Binance, the world’s largest cryptocurrency exchange by trading volume, has been hit by what experts are calling the largest crypto theft in history. An estimated $6.36 billion was stolen overnight after a sophisticated security breach, with investigators attributing the attack to a North Korean state-sponsored hacking group.
The breach began at approximately 20:05 UTC, when attackers moved massive sums out of Binance wallets across ten blockchains. According to multiple crypto-tracing firms, most of the funds were transferred within a 20-minute window, making it the fastest and most significant loss the industry has seen to date.
Binance confirmed the security incident and responded by suspending withdrawals on several networks. The company said it has frozen more than $2.5 billion in digital assets to prevent further losses, and is working closely with law enforcement and blockchain partners to trace and recover additional funds. “We are working around the clock and will share a full post-mortem once the investigation is complete. Please rely only on official Binance channels for updates,” Binance stated in its latest communication, assuring users that their funds remain safe.
Stablecoin issuers Tether and Circle also took emergency action, freezing over $2.38 billion in assets linked to the hack. Tether, which issues the world’s largest stablecoin, said it froze nearly $1.57 billion, while Circle, the issuer of USDC, froze more than $800 million. Ripple, another major crypto firm, reportedly froze roughly $200 million, according to Binance co-founder Yi He.
Crypto-tracing firm TRM Labs and Singapore-based Pangolin Intelligence both attributed the theft to an elite North Korean hacking unit, citing robust on- and off-chain intelligence. The group, known as TraderTraitor, has previously been linked to other major crypto heists, including the $1.5 billion Bybit hack in February 2025.
US law enforcement officials and private cybersecurity experts said that if North Korea is confirmed as the culprit, it would not come as a surprise. North Korean hackers have a track record of targeting cryptocurrency exchanges to circumvent international sanctions and generate revenue for the regime.
Binance remains under intense scrutiny as it continues its investigation and works to restore full functionality to its platform. The company has not yet released a full incident report, but said the amount of frozen funds may increase as its teams trace and seize additional assets.
The incident has sent shockwaves through the cryptocurrency industry, raising fresh concerns about the security of digital asset platforms and the growing sophistication of state-backed cybercriminals. The scale of the theft far surpasses previous records, highlighting the vulnerability of even the largest and most established exchanges.
Why it matters
This unprecedented theft from Binance, confirmed by TRM Labs and Pangolin Intelligence, marks a turning point for the cryptocurrency sector. With over $6 billion stolen in minutes, the incident exposes the persistent threat posed by state-sponsored hacking groups, particularly those linked to North Korea, which was previously blamed for the $1.5 billion Bybit hack.
The response by Binance, Tether, Circle, and Ripple—freezing billions in digital assets—demonstrates the industry’s growing capacity for coordinated action, but also underlines the systemic risks facing global crypto markets. As the world’s largest exchange, Binance’s security breach is likely to prompt regulatory scrutiny and calls for stronger safeguards across the sector.
For users, investors, and policymakers, the Binance hack is a stark reminder of the challenges in securing decentralized financial systems. The ongoing investigation and asset recovery efforts will be closely watched, as will any official confirmation of North Korean involvement, which would reinforce concerns about the intersection of cybercrime, geopolitics, and digital finance.
The image accompanying this article is an AI-generated illustrative depiction inspired by the actual scene of the event.
