Binance, the world's largest cryptocurrency exchange, has confirmed that $6.3bn was stolen in a 'complex' hack, with the company freezing around half of the stolen funds. The hack, believed to be a record heist, was initially thought to have started with a compromised engineer's laptop, but further investigation revealed a wider breach. Binance co-CEO Richard Teng stated that the attack was not carried out by one person and that a self-destruct mechanism was used to destroy tooling and traces.
The hack has been linked to a North Korean hacking unit, with several analytics firms, including TRM Labs and Chainalysis, pointing to similarities with earlier North Korean-linked incidents. The US Secret Service is working to identify, freeze, trace, and recover stolen funds, and has stated that it will identify the cyber criminals responsible and bring them to justice. Binance is also working with the FBI to investigate the hack.
Binance has assured its users that their money is safe and that the company will cover every loss. The company had initially suspended all deposits and withdrawals but later stated that deposits remain unaffected. With over 300 million registered users worldwide and $160bn in assets under its custody, Binance's ability to cover the enormous financial loss has raised concerns among users and the crypto industry.
The hack has sparked fears of a potential collapse similar to FTX, which led to huge losses for customers and the industry in 2022. However, Binance has repeatedly stated that customer funds will be covered and that the firm is strong enough to weather the storm. The company has been subject to regulatory scrutiny around the world, and this incident may lead to further scrutiny.
North Korea has been accused of using cybercrime as a way to bring money into the impoverished country, which is under heavy international sanctions. Experts point to the infamous Lazarus Group, also known as TraderTraitor, as a cluster of cybercriminals accused of working directly for the regime. North Korea has denied these allegations, but evidence from cryptocurrency flow analysis and insider interviews from defectors suggests otherwise.
The crypto industry has been beset by enormous losses from hackers in the last five years, with nearly all cases blamed on hackers from North Korea. Binance's incident is the latest in a series of high-profile hacks, including a $1.5bn heist on the Bybit exchange in 2025. The incident highlights the need for increased security measures in the crypto industry.
Binance, founded in China in 2017, allows users to trade digital assets and has become one of the largest cryptocurrency exchanges in the world. The company's efforts to recover the stolen funds and its commitment to covering customer losses will be closely watched by users and regulators alike. The incident may also lead to increased regulatory scrutiny of the crypto industry as a whole.
Key points
- Binance has frozen around half of the $6.3bn stolen in the hack, with $3bn of stolen digital assets secured.
- The hack has been linked to a North Korean hacking unit, with several analytics firms pointing to similarities with earlier North Korean-linked incidents.
- Binance has assured its users that their money is safe and that the company will cover every loss, but concerns remain about the company's ability to cover the enormous financial loss.
