Attackers leveraged a compromised DevOps engineer's laptop and breached the exchange's hot-wallet signing infrastructure to execute unauthorized withdrawals within twenty minutes. Tether and Circle successfully froze approximately $2.7 billion in stablecoins by blacklisting targeted addresses. However, recovering decentralized holdings remains difficult because networks like Bitcoin and Ethereum lack central authorities capable of freezing wallets. Binance maintained that its private keys were not leaked during the incident.
Key points
Binance pledged to fully cover all user losses and stated there is no evidence that walle…: Binance pledged to fully cover all user losses and stated there is no evidence that wallet private keys were leaked.
Decentralized assets like Ethereum and Bitcoin cannot be unilaterally frozen by central i…: Decentralized assets like Ethereum and Bitcoin cannot be unilaterally frozen by central issuers, complicating asset recovery efforts.
Investigators continue to track 19 wallets where the perpetrator still holds more than 42…: Investigators continue to track 19 wallets where the perpetrator still holds more than 420,000 Ethereum and roughly 18,270 Bitcoin.
Sources checked by our analysis pipeline: 1
The incident also raises an important question for millions of people who hold Bitcoin and other cryptocurrencies on Binance: Could they lose their money because of the hack?
Binance has assured customers that their funds are safe and that it will cover all losses arising from the incident. The exchange has also been working with blockchain companies, cryptocurrency issuers and law enforcement agencies to trace and recover the stolen assets.
Who hacked Binance and stole $6.3 billion?
Blockchain intelligence firm TRM Labs has attributed the attack to TraderTraitor, a hacking unit associated with North Korea. The firm said it reached this conclusion with high confidence after examining on-chain transactions and other intelligence. According to TRM Labs, the attacker moved approximately $6.36 billion out of Binance wallets across 10 different blockchain networks. Most of the transfers took place within around 20 minutes.The group was also linked to the $1.5 billion Bybit hack in February 2025, which was previously considered the biggest cryptocurrency theft on record. Binance has not independently confirmed the identity of the attackers. The exchange is cooperating with investigators…
Strong quarterly earnings reflect solid financial health for the state-run lender amid sustained domestic banking momentum. The public-sector institution managed to maintain healthy operational momentum by expanding its core lending returns alongside overall earnings. These second-quarter financial metrics demonstrate steady profitability gains and resilient balance sheet performance across the institution.
Specialized underwriting markets in Bermuda and Lloyd's are facing heightened scrutiny as exchanges struggle to secure comprehensive coverage against massive cyber heists. Underwriters often enforce strict exclusions around technological failures and negligent asset management, leaving major platforms heavily dependent on internal emergency capital to absorb catastrophic losses.
Blockchain analytics firms have attributed the massive intrusion to the North Korean cybercrime syndicate TraderTraitor, which executed most of the unauthorized withdrawals within a rapid 20-minute window. To protect affected customers, the exchange has mobilized corporate reserves to fully cover the unprecedented deficit while coordinating efforts that have already successfully frozen roughly $3 billion of the compromised assets.