Binance has suspended all customer withdrawals after falling victim to what blockchain analysts describe as the largest heist in history, with the exchange estimating the total impact of the cyberattack at approximately $6.3 billion. The breach has triggered an international race across the digital asset industry to track, contain, and freeze the illicit transactions before they can be liquidated into fiat currency.
According to the company, roughly $3 billion of the affected assets—composed predominantly of stablecoins that serve as dollar-pegged cash equivalents in cryptocurrency markets—have been successfully frozen. However, blockchain analytics firm Elliptic reported that the attackers converted approximately $3.3 billion of the stolen funds into digital assets that cannot be frozen remotely, such as Ethereum, and are actively attempting to convert those tokens into traditional government-backed currency.
Points of Breach and Attribution
Binance disclosed that an initial investigation indicated hackers compromised an engineer’s laptop to withdraw assets from the trading platform. In a subsequent update, the company confirmed that further forensic reviews uncovered additional points of breach. Binance stated that it has found no evidence indicating that private keys were exposed during the attack, and confirmed that it is actively collaborating with law enforcement authorities to investigate the incident.
Blockchain intelligence firm TRM Labs attributed the intrusion to TraderTraitor, a cyber unit associated with North Korea. TRM Labs noted that the scale of the exploit establishes it as the largest cryptocurrency theft on record, surpassing an attack last year in which North Korean hackers siphoned $1.5 billion from the cryptocurrency exchange Bybit.
According to data from analytics firm Chainalysis, North Korean hacking groups stole roughly $2 billion in digital assets throughout 2025, marking a 50 percent increase compared to the previous year. Peter Ward of the Sejong Institute in Seoul noted that North Korea possesses substantial technical capabilities and provides near-total protection to state-sponsored hackers, warning that security risks could escalate further.
Asset Freezes and Recovery Operations
In response to the exploit, major stablecoin issuers took swift action to restrict addresses holding stolen funds. Paolo Ardoino, chief executive of Tether, confirmed that his company froze approximately $1.5 billion in USDT, its $180 billion market-cap stablecoin. Jeremy Allaire, head of Circle, stated that $800 million of the company’s USDC stablecoin was frozen following reports of an exploit targeting the exchange.
Elliptic confirmed it has verified $2.8 billion in frozen digital assets, composed primarily of USDT and USDC, while labeling the incident almost certainly the largest theft of any kind in recorded history.
Binance co-chief executive Yi He indicated that the exchange expects to resume customer withdrawals within 48 hours. Co-chief executive Richard Teng sought to reassure users, stating that customer funds remain safe and that the platform will cover every loss utilizing internal company capital alongside dedicated reserve holdings.
The exchange announced it has already reserved more than $6.34 billion in corporate funds to address the losses. Approximately $5 billion of that total is already maintained in the exact token assets that were drained. Binance noted that it is actively purchasing additional tokens on the open market to cover the remaining deficit, cautioning that acquiring low-liquidity tokens and finalizing settlements could take additional time.
Former chief executive Changpeng Zhao, who co-founded Binance in 2017 and remains based in Abu Dhabi alongside Yi He, stated on X that the exchange faces a remaining shortfall of roughly $2 billion to cover. Zhao noted that the company holds equity in Elon Musk’s SpaceX valued at more than $1 billion, describing the remaining financial gap as painful but manageable. Yi He added that the exchange’s annual revenue—which Zhao earlier this year placed at approximately $5 billion—is sufficient to absorb the losses. According to an update from mid-October, Binance’s reserve fund contains approximately $1 billion in bitcoin.
Market Volatility and Regulatory Scrutiny
The cryptocurrency market reacted swiftly to the security breach. The price of Bitcoin dropped approximately 4 percent in the immediate hours following the incident before stabilizing to trade above $78,000. The broader digital asset market continues to endure an extended slump after a sharp downturn late last year erased more than $1 trillion in market value across roughly 18,000 tokens.
The incident also highlights ongoing custody challenges within the sector. Unlike conventional financial exchanges, centralized crypto platforms typically hold customer assets directly. While some institutional clients rely on third-party custodians such as Swiss banks Sygnum and Flow to safeguard their holdings, centralized venues remain prime targets. Other recent incidents include the theft of $280 million from unregulated exchange Drift in April, and the loss of nearly $390 million at Bitget, which reimbursed affected users via its User Protection Fund.
The attack adds pressure to Binance, which oversees approximately $140 billion in digital assets while navigating complex regulatory landscapes. The exchange agreed to wind down operations in the European Union in July after failing to secure a license under the bloc’s regulatory rules, and it previously agreed to bar UK users following a 2021 regulatory ban. In the United States, Binance operates as a separate entity registered with the Financial Crimes Enforcement Network, holding money transmitter licenses in 32 states.
Abu Dhabi’s Financial Services Regulatory Authority, which granted Binance regulatory status in December 2025 to oversee its primary global exchange, stated that it is closely engaging with the company regarding the unauthorized asset withdrawals. The current crisis follows a 2023 settlement in which Binance pleaded guilty to federal anti-money laundering violations and paid a $4.3 billion penalty to US authorities, while Zhao pleaded guilty to anti-money laundering failures, stepped down as chief executive, and was subsequently pardoned last year by Donald Trump.
