30-10-2026
Binance, the world’s largest cryptocurrency exchange, has suffered what experts describe as the largest hack in cryptocurrency history. Crypto watchers report that attackers attempted to steal as much as $US6.3 billion ($8.9 billion), although the full impact remains uncertain and about $US3 billion ($4.2 billion) has reportedly been frozen. Binance said attackers may have compromised a staff member’s laptop but that it had found no evidence that wallet private keys were exposed. The company said users’ funds were safe, promised to cover all losses, and temporarily suspended deposits and withdrawals while it carried out security checks and an investigation.
The funds appear to have been moved from several internet-connected “hot wallets” used for everyday trading. Around 30 or 40 tokens were affected, including Bitcoin, Etherium and stablecoins such as USDT and USDC. Experts noted that attempts to steal funds do not necessarily mean all of them will be successfully taken: stablecoin issuers can freeze some assets, and hackers may encounter difficulties cashing out through exchanges.
The incident is substantially larger than the previous record-setting theft cited in the article: the approximately $US1.5 billion taken from exchange ByBit in February 2025 by the North Korean-linked Lazarus Group. Investigators may consider Lazarus in the Binance case, though responsibility has not been established. Experts characterize the attack as sophisticated and note that cybersecurity incidents are a recurring problem in the cryptocurrency industry. The article also raises the possibility that recent advances in artificial intelligence could be improving hackers’ capabilities, while stressing that it is not known whether AI enabled this particular attack.
Entities: Binance, Ange Lavoipierre, Nicholas Turnbull, Crypto Consulting Australia, Chris Berg • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance says hackers stole approximately $6.3bn from its wallets in what would be the largest cryptocurrency theft on record. The attack took place late Thursday, with blockchain analysis firms TRM Labs and Chainalysis reporting that most of the funds were moved across 10 blockchains in about 20 minutes. Binance suspended deposits and withdrawals, said users’ funds were safe, and pledged to cover losses. About $3bn has reportedly been frozen, including more than $2.3bn by stablecoin issuers Tether and Circle; the fate of the remaining funds is unclear, and Binance warned the estimated total could rise.
TRM Labs and Chainalysis attribute the attack to North Korean hackers. TRM said it had high confidence that the group TraderTraitor, linked to North Korea’s Lazarus Group, was responsible. The firms say the attackers directed Binance wallets to transfer funds into wallets they controlled, resembling the 2025 Bybit hack, which the FBI also attributed to the same unit. Binance has not publicly assigned responsibility and initially suggested an engineer’s laptop may have been compromised. It later reported additional breach points, while saying it found no evidence that wallet private keys had leaked. A former Mt Gox executive suggested attackers may nevertheless have accessed keys for at least two wallets.
Experts say crypto theft may provide North Korea with foreign currency that can support its economy and weapons programme. TRM’s policy chief described the incident as a global security issue as well as a financial crime. Markets fell after the news: Bitcoin reached a six-week low, Ether dropped more than 3 percent, and Coinbase shares fell 4.8 percent, although markets later steadied. The article notes that crypto prices were already pressured by higher US interest rates and weaker exchange-traded fund demand.
The incident highlights risks associated with large centralised exchanges, which custody users’ assets and can become high-value targets. Insurance coverage for stolen cryptocurrency is limited, and thefts are frequent: TRM counted $2.87bn stolen in nearly 150 attacks in 2025. Binance said it was coordinating with law enforcement and expected to resume withdrawals within 45 hours. The stolen amount exceeds six times the value of Binance’s user protection emergency fund, though the company says it will also cover losses.
Entities: Binance, Changpeng Zhao, TRM Labs, Chainalysis, TraderTraitor • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance says it has secured about $3bn of the $6.3bn in digital assets stolen in what may be the largest cryptocurrency heist on record. The exchange initially suspected that an engineer’s compromised laptop enabled unauthorized withdrawals, but co-CEO Richard Teng later said investigators found additional points of breach. He said the attackers used a self-destruct mechanism to erase tools and traces, complicating the investigation. Several analytics firms have linked the attack to North Korean hackers, though attribution remains under investigation.
The US Secret Service says it is working to identify, freeze, trace and recover the stolen funds, and Binance says it is cooperating with the FBI. Although Binance’s US-facing exchange was reportedly unaffected, US authorities may still have jurisdiction, and recovering assets is likely to involve international law enforcement. Some assets connected to the incident include dollar-pegged stablecoins Tether and Circle. Binance initially suspended deposits and withdrawals, then said deposits remained unaffected. The company has also said it set aside more than $6.34bn of its own funds and is buying crypto tokens to cover the loss, assuring customers that their money is safe.
The breach unsettled crypto markets: Bitcoin fell 5%, Coinbase shares dropped 12% amid weaker-than-expected revenue, and Robinhood fell 7.8%. The article also highlights concerns about whether Binance can meet its promises. Some observers compare its assurances to those made before FTX collapsed in 2022, while legal experts caution that customers’ ability to recover losses may depend on their contracts and could require litigation. Analysts cite similarities to previous North Korean-linked attacks, including the 2025 Bybit heist. North Korea denies involvement in cybercrime, but investigators and experts point to cryptocurrency flows and other evidence suggesting the regime uses hacking to raise funds amid sanctions and limited industry.
Entities: Binance, Richard Teng, US Secret Service, Federal Bureau of Investigation (FBI), North Korea • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance, the world’s largest cryptocurrency exchange, says $6.3bn (£4.7bn) in digital assets were affected by a security incident described as the largest hack in history. The company says about half of the assets have been frozen with help from other platforms and that it will cover all losses. Preliminary checks suggest an engineer’s compromised laptop may have enabled an attacker to make unauthorised withdrawals. Binance has disabled withdrawals while it checks that its systems are secure.
Two cryptocurrency analytics firms, TRM Labs and Chainalysis, have linked the attack to TraderTraitor, a North Korean hacking unit. They cite similarities to earlier incidents, including the $1.5bn Bybit exchange hack in 2025. Experts said the scale of the theft is unprecedented and that the attacker still holds a substantial amount, so tracing and recovering the funds will take time. Binance said it is working with law enforcement to identify and prosecute those responsible, but did not directly address the suspected North Korean connection.
Tether and Circle reported freezing about $2.4bn in assets potentially connected to the incident. World Liberty Financial also said it had worked with partners to freeze stolen funds, while Coinbase said it was unaffected and monitoring developments. The incident concerns Binance.com; Binance.US said its platform was not affected.
Binance, founded in China in 2017, has more than 300 million registered users and reported over $160bn in assets under custody in 2024. The exchange has faced regulatory scrutiny around the world. Bitcoin fell by more than 4% after alerts about the incident, and Ethereum and Solana also dropped sharply.
Entities: Binance, Binance.com, Binance.US, TraderTraitor, North Korea • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance says a complex cyberattack moved approximately $6.36 billion US from its wallets across 10 blockchains, potentially making it the largest cryptocurrency theft on record. The exchange said deposits were unaffected, but suspended withdrawals and expected them to resume within one or two days. Binance reported that it was working with blockchain partners to freeze affected assets, revising its estimate from about $3 billion to $5 billion US, and said it would cover all losses and recover assets for users.
Blockchain intelligence firms TRM Labs and Chainalysis assessed that North Korea’s TraderTraitor hacking group was likely responsible. TRM said the attacker moved most of the funds in about 20 minutes and cited similarities to earlier North Korea-linked thefts, including the $1.5-billion Bybit hack. Binance said it was cooperating with law enforcement to identify those responsible. The article describes cryptocurrency theft as one source of foreign currency for North Korea, which faces sanctions and economic difficulties; South Korea’s spy agency previously estimated that North Korean hackers stole $1.1 billion US in crypto and other virtual assets over five years.
The incident also prompted questions about Binance’s security controls. Cybersecurity executive Kok Tin Gan suggested a single signature may have given the attacker broad access to a hot wallet. Binance said it had found no evidence that a wallet private key was leaked and would provide further technical details after its investigation. The story also notes Binance founder Changpeng Zhao’s past legal case and his comments that user funds should be covered, while clarifying that he no longer manages the exchange.
Entities: Binance, TraderTraitor, North Korea (DPRK), TRM Labs, Chainalysis • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Blockchain intelligence firms say North Korean hackers were likely responsible for an attack that removed approximately $6.3 billion from Binance, the world’s largest cryptocurrency exchange. TRM Labs attributed the incident to TraderTraitor, a North Korean hacking unit, saying the attackers moved about $6.36 billion from Binance wallets across ten blockchains, mostly within roughly 20 minutes. Chainalysis CEO Jonathan Levin also said the attack was likely carried out by TraderTraitor. Analysts linked the suspected perpetrators to Lazarus Group, a broader North Korean cyber unit associated with attacks on institutions in multiple sectors.
Binance said deposits were unaffected but temporarily suspended withdrawals, which it expected to restore within a day or two. The company said it worked with blockchain partners to freeze about $3 billion in affected assets and would cover customer losses. Its investigation initially pointed to a possibly compromised laptop, then found additional points of breach. Binance said it had found no evidence that wallet private keys had been leaked and promised further technical details after its investigation.
The suspected group has previously been linked to major cryptocurrency thefts, including the 2025 Bybit attack, which the FBI said caused a $1.5 billion loss. The article places such cybercrime in the context of North Korea’s need for foreign currency amid sanctions and economic pressures, and its nuclear program. South Korea’s spy agency estimated that North Korean hackers stole 1.5 trillion won in cryptocurrency and other virtual assets over five years through 2022.
The incident also raises questions about Binance’s security controls. NyxLab CEO Kok Tin Gan suggested that a single approval signature may have given an attacker lasting, full access to a hot wallet. The article notes Binance founder Changpeng Zhao’s past legal case and departure as CEO, as well as his statement that user funds were safe and should be fully covered.
Entities: Binance, TraderTraitor, Lazarus Group, North Korea, TRM Labs • Tone: analytical • Sentiment: neutral • Intent: inform
30-10-2026
A record-breaking security breach at Binance, the world’s largest cryptocurrency exchange, affected about $6.3 billion in client assets. Binance says hackers accessed its withdrawal systems and made unauthorized transfers from crypto wallets, though the company has found no evidence that wallet private keys were leaked. The exchange says it will cover customer losses, has frozen roughly $3 billion of affected assets, and has set aside more than $6.3 billion of its own funds; its existing SAFU emergency fund is about $1 billion. The incident highlights that customers’ recovery prospects after an exchange hack depend on whether assets can be frozen or recovered and on the exchange’s insurance, reserves, and financial resources. The article compares Binance with earlier cases, including Bybit and Bitget hacks and Cryptopia’s lengthy liquidation after a 2019 theft. It notes that a promise to reimburse customers is only as reliable as the resources supporting it.
For people choosing an exchange, the article recommends researching complaints and regulation, checking U.S. FinCEN registration while remembering that registration is not an endorsement, and reading user agreements, custody arrangements, and risk disclosures. Investors should examine who owns assets, whether customer holdings are kept separate from company funds, whether the exchange may lend or use the crypto, liability limits, and the details of any insurance. Contract language is not a guarantee: FTX misappropriated customer funds despite terms stating that the assets belonged to customers.
The article also explains self-custody, in which users control their private keys and recovery phrases rather than relying on an exchange. This offers greater direct control but makes users responsible for safeguarding access, with no help desk if a recovery phrase is lost. One suggested compromise is to keep only actively traded assets on an exchange and self-custody longer-term holdings, provided users know how to store and recover them safely.
Entities: Binance, SAFU emergency fund, Martin Mulyadi, Shenandoah University, Securities and Exchange Commission • Tone: analytical • Sentiment: neutral • Intent: inform
30-10-2026
Binance said a security incident affected approximately $6.3 billion in client assets, making it the largest cryptocurrency hack on record. Around $3 billion had been frozen on-chain, and the exchange said it had begun recovering affected assets. Binance pledged to cover losses through its Secure Asset Fund for Users (SAFU), established in 2018 to protect clients in the event of a hack.
The attack’s method and perpetrators remained unconfirmed. Binance initially suggested that an engineer’s compromised laptop might have enabled unauthorized withdrawals, but Co-CEO Richard Teng later described a more complex process. The FBI said it was coordinating with public and private partners to assess the incident and investigate. Blockchain intelligence firms TRM Labs and Chainalysis said activity surrounding the hack was consistent with North Korean-linked cybercrime, with Chainalysis identifying the TraderTraitor group as a possible culprit. Those assessments were based on similarities to previous attacks and observed on-chain activity, rather than a confirmed attribution.
Binance temporarily suspended withdrawals, revoked affected address authorizations, and began overhauling withdrawal security. Deposits continued to operate normally, and the exchange said it expected to resume withdrawals within 48 hours. Binance reported no evidence that wallet private keys had been leaked and said it would publish a technical post-mortem after verifying the facts. It was also working with law enforcement and blockchain intelligence firms to trace and recover funds.
Other crypto companies took steps to freeze funds potentially connected to the incident. Circle CEO Jeremy Allaire said Circle had frozen more than $800 million in USDC; Tether CEO Paolo Ardoino said Tether had frozen more than $1.5 billion in potentially related USDT; and Ripple said it was freezing affected funds held in RLUSD. The breach weighed on markets: bitcoin fell more than 4% to $77,994.96, while Circle shares dropped about 5% in after-hours trading. The article places the incident among a series of major crypto thefts, including the 2025 Bybit hack and a more recent Bitget theft.
Entities: Binance, Richard Teng, Yi He, Secure Asset Fund for Users (SAFU), Federal Bureau of Investigation (FBI) • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance says an attack affecting an estimated $6.3 billion in cryptocurrency will not leave customers bearing the losses, and it has temporarily suspended deposits and withdrawals while investigating. The exchange reports that about $3 billion in assets have been frozen. Blockchain intelligence firms TRM Labs and Chainalysis attribute the attack with high confidence to TraderTraitor, a North Korean state-sponsored hacking group previously linked by the FBI to the $1.5 billion Bybit hack in 2025. TRM Labs estimates that about $6.36 billion was moved from Binance wallets across 10 blockchains, mostly within roughly 20 minutes, after preparations that began at least 36 hours earlier.
Entities: Binance, TraderTraitor, North Korea, TRM Labs, Chainalysis • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
More than $6 billion in cryptocurrency was stolen from Binance, and crypto firms and law enforcement are racing to recover the funds before the hackers convert them into cash or make them harder to trace. Binance has pledged to cover user losses through its Secure Asset Fund for Users. Blockchain-intelligence firms TRM Labs and Chainalysis attribute the attack to TraderTraitor, a North Korean state-backed hacking group with a history of crypto cyberattacks.
Stablecoin issuers Circle and Tether froze some funds after the hack. Binance estimates that about $3 billion worth of cryptocurrency has been frozen. In principle, issuers could destroy the frozen tokens and issue replacements to be held by a government entity and returned to Binance. But investigators say the hackers acted quickly: they sold USDT to market makers and borrowed ether against the stablecoin. Ether is more difficult to freeze, and the lenders may be left holding the stolen stablecoins.
The roughly $3 billion still at large is being moved through techniques intended to confuse investigators. Although blockchains provide public transaction records that forensic firms can follow, Chainalysis has observed an unusual pattern of automated transfers among wallets, including repeated circulation of funds through addresses used earlier. Investigators say funds swapped into bitcoin or ether cannot be frozen in the same way as stablecoins. The hackers have also moved funds among Tron addresses. Firms say automated monitoring and improved tracing are helping them keep up, but the process remains a cat-and-mouse game.
Investigators also face professional money-laundering networks, including organizations that buy stolen cryptocurrency over the counter for a fee and arrange its conversion into fiat currency. As the funds move off-chain and pass through these networks, opportunities for authorities to seize and recover them diminish. The article’s central warning is that recovery depends on tracing and intervening before the stolen cryptocurrency is converted and laundered.
Entities: Binance, TraderTraitor, North Korea, TRM Labs, Chainalysis • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance cofounder and former CEO Changpeng Zhao asked Elon Musk to stop mocking Binance after the cryptocurrency exchange suffered a reported $6.3 billion hack late Thursday. Musk, the CEO of SpaceX and Tesla, posted a series of laughing and grimacing emojis on X after news of the attack emerged. Zhao responded by asking Musk to show support, noting that Binance holds SpaceX shares worth more than $1 billion. According to Zhao, the stake came from Binance’s $500 million investment in Musk’s Twitter takeover; it represents only a small portion of SpaceX’s reported $2 trillion valuation.
The exchange between the two executives follows earlier public disagreements. In November 2021, Binance suspended Dogecoin withdrawals because of a wallet glitch. Musk criticized the move as “shady,” and Zhao countered by pointing to a Tesla recall involving almost 12,000 U.S. vehicles over software glitches and hardware issues.
The article also describes Binance’s response to the current incident. The exchange froze all withdrawals and deposits after the hack, which investigators suspect was carried out by TraderTraitor, a North Korean state-sponsored hacking unit. Deposits have since been restored, and approximately $3 billion in cryptocurrency assets have been frozen so far. The article notes a correction to an earlier headline: Zhao asked Musk to “show some support,” and the previous headline had mischaracterized the exchange.
Entities: Changpeng Zhao, Elon Musk, Binance, SpaceX, Tesla • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
CNBC’s Morning Squawk reports a difficult session ahead for technology stocks, with Nasdaq futures under pressure after disappointing results and guidance from Amazon and Intel. Amazon missed both earnings-per-share and revenue expectations, despite AWS posting its fastest growth in five years. Its shares fell more than 7% premarket. Analysts cited high capital spending and a challenging consumer environment as concerns, while Bill Baruch said the stock retained technical support. Intel shares plunged about 25% after the company forecast continued weakness in the PC market; CFO David Zisner said the slowdown could last through at least the first half of next year. Intel had gained roughly 150% earlier in the year before falling about 23% in October amid worries about AI investment.
The newsletter also covers a reported $6.3 billion security incident at Binance, described as the largest crypto hack ever. Co-CEO Richard Teng said an initial investigation traced the incident to a compromised DevOps engineer’s laptop and said Binance would cover losses. Binance, Circle, and Tether froze assets connected to the hack. Responsibility has not been confirmed, though speculation has focused on state-backed actors and North Korea. Bitcoin dropped below $78,000. Commentators urged regulators not to respond with overly restrictive policy and said the investigation should focus on the perpetrators rather than victims.
Other market moves include a more than 20% decline in Reddit after its CEO warned daily unique visitors could fall by a double-digit amount in the fourth quarter, while Alphabet was flat premarket after a sharp loss the previous day. Raymond James’ Matt Orton characterized the tech sell-off as a potential buying opportunity rather than a sector-wide reckoning. Energy earnings are also in focus: Chevron beat third-quarter forecasts, while ExxonMobil was expected to report a substantial rise in earnings per share. Finally, President Donald Trump and Vice President JD Vance canceled several planned campaign appearances ahead of the midterm elections, with Trump switching to phone-based rallies and the Republican National Committee promising outreach across at least 19 states.
Entities: Nasdaq, Amazon, Intel, Binance, Richard Teng • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance, the world’s largest cryptocurrency trading platform by daily volume, said Thursday that it was investigating a suspected security breach with an estimated impact of $6.3 billion. Analysts suggested it could be the largest crypto heist to date. Former CEO and major shareholder Changpeng Zhao said the incident appeared to be a hack.
Binance said it had worked to freeze affected assets and had located about $3 billion, without explaining what had happened to the remaining $3.3 billion. Co-founder Yi He said Binance would cover hacking losses. The company assured users that their funds were safe and said its security teams were urgently reviewing the incident before issuing verified updates.
In its initial account, Binance said a DevOps engineer’s laptop may have been compromised, allowing an attacker into a service container and enabling unauthorized withdrawal transactions. The company said it had found no evidence that wallet private keys had leaked. Trading was suspended on certain products while efforts to freeze assets continued. Tether CEO Paolo Ardoino said his company froze about $1.6 billion in USDT, while Circle CEO Jeremy Allaire reported freezing around $800 million in USDC.
The news pushed Bitcoin down 3.2% on Thursday evening, below $79,000. Zhao, who founded Binance in 2017 and stepped down as CEO after pleading guilty in 2023 to failing to prevent money laundering on the platform, said he expected users’ funds to be fully covered. The article also notes that US President Donald Trump pardoned Zhao in 2025 and that Zhao and Binance have supported cryptocurrency ventures involving Trump and his family.
Entities: Binance, Changpeng Zhao, Yi He, Tether, Paolo Ardoino • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Blockchain analysts say a North Korean hacking unit likely stole approximately $6.36 billion from Binance, the world’s largest cryptocurrency exchange. The funds were moved from Binance wallets across 10 blockchains, mostly within about 20 minutes. TRM, a US-based blockchain intelligence firm, attributed the attack with high confidence to TraderTraitor, a group it describes as an elite North Korean unit. Analysts cited similarities to earlier North Korea-linked attacks, including the February 2025 Bybit hack, from which $1.5 billion was stolen. The FBI attributed that incident to North Korea and TraderTraitor. Chainalysis chief executive Jonathan Levin also said TraderTraitor was a likely culprit. Experts say cryptocurrency theft helps North Korea obtain foreign currency and fund its nuclear program despite sanctions.
Binance has not confirmed who was responsible and says it is working with law enforcement. The exchange temporarily suspended deposits and withdrawals while conducting security checks, and reported that about $3 billion of affected assets had been frozen. It did not explain what happened to the remaining $3.3 billion. Co-founder Yi He said Binance would cover hacking losses, while a spokesperson said user funds were safe. Binance’s initial investigation suggested the attacker compromised a software infrastructure engineer’s laptop, accessed an internal service and submitted unauthorized withdrawals. The company said it had found no evidence that wallet private keys had been exposed.
Other cryptocurrency firms also froze assets: Tether froze about $1.6 billion in USDT and Circle froze roughly $800 million in USDC, according to their chief executives. Bitcoin fell 3.2% on Thursday evening, dropping below $79,000 after news of the possible hack. The article also notes that Binance founder and former CEO Changpeng Zhao stepped down after pleading guilty in 2023 to failing to prevent money laundering on the platform. He was pardoned by US President Donald Trump in 2025, and Zhao and Binance have supported cryptocurrency ventures associated with Trump and his family.
Entities: Binance, TraderTraitor, North Korea, TRM, Chainalysis • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance, the world’s largest cryptocurrency exchange by daily trading volume, reported a major cyberattack affecting an estimated $6.3 billion (€5.5 billion) in funds. The company said about $3 billion had been frozen on-chain, and that it was working with law enforcement, blockchain partners, issuers and intelligence firms to trace and freeze more assets. The estimated impact is more than four times the $1.5 billion stolen from the Bybit platform in an attack attributed to North Korea-affiliated hackers the previous year.
Binance initially posted messages on X that appeared contradictory: it said users’ funds were safe while also promising to cover losses. It later temporarily suspended deposits and withdrawals as it carried out security checks. Its preliminary investigation pointed to a compromised laptop belonging to a DevOps engineer, which may have enabled an attacker to access a service container and make unauthorised withdrawals. Binance said it had found no evidence that wallet private keys were leaked and promised a technical post-mortem after the investigation was complete.
Crypto-industry leaders reported freezing additional assets potentially linked to the incident. Tether CEO Paolo Ardoino said his company had frozen around $1.6 billion in USDT, while Circle CEO Jeremy Allaire said Circle had frozen more than $800 million in USDC. Both are stablecoins designed to track the US dollar. The US Department of Justice and FBI had not immediately commented.
Cryptocurrency prices fell after news of the attack, then partly recovered. Bitcoin and Ethereum were down around 0.8% after earlier drops of nearly 5% and 6%; Binance’s BNB token rose 2.7% after falling almost 10%. The report also notes broader concerns that advances in artificial intelligence could threaten cryptography and IT security. Binance’s estimate and the investigation remained provisional.
Entities: Binance, Changpeng Zhao, Paolo Ardoino, Jeremy Allaire, Tether • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Binance reported that a security breach affected an estimated $6.3 billion in assets, potentially making it the largest cryptocurrency heist on record. The exchange said it had recovered or frozen about $3 billion, but did not clarify the status of the remaining $3.3 billion. Co-founder Yi He said Binance would cover all hacking losses. An initial investigation suggested an engineer’s compromised laptop may have enabled an attacker to access a system and make unauthorized withdrawals.
The news prompted declines in cryptocurrency and related stocks. Bitcoin fell more than 3% to a six-week low, ether dropped more than 3% to a two-month low, and Binance’s BNB token was down 5%. Coinbase shares and bitcoin-focused company Strategy also fell. Analysts warned that the breach could weaken confidence in digital assets and lead investors to reassess the security, solvency, liquidity, and counterparty risks of holding funds on centralized exchanges. Binance said user funds remained safe and temporarily suspended deposits and withdrawals while it secured its wallet infrastructure and investigated with law enforcement and industry partners.
Several firms reported freezing assets connected to the incident. Tether said it froze nearly $1.57 billion, Circle more than $800 million, and Ripple roughly $200 million. World Liberty Financial also said it helped freeze funds with custodian BitGo. Binance operates a reserve fund intended to protect users after security breaches, but industry observers said increasingly capable AI could make hacks harder to prevent and predicted that users might leave smaller exchanges.
The incident comes amid a series of cryptocurrency thefts: TRM Labs researchers attributed $2.9 billion in stolen crypto to nearly 150 attacks last year, and Bitget reported a roughly $350 million theft in September. Binance.US and Coinbase said they were unaffected. Separately, prediction market Polymarket briefly halted trading after a third-party security incident and said it would reimburse affected traders.
Entities: Binance, Yi He, Aravind Srinivasan, Tim Sun, Bernardo Brites • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Hackers stole approximately $6.3 billion in cryptocurrency from wallets used by Binance, the world’s largest cryptocurrency exchange, in what the article describes as a record-breaking digital-asset theft. Blockchain analysis indicates that attackers compromised Binance’s transaction-signing infrastructure, enabling them to authorize transfers from affected wallets. The bulk of the theft took place in about 20 minutes on Thursday, shortly after 2000 GMT. Binance said its investigation found more than one point of breach after initially suspecting a compromised laptop. Co-CEO Richard Teng said losses would be covered by the company’s $1 billion Secure Asset Fund for Users and company resources.
The attackers quickly tried to move the assets beyond the reach of Binance’s counterparties and cryptocurrency issuers. Issuers including Tether, Circle, Ripple and World Liberty Financial froze roughly half of the stolen assets, most of which were stablecoins. Freezing limits the attackers’ ability to convert those funds, although it does not guarantee that they will be returned to Binance. Bitcoin and ether cannot be frozen by an issuer; they may be stopped only if they reach a cooperative exchange or broker, or if law enforcement obtains the relevant private keys. Analysts say attackers may attempt to launder the remaining assets through mixing, lesser-known coins or exchanges.
Several US blockchain analysis firms said the attack resembles operations attributed to North Korean hackers. TRM Labs expressed high confidence that the group behind the Binance theft was also responsible for an earlier Bybit attack that the FBI attributed to North Korea. Binance said it had not identified the attackers, and North Korea routinely denies involvement in cyberattacks and cryptocurrency thefts. Chainalysis also reported that funds from a separate Bitget attack were being mixed with proceeds from the Binance breach.
The theft adds to a series of major crypto breaches and has shaken confidence in the sector. TRM Labs counted $2.9 billion stolen across nearly 150 incidents last year. Cryptocurrencies fell on Friday, while the total value of stablecoins declined, suggesting investors were withdrawing money from digital assets.
Entities: Binance, Richard Teng, Joshua Chu, Patrick Tan, Bernardo Brites • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Blockchain intelligence firms say North Korean hackers were likely responsible for an attack that affected approximately $6.3 billion in assets connected to Binance, the world’s largest cryptocurrency exchange. TRM attributed the incident to TraderTraitor, which it identifies as a North Korean hacking unit, and said the attacker moved about $6.36 billion from Binance wallets across ten blockchains, mostly within roughly 20 minutes. If confirmed, TRM said, it would be the largest cryptocurrency theft on record. Chainalysis also assessed that the attack was likely carried out by TraderTraitor. The firms point to similarities with earlier North Korea-linked attacks, including the $1.5 billion Bybit hack, for which the FBI blamed North Korea and TraderTraitor.
Binance said it had worked with blockchain partners to freeze about $3 billion in affected assets and was beginning to recover assets for users. The company said deposits were unaffected, withdrawals were temporarily suspended and expected to resume within a day or two, and it would cover all losses. Binance initially suspected a compromised laptop but later found additional points of breach. It denied finding evidence that wallet private keys had leaked and said it would release technical details after its investigation.
The exchange said it was working with law enforcement to identify those responsible. Former CEO and founder Changpeng Zhao also said user funds were safe and that he expected them to be fully covered. A cybersecurity executive raised concerns that inadequate approval controls may have allowed an attacker to gain lasting, unrestricted access to a Binance hot wallet. The article places the incident in the broader context of North Korea’s use of cryptocurrency theft and other cybercrime to obtain foreign currency, support its economy, and fund its nuclear program amid sanctions.
Entities: Binance, North Korea (DPRK), TraderTraitor, TRM, Chainalysis • Tone: analytical • Sentiment: neutral • Intent: inform
30-10-2026
Binance says a security breach caused an estimated $6.3 billion impact, potentially making it the largest cryptocurrency heist on record. The exchange said it and its partners had frozen about $3 billion in affected assets, while Binance co-founder Yi He said the company would cover all hacking losses. An initial investigation suggested the attack may have begun with an engineer’s compromised laptop, enabling unauthorized withdrawals. Binance did not provide an update on the remaining $3.3 billion. As a precaution, it temporarily suspended deposits and withdrawals while securing its wallet infrastructure and tracing assets, while maintaining that user funds remain safe.
The news prompted declines across crypto and related markets. Bitcoin and ether each fell more than 3%, BNB was down 5%, and shares in Coinbase and Strategy also dropped. Analysts and industry figures described the incident as potentially the biggest crypto hack ever and warned that it could further weaken investor risk appetite. The breach comes amid pressure on crypto markets from higher US interest rates and softer demand from exchange-traded fund buyers, and may lead investors to reconsider the safety, solvency and liquidity risks of holding assets on centralized exchanges.
Several companies helped freeze funds reportedly linked to the incident: Tether froze nearly $1.57 billion, Circle more than $800 million, Ripple roughly $200 million, and World Liberty Financial worked with BitGo. Binance said additional stablecoins and World Liberty tokens were frozen. The article also notes Binance’s secure asset fund, a bitcoin reserve intended to protect users, and concerns that AI may make vulnerabilities harder to address. The breach adds to a series of crypto thefts, including $2.9 billion stolen across nearly 150 attacks last year and a reported $350 million theft from Bitget in September. Binance.US and Coinbase said they were unaffected. Separately, prediction market Polymarket briefly halted trading after a third-party provider incident, then resumed and promised to reimburse affected traders.
Entities: Binance, Yi He, Aravind Srinivasan, Tim Sun, Bernardo Brites • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
Bitcoin and other major cryptocurrencies fell after Binance, the world’s largest crypto exchange, disclosed a security breach that it estimates affected about $6.3 billion in assets. Bitcoin dropped 4.5 per cent to $76,664 by 6am UAE time on Friday, while ether and Binance-linked BNB also recorded steep losses. Prices partially recovered later that morning: Bitcoin stood at $77,984 at 7.51am, still down 2.2 per cent over 24 hours, with ether down 3.2 per cent and BNB down 3.9 per cent.
The breach coincided with more than $1.5 billion in leveraged crypto positions being liquidated within 24 hours, mostly positions betting on rising prices. Analysts said the incident intensified selling across the market, with BNB particularly exposed. Estimates of the theft varied: Binance put affected assets at about $6.3 billion, while Chainalysis estimated the theft at approximately $5.9 billion. TRM Labs linked the attack with high confidence to TraderTraitor, a North Korean hacking group.
Binance says about $3 billion has been frozen, including more than $2.3 billion in stablecoins, and co-chief executive Yi He said the exchange would cover all losses. Deposits and withdrawals remained suspended at the time of publication. A markets executive described BNB’s decline as modest given the possible scale of the theft, citing Binance’s $144 billion in assets under custody and the speed with which stablecoin issuers froze funds.
Separately, prediction market Polymarket briefly halted trading after reports of unauthorised withdrawals involving a compromised third-party provider. The article says there was no evidence linking that incident to the Binance breach.
Entities: Binance, Bitcoin, Ether, BNB, TraderTraitor • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
US Commodity Futures Trading Commission chairman Michael Selig said the $6.3 billion hack of Binance reinforces the need for regulation of cryptocurrency markets. Speaking on CNBC, Selig argued that crypto markets lack safeguards found in traditional US markets and said the CFTC wants exchanges to be able to register with the agency. He noted that digital assets can move quickly, while suggesting blockchain records could make the trail of illicit activity identifiable.
Binance, the world’s largest cryptocurrency exchange, said the incident was under investigation and that it would cover all losses. Its initial findings suggested a compromised laptop belonging to a DevOps engineer enabled an attacker to access a service container and submit unauthorized withdrawals. The reported loss surpasses the approximately $1.5 billion stolen from Bybit in 2025. Binance co-chief executive Richard Teng sought to reassure users that the company was working to resolve the incident.
The article places the hack amid wider debate over US cryptocurrency policy. President Donald Trump had not commented on the incident at the time of publication. The article notes his shift from earlier skepticism toward support for the industry, crypto executives’ campaign donations, a 2025 White House Crypto Summit, and his pardon of Binance founder Changpeng Zhao, who had served four months in prison after being convicted of offenses related to money laundering, money transmission and sanctions.
It also reviews broader concerns about cryptocurrency, including the absence of a comprehensive regulatory system, energy use from mining, and past exchange failures and hacks. Examples include former energy secretary Steven Chu’s criticism of Bitcoin mining’s electricity consumption, mining bans in parts of Russia, the 2014 Mt Gox hack and collapse, the 2022 FTX collapse, and the FBI’s attribution of the Bybit theft to North Korea. Together, these examples frame Binance’s breach as part of persistent security and oversight challenges in the crypto industry.
Entities: Michael Selig, US Commodity Futures Trading Commission (CFTC), Binance, Richard Teng, Changpeng Zhao • Tone: analytical • Sentiment: negative • Intent: analyze
30-10-2026
Binance, the world’s largest cryptocurrency exchange, temporarily suspended deposits and withdrawals while investigating a cyber security incident. The company said it was working around the clock with law enforcement and would publish a full post-mortem once its investigation was complete. It also promised to cover all losses and said user funds remained safe.
In updates posted on social media, Binance reported that the verified total frozen amount was around $3 billion. Its initial investigation suggested that an attacker may have used a compromised laptop belonging to a DevOps engineer to access a service container and submit unauthorised withdrawal transactions. Binance said it had found no evidence that wallet private keys had been leaked, while estimating the incident’s total financial impact at approximately $6.3 billion.
The company urged users to watch out for scams and avoid unofficial links, messages, or requests for account information. It said trading would resume once the security issue was resolved. The article also notes that Binance describes itself as a leading blockchain and cryptocurrency infrastructure provider and that its LinkedIn profile lists at least 5,000 employees worldwide.
Entities: Binance, Cody Combs, X, Law enforcement, Cryptocurrency exchange • Tone: analytical • Sentiment: neutral • Intent: inform
30-10-2026
Binance, the world’s largest cryptocurrency exchange, suffered a security breach that affected an estimated $6.3 billion in assets. Around $3 billion, including more than $2.3 billion in stablecoins, has been frozen. Binance co-chief executive Yi He said the company would cover losses, while deposits and withdrawals remained suspended at the time of reporting. Preliminary investigations indicated that the attack began with a compromised laptop belonging to one of Binance’s engineers and enabled unauthorised withdrawals. The incident points to weaknesses in the systems and procedures used to hold and manage assets, rather than a flaw in blockchain technology itself.
Experts explain that exchanges often use internet-connected hot wallets to make transactions fast and convenient, accepting some security trade-offs compared with offline cold wallets. Immunefi security chief Goncalo Magalhaes said that even if private keys are not leaked, compromising software with authority to sign transactions can allow unauthorised withdrawals. Bhaskar Dasgupta of the Middle East Stablecoin Association stressed that secure technology cannot by itself protect institutions if access controls and the people operating it are vulnerable.
There is no evidence that artificial intelligence was used in this particular hack. Nevertheless, analysts warn that AI could make future crypto attacks more damaging by helping criminals discover vulnerabilities, automate attacks, and produce more convincing phishing and fraud. Rania Gule of XS.com said vulnerabilities can arise in wallets, operating systems, access management, and exchanges’ technical infrastructure, even when blockchain cryptography is robust. AI can also help defenders monitor transactions, detect suspicious activity, and respond faster. Analysts describe cybersecurity as an ongoing contest between attackers and defenders, with both sides increasingly able to use AI.
Entities: Binance, Yi He, Bhaskar Dasgupta, Middle East Stablecoin Association, Goncalo Magalhaes • Tone: analytical • Sentiment: negative • Intent: inform
30-10-2026
The article argues that Binance’s reported $6.3 billion theft exposed a central contradiction in cryptocurrency: although the industry was built to eliminate intermediaries, much of the stolen value could be stopped only because centralized issuers and institutions intervened. Tether froze more than $1.56 billion in USDT, Circle blocked more than $800 million in USDC, and other firms contributed to a frozen total Binance estimated at about $3 billion. The author contrasts these issuer-controlled stablecoins with Bitcoin and Ether, which function more like bearer assets and cannot simply be frozen by an issuer.
The attacker briefly deposited $60 million in USDT to borrow roughly $45 million in wrapped Ether through Aave before Tether froze the collateral. The article notes that the Ether remained movable, but frames the maneuver as a limited gain compared with the overall theft. Its broader point is that the recoverable assets were those least like permissionless crypto; assets without centralized controls could continue moving.
The breach itself appears to have been an operational security failure rather than a cryptographic or blockchain flaw. Binance’s preliminary account says an attacker compromised a DevOps engineer’s laptop and used access to a service container to submit unauthorized withdrawals. Binance reported no evidence that wallet private keys were exposed, said it would cover losses, and suspended transfers while revoking affected authorizations. The episode caused market declines and liquidations, but the article says professional investors viewed the main danger as temporary loss of access, not insolvency.
The author also points to month-end valuation complications and the political uncertainty surrounding stalled US crypto legislation ahead of midterm elections. The conclusion is that crypto’s practical risks lie not only in code, but in ordinary institutional vulnerabilities, centralized control points, interrupted access, and regulatory changes.
Entities: Yevgeny Bebnev, Binance, Tether (USDT), Circle (USDC), Aave • Tone: analytical • Sentiment: negative • Intent: analyze
