According to a report, the world's largest cryptocurrency exchange Binance has stated that a security breach caused an estimated impact of $6.3 billion. Analysts say this could constitute the largest crypto asset theft in history. Binance said it has worked with partners to freeze affected assets, with approximately $3 billion located so far; the company has not provided an update on the status of the remaining $3.33 billion.
Binance becomes the latest example of a hacking incident. In its announcement, Binance stated that preliminary investigations suggest the security incident may be related to a compromised laptop belonging to an engineer. According to blockchain analytics firm TRM Labs, North Korea is behind the hack. The firm said North Korea began preparations at least 36 hours before the data theft. TRM stated, "On the evening of October 29, billions of dollars in cryptocurrency began flowing out of Binance's wallets," involving 10 blockchains—including Bitcoin, Ethereum, Solana, and XRP—and flowing into addresses controlled by a single attacker.
For exchanges holding billions of dollars in client assets, the challenge is no longer just protecting private keys or storing most funds offline. Wallet systems increasingly involve multi-party signatures, automated transaction processes, smart contract permissions, and external service providers. Binance announced on X platform on Friday that as of now, the total losses from this incident amount to approximately $6.3 billion, and stated it will cover all losses. Binance has temporarily suspended withdrawal functions on the exchange. The incident has raised new questions about the industry's ability to protect digital assets while seeking to attract traditional finance. This incident at the world's largest cryptocurrency exchange highlights that even the biggest players can face security vulnerabilities.
The hacking incident has weighed on crypto asset prices. Bitcoin briefly touched a six-week low, last reported at $78,021, down 3%; Ethereum fell more than 3% to $2,185.83. Crypto exchange Coinbase Global, Inc. (COIN) shares fell 4.8% in after-hours trading, while Bitcoin treasury company Strategy (MSTR) fell nearly 6% in after-hours trading. "This is the largest cyber theft in history, not just the largest theft in crypto," said Aneirin Flynn, CEO of cybersecurity technology company FailSafe. "This will damage people's confidence in cryptocurrency. The industry is fighting for institutional capital, but institutions won't turn a blind eye to repeated failures in custody and security."
Frequent Hacking Incidents
This hacking incident is another example in a series of costly security breaches in the cryptocurrency industry. In February 2025, Dubai-based Bybit suffered a $1.5 billion theft, the largest single cryptocurrency theft on record at the time. The FBI pointed the finger at North Korean hackers who dispersed the stolen assets across thousands of addresses on multiple blockchains. In August, hackers stole over $100 million worth of Bitcoin from thousands of wallets protected by hardware devices manufactured by Canada's Coinkite. The attack exploited a software vulnerability that made the private keys protecting cryptocurrency predictable. In September, crypto exchange Bitget said attackers stole approximately $388 million. In October, criminals tampered with Ledger hardware wallets distributed through Southeast Asian resellers, with blockchain researchers estimating losses exceeding $90 million. Ledger said its own systems were not compromised. Prediction market Polymarket temporarily halted trading this week due to a third-party vendor breach, with losses exceeding $2.5 million. These incidents highlight the broad security vulnerabilities facing cryptocurrency companies, from their own wallets and technical systems to supply chains and external vendors.
The risks are not limited to crypto-native companies. In South Korea, a series of cyberattacks have hit multiple financial institutions in recent weeks, including crypto exchange Bithumb Co., Mirae Asset Global Investments Co., and Daishin Securities Co., all of which reported unauthorized access leading to user data leaks. Several major thefts have occurred in recent months. These security breaches have raised questions about the security of outsourced systems and third-party technology providers, as financial companies increasingly rely on interconnected digital infrastructure.
Analysts and Professional Investors Weigh In
Chainalysis Research Director Eric Jardine: "The investigation is still ongoing, and we cannot yet confirm the cause of this attack. As of 8:30 PM Eastern Time (8:30 AM Beijing Time), we have confirmed at least $5.912 billion stolen, with funds transferred across multiple blockchains including Bitcoin, Ethereum, Tron, Ripple, and several Layer 2 networks." "Binance has also confirmed approximately $3 billion frozen. Blockchain transparency and industry collaboration are disrupting the movement of stolen funds. Our investigators are identifying more freezing opportunities to support recovery efforts."
Singapore ChainUp Investment Chief Investment Officer Amanda He: "The initial decline may be because hackers are selling these coins. But after 8:00 AM Eastern Time (8:00 AM Beijing Time), as Asian morning trading opened, panic spread further... By trading volume, Binance is still the largest exchange on the market, so it is indeed at the center of this storm—and at the center of market activity." "Our position at Binance is not large, accounting for less than 20% of our total holdings. But for the positions actually held there, we have sold everything. What could be transferred out was transferred first, and what couldn't be transferred was sold, shifting into stablecoins and other safe-haven assets. Withdrawals have now been suspended."
Hong Kong HashKey Group Senior Researcher Tim Sun: "We believe the impact of the Binance incident is likely to exceed the direct asset losses. This incident could rank among the largest security breaches in crypto industry history." "We are more concerned about the potential liquidity shock. As the world's largest digital asset trading platform, any disruption to Binance's deposit and withdrawal operations could affect market makers' ability to move funds between trading venues."
London Standard Chartered Bank Head of Digital Asset Research Geoffrey Kendrick: "I suspect this decline has further to go. We will only find a new bottom after assets are unfrozen and more details about this attack emerge."
Singapore 1Token Founder Damon Xu: "We expect cross-exchange strategies to be scaled back and leverage to decline. Even if affected users ultimately receive full compensation, funds being locked during the transition period could leave traders in a situation where they are profitable on one platform but unable to access funds, while facing margin gaps and forced liquidations on another platform." "Decentralized exchanges may benefit. Hyperliquid's strong performance during this period is noteworthy, with some funds and trading activity potentially migrating on-chain."
Crypto market maker GSR Head of Systematic OTC Business Aravind Srinivasan: "This is the largest hacking incident in history... Binance spot spreads are also wider and liquidity is thinner. This morning, the average bid-ask spread for Bitcoin spot was once five times normal levels, and Ethereum was 2.5 times. Spreads have since narrowed slightly."
Singapore UOB Kay Hian Private Wealth Management Director Kenneth Goh: "The crypto industry has a long history of exchange hacks. Mt. Gox collapsed in 2014 after losing nearly $500 million in Bitcoin, and Bybit also lost approximately $1.5 billion last year." "What makes this one special is where it happened. The world's largest exchange should have the strongest controls in the industry, but it was still breached. Investors will next scrutinize more carefully where their assets are custodied and who is responsible when problems arise."
Karpeles Lab CEO and former Mt. Gox Head Mark Karpeles: "Binance appears to have spread assets across multiple systems (to ensure a single attack can only affect a portion of assets), but even so, a single attack still caused enormous losses. The attackers appear to have managed to obtain valid authorization for two addresses, Binance 14 and Binance 16, meaning they likely found the private keys used by these two addresses."
Tokyo Bitbank Market Analyst Yuya Hasegawa: "The reported scale of the incident is indeed alarming. But the full picture of losses remains unclear, especially since stablecoin issuers have already frozen a considerable portion of affected assets." "The biggest concern may not be the amount stolen itself, but whether the incident triggers a broader loss of confidence in centralized exchanges, leading to more withdrawals, liquidity disruptions, and forced selling." "However, if Binance can prove customer assets are safe, cover all losses, and quickly resume normal operations, the market impact may be relatively short-lived. Bitcoin's fundamentals have not been directly damaged by this incident."
Hong Kong ViaBTC Chief Analyst Jeff Ko: "I don't think the stolen Bitcoin will bring much selling pressure. Bitcoin addresses cannot be frozen, but every coin is traceable on-chain, and Bitcoin lacks a mixing tool with the depth and liquidity comparable to Tornado Cash. In fact, most of these Bitcoins are likely locked up and may not flow into the market for years. Ethereum is a different story—it's much easier to launder through Tornado Cash, so I expect continued selling pressure and relative weakness in Ethereum. For reference, after the Bybit hack, the market took only a few weeks to recover." "Beyond sentiment, this incident once again highlights the security risks of centralized exchanges and the broader crypto market in the context of AI development. However, the compromised link this time appears to be in how transactions are signed and authorized, rather than smart contract vulnerabilities."
Hong Kong Web3 Association Co-Chairman Joshua Chu: "This incident puts four fronts on the table simultaneously: regulators protecting the public, law enforcement pursuing suspects, civil litigation recovering assets, and ecosystem participants ensuring they don't become escape channels for stolen funds. For crypto participants still resisting cooperation with governments, this contradiction is awkward: when making money, regulation is overreach; when money disappears, the government isn't doing enough."
Comments