--- title: "Binance Confirms Biggest Crypto Market Heist in History: Hackers Steal $6.3 Billion" description: "Binance confirmed the largest crypto market heist in history: hackers stole $6.3 billion in assets after hacking an engineer's laptop. The exchange froze some funds and promised to cover losses." date: 2026-10-31T13:10:47.190Z lang: en url: https://xab.info/en/posts/binance-confirms-crypto-heist-6-3-billion tags: [binance, crypto-hack, cybersecurity, bitcoin, ethereum, stablecoins] author: "Alexander Buran" publisher: "XAB.info" --- # Binance Confirms Biggest Crypto Market Heist in History: Hackers Steal $6.3 Billion ![Trader at multiple monitors checking cryptocurrency exchange data](https://xab.info/media/2026/10/31/binance-hack-6-3-billion-dollars/binance-hack-6-3-billion-dollars-1.webp) ## Key Points - Binance confirmed the theft of approximately $6.3 billion in digital assets, marking the largest heist in crypto market history. - The attack began with the infection of a DevOps engineer's laptop and unauthorized access to an internal service container. - Stolen assets include $1.5 billion in Bitcoin, $900 million in Ethereum, and significant volumes of USDT and USDC stablecoins. - TRM Labs experts link the attack to the North Korean hacker group TraderTraitor. - Binance stated that private keys remain untouched, froze about $3 billion, and promised to cover losses via the SAFU fund and its own reserves. The world's largest cryptocurrency exchange, Binance, has officially confirmed the most unprecedented security incident in its history. According to the company, a cyberattack on the platform resulted in the theft of approximately $6.3 billion in digital assets. International news agencies and industry analysts are calling this event the largest heist in the history of the cryptocurrency and financial industry. Due to this extraordinary emergency, the exchange has temporarily suspended all deposit and withdrawal operations pending a comprehensive security review. ### How the Attack Happened: From an Infected Laptop to Fund Extraction Preliminary investigation data has revealed the method by which cybercriminals infiltrated the company's system. The attack was triggered by the infection of a personal laptop belonging to one of Binance's DevOps engineers. Using this device, the hackers gained unauthorized access to an internal service container and initiated massive fund withdrawal transactions. Blockchain analysts note that the stolen assets include $1.5 billion in Bitcoin, $900 million in Ethereum, and significant amounts of USDT and USDC stablecoins, totaling the reported $6.3 billion. ### The North Korean Trace Cybersecurity experts from TRM Labs have linked the attack to the elite North Korean hacker group TraderTraitor. According to specialists, the nature of the methods used and the transaction structure match tactics previously attributed to this group. Thus, the incident at Binance could become one of the most high-profile state-sponsored cybercrime episodes in the digital asset sector. ### Binance's Response and Client Fund Protection The cryptocurrency exchange's leadership issued an emergency statement to mitigate the aftermath of the incident and reassure users. The company reported that wallet private keys were not compromised and that the main funds of clients remain completely secure. Through emergency coordination with industry partners and major stablecoin issuers—Tether and Circle—approximately $3 billion of the stolen funds were frozen directly on the blockchain. Binance stated that it will fully cover all losses: to pay for the remaining damage, the platform will utilize its internal SAFU insurance reserve fund as well as its own financial reserves. ### A Blow to Trust in the Global Crypto Market Although the exchange stated it will resolve the issue using its own funds, a cyberattack of this scale once again severely tests trust in the global crypto market and the digital asset security system. The incident demonstrates the vulnerability of even the largest platforms, where the entry point for attackers may not be in the wallet infrastructure, but rather in employees' corporate workstations. Restrictions on deposits and withdrawals, introduced until the security audit is complete, underscore the scale of the consequences and force the industry to reconsider approaches to internal cyber hygiene. ## Fact-Check & Sources - [Самое ужасное ограбление в истории: с биржи Binance украдено 6,3 млрд долларов – Zamin.uz, 30.10.2026](https://zamin.uz/ru/tekhnologii/225887-samoe-uzhasnoe-ograblenie-v-istorii-s-birzhi-binance-ukradeno-6-3-mlrd-dollarov.html) - The primary source confirms the $6.3 billion figure, the attack vector via an engineer's laptop and internal container, the breakdown of stolen assets ($1.5B BTC, $900M ETH, USDT/USDC), the freezing of ~$3 billion via Tether and Circle, and the promise of compensation through SAFU. Attribution to the North Korean group is cited as an assessment by TRM Labs. Single source, hence status with caveats. ## FAQ ### How much funds were stolen from Binance? According to the exchange's official confirmation, approximately $6.3 billion worth of digital assets were stolen from the platform. ### How did hackers infiltrate the Binance system? Preliminary investigation data shows that the attack originated from an infected personal laptop belonging to a DevOps engineer, giving attackers access to an internal service container and the ability to initiate withdrawals. ### Are Binance client funds safe? Binance stated that wallet private keys were not compromised, main client funds are safe, about $3 billion of stolen funds have been frozen on the blockchain, and the company will absorb all losses through the SAFU fund and its own reserves.