulatory frameworks as Wall Street firms, investors do not have the same legal guarantees that their funds will be replaced in the event of a cyberattack. The reliance on the exchange’s internal reserves to cover the $6.3 billion loss sets a precedent for how large platforms manage catastrophic security failures without government-backed insurance.
Furthermore, the attribution to North Korea indicates that stolen digital assets are being utilized for sovereign purposes, including weapons proliferation and other military activities. Investigators from the FBI, U.S. Secret Service, and IRS Criminal Investigation (IRS-CI) are currently tracing the funds. Binance announced it plans to conduct a security review and a proof-of-reserves snapshot, with results expected by Monday, November 2, 2026. The exchange aims to resume withdrawal services within days as it continues to work with international regulators, including Abu Dhabi’s Financial Services Regulatory Authority.