Finance1 min read

Hackers steal $6.3 billion from Binance in biggest crypto heist ever co-CEO responds

By · Via Times of India · Published by Everything Blog

In short

The breach originated when an engineer’s laptop was hacked, enabling attackers to infiltrate an internal service container and siphon assets in about 20 minutes without leaking private keys. Co-CEO Richard Teng confirmed that Binance will cover all user losses using company reserves and the dedicated SAFU fund. Meanwhile, partners have already frozen around $3 billion of the stolen crypto on-chain. Binance has temporarily suspended outbound transfers to overhaul its platform security while leaving inbound deposits fully functional.

Key points

  • Binance plans to cover all customer financial losses through company reserves alongside i…: Binance plans to cover all customer financial losses through company reserves alongside its dedicated SAFU fund.
  • The exchange temporarily halted withdrawals to overhaul security systems, while normal de…: The exchange temporarily halted withdrawals to overhaul security systems, while normal deposit operations remain fully functional.
  • Investigators confirmed there is currently no evidence showing that private wallet keys w…: Investigators confirmed there is currently no evidence showing that private wallet keys were leaked during the complex intrusion.

Sources checked by our analysis pipeline: 1

Hackers have stolen approximately $6.3 billion from Binance, the world’s largest cryptocurrency exchange, in what industry analysts are calling the largest cyber heist in digital asset history. The incident has again highlighted concerns regarding cybersecurity and the systemic risks of holding funds on centralised trading platforms. Blockchain intelligence firms TRM Labs and Chainalysis reported that the threat actors behind the coordinated attack originated from North Korea. According to TRM Labs, the attackers targeted Binance wallets across 10 distinct blockchains, siphoning the vast majority of the funds within an estimated 20-minute window.

According to news agency Reuters, TRM Labs stated with “high confidence” that key characteristics of the intrusion closely mirror previous North Korean-sponsored operations, including a major 2025 cyberattack against cryptocurrency exchange Bybit that was formally tied to Pyongyang by the US Federal Bureau of Investigation (FBI).

Compromised laptop suspected as entry point

Reuters reported that preliminary internal inquiries by Binance suggest the breach began through a single compromised endpoint.

According to the exchange, unauthorised access was gained after an engineer’s laptop was hacked, allowing the attacker to infiltrate an…

Finance