Biggest-ever crypto hack impacts $6.3 billion as Binance works to contain fallout
Binance put its estimated impact at $6.3 billion and said about $3 billion had been frozen on-chain, while the investigation remained open.
TL;DR
- Binance estimated the incident’s total impact at about $6.3 billion and said roughly $3 billion had been frozen on-chain.
- The company temporarily suspended deposits and withdrawals during security checks and said it had found no evidence of a wallet private-key leak.
- AP reported that Binance had not confirmed whether funds were stolen, and the attack path and final losses remained under investigation.
Binance said its initial investigation suggested that a compromised laptop belonging to a DevOps engineer may have given an attacker access to a service container and enabled unauthorized withdrawal transactions. The company estimated the incident’s total impact at about $6.3 billion and said approximately $3 billion had been frozen on-chain. These are preliminary figures and an account from the exchange, not a completed independent audit. [1] [2]
The exchange temporarily suspended deposits and withdrawals while it conducted security checks, revoked authorization for an affected address and contacted law enforcement and blockchain intelligence partners. Binance said it had found no evidence that wallet private keys were leaked and said it would cover losses through its SAFU fund and company funds. AP reported that the company had not explicitly confirmed that funds were stolen, despite describing the incident as a potential hack. [1] [2] [3]
CNBC reported that Binance was working with stablecoin issuers and other partners to freeze assets as it contained the incident. AP separately reported that Tether and Circle said they had frozen funds associated with the event. The reported frozen totals vary by source and timestamp, so this edition uses Binance’s own approximately $3 billion figure as the company’s latest stated on-chain total. [1] [2] [3]
The company said it would publish a technical post-mortem after the investigation and facts were verified, and an updated proof of reserves after remediation. The full attack path, confirmed amount of any stolen funds, identity of the attacker and time needed to restore withdrawals were still unresolved in the cited reporting. Binance’s assurances about customer balances remain company statements pending independent verification. [1] [2] [3]
Why it matters
The reported scale makes this a significant operational and confidence event for crypto-market infrastructure, while the distinction between an estimated incident impact and confirmed customer losses remains material. The investigation and withdrawal-service restoration will determine what the headline figure ultimately represents.
Editor's note
Added on the 19:00 KST pass after the Binance update and independent AP and CNBC coverage. Binance’s damage estimate and safety assurances are attributed to the company; theft, final losses and root cause remain unconfirmed.