The world’s largest cryptocurrency exchange, Binance, has suffered what investigators and the company describe as the largest crypto theft in history.
Reports reveal that approximately $6.3 billion in digital assets was drained from multiple hot wallets across several blockchains in a coordinated attack that unfolded over a few hours.
Binance founder Changpeng Zhao, known as CZ, was among the first high-profile voices to publicly address the incident. In a post on X, he wrote, “User funds are safe! It does look like a hack on Binance”.
Register for the next Tekedia Mini-MBA.
Register for Tekedia AI in Business Masterclass.
Join Tekedia Capital Syndicate and co-invest in great global startups.
He noted that he no longer manages day-to-day operations at the exchange, but as a major shareholder, expected all user funds to be fully covered.
The exchange later confirmed the scale of the impact at around $6.3 billion and stated that roughly $3 billion in affected assets had already been frozen through cooperation with blockchain partners, including major stablecoin issuers such as Tether and Circle.
Binance pledged to cover every loss using its Secure Asset Fund for Users (SAFU) and company resources, repeatedly assuring customers that their funds remain safe.
Deposits and withdrawals were temporarily suspended while security checks continued, with the company working to restore normal operations.
Initial findings from Binance pointed to a compromised DevOps engineer’s laptop. The company said this access allowed an attacker to reach a service container and submit unauthorized withdrawal transactions.
Officials emphasized that there was no evidence of any wallet private key leak and described the intrusion as more complex than a single-point failure, with subsequent investigation uncovering additional points of breach.
A full technical post-mortem is expected once the facts are fully verified. Blockchain analytics firms including TRM Labs, Chainalysis, and Elliptic have attributed the attack with high confidence to the North Korean hacking unit known as TraderTraitor, linked to the broader Lazarus Group.
The operation moved funds across multiple chains in a short window and bore similarities to earlier high-profile thefts attributed to the same actors, including the $1.5 billion Bybit incident in 2025. The current heist is estimated at more than four times that previous record.
Markets reacted quickly to the news, with bitcoin and other major cryptocurrencies declining as traders assessed the potential impact.
Binance hack comes as the cryptocurrency industry is experiencing an increasingly worrying wave of cyberattacks, with hackers exploiting vulnerabilities in blockchain infrastructure, cryptocurrency exchanges, decentralised finance (DeFi) protocols and third-party security systems to steal billions of dollars in digital assets.
What was once considered a relatively specialised form of cybercrime has evolved into a sophisticated operation involving organised hacking groups, state-sponsored attackers and increasingly advanced artificial intelligence (AI) tools.
The growing frequency and financial scale of these attacks are raising questions about the security of digital assets and the ability of cryptocurrency platforms to protect investors’ funds.
The latest incidents suggest that the problem is becoming more difficult to contain. According to a report by blockchain security firm Hacken, cryptocurrency-related hacks resulted in approximately $1.18 billion in losses across 107 incidents in the third quarter of 2026.
Around $906 million, representing 77% of the losses, was linked to compromised suppliers, developer tools, infrastructure components, and other vulnerabilities outside conventional security reviews.
Another development attracting attention is the growing relationship between artificial intelligence and cryptocurrency-related cybercrime.
AI-powered tools are making it easier for malicious actors to identify software vulnerabilities, automate certain hacking processes, develop convincing phishing campaigns, and exploit weaknesses in digital infrastructure.
Meanwhile, despite the unprecedented scale, Binance’s rapid freezes, public commitment to full reimbursement, and ongoing collaboration with law enforcement and industry partners have been central to efforts aimed at limiting lasting damage and restoring confidence.
Outlook
The Binance incident could mark a turning point in how cryptocurrency exchanges, investors, and regulators approach digital asset security. With approximately $6.3 billion affected, the attack has demonstrated that even the world’s largest cryptocurrency platforms are not immune to sophisticated cyber threats.
It is also likely to intensify pressure on exchanges to strengthen their internal security infrastructure, improve employee access controls and conduct more rigorous assessments of third-party service providers.
Going forward, cryptocurrency companies may be forced to move beyond conventional smart contract audits and adopt more comprehensive security frameworks covering employee devices, developer environments, wallet authorisation systems and transaction monitoring.
The growing sophistication of AI-powered cyberattacks could further accelerate investments in automated threat detection and real-time security monitoring.
The incident could also strengthen regulatory calls for stricter custody requirements, mandatory security disclosures, independent audits, and adequate insurance or reserve arrangements to protect customer assets.