Binance hit by reported $6.3 billion breach, halts withdrawals
Binance suspended withdrawals after a reported $6.3 billion breach. About $3 billion is frozen and the exchange says it will cover user losses.
Binance, the world's largest crypto exchange by trading volume, has suspended deposits and withdrawals after a security breach that early reports value at about $6.3 billion, Inc42 and MediaNama reported on 30 October. If the figure holds, it would be the largest crypto theft on record. Binance says it expects withdrawals to resume within 48 hours, that it froze about $3 billion of the affected assets, and that it will cover user losses. Everything below is preliminary and may change.
What happened
Binance says its initial investigation points to a compromised laptop belonging to a DevOps engineer. According to Binance, attackers used that access to reach a service container, a sealed software environment, and submit unauthorised withdrawals. The exchange says it has found no evidence that wallet private keys were leaked. It revoked the affected authorisation, brought in law enforcement and blockchain intelligence firms, and promised a technical post-mortem and a fresh proof of reserves, which is an audit-style showing that it holds customer assets.
MediaNama dates the breach to 29 October. It adds that blockchain analytics firm Chainalysis attributed the attack to North Korea on 30 October and linked the stolen funds to commingled money from September's Bitget hack, which the article puts at about $350 million. That is an analytics firm's attribution, not a legal finding.
The numbers and the freezes
The totals differ by source. Inc42 and MediaNama give about $6.3 billion. MediaNama says Chainalysis first estimated at least $5.912 billion stolen across Bitcoin, Ethereum, Tron and Ripple, and later cited $6.4 billion. Inc42 quotes crypto news outlet Watcher.Guru putting the Bitcoin outflow alone at about $1.45 billion.
Stablecoin issuers can freeze tokens they control, and several did. MediaNama reports Tether froze about $1.57 billion, Circle more than $800 million and Ripple around $200 million, and that World Liberty Financial helped freeze $27 million in stablecoins and about $2 million in its own token. Ether itself cannot be frozen on-chain in the same way. Experts cited by Inc42 say the attacker deposited some stolen assets on the lending platform Aave and borrowed Ether against them. MediaNama says the attacker used $60 million of USDT as collateral to borrow about $44.6 million in wrapped Ether, and Aave restricted deposits and borrowing in several markets.
Market reaction
Per MediaNama, Bitcoin fell more than 3% to $76,368, its lowest in six weeks, Ether fell over 3% to $2,178 and BNB fell 5%. Tim Sun of HashKey Group said the incident may prompt investors to rethink holding assets on centralised exchanges, and Geoffrey Kendrick of Standard Chartered said weak prices may continue until assets are unfrozen.
The India angle
Inc42 notes that Binance restarted operations in India in 2024 after registering with the Financial Intelligence Unit and tightening reporting, and has a significant presence here. Indian exchange CoinDCX halted new trades on its futures desk as a precaution, per the same report. Neither report describes an Indian regulatory response to the Binance incident.
What it means for users
Binance says user losses will be covered through its SAFU fund (Secure Asset Fund for Users) and company money. That is a promise, not yet a published accounting, and the proof of reserves is still to come. For Indian users, the immediate effects are practical: locked withdrawals for up to two days if Binance's timeline holds, and price swings while that lasts. The incident is also a reminder that holding coins on an exchange means trusting its internal security, a point analysts have already raised.
What to watch next
- Whether withdrawals resume within Binance's stated 48 hours.
- Binance's technical post-mortem and updated proof of reserves.
- Any change to the loss estimate from Chainalysis or Binance.
- Any statement from Indian regulators or exchanges.
Key takeaways
- Binance halted withdrawals after a breach reported at about $6.3 billion, with roughly $3 billion frozen, according to Inc42 and MediaNama.
- Binance blames a compromised DevOps laptop and says no private keys were leaked.
- Chainalysis has attributed the attack to North Korea, according to MediaNama; Binance has not been quoted confirming this.
- Loss estimates vary between $5.9 billion and $6.4 billion, so the final number is not settled.
- Binance says it will cover user losses, but no audited figures have been published.
Sources
- [Inc42: Binance hit by record $6.3 Bn crypto breach, suspends withdrawals](https://inc42.com/buzz/binance-hit-by-record-6-3-bn-crypto-breach-suspends-withdrawals/)
- [MediaNama: Binance billion-dollar hack, suspends withdrawals](https://www.medianama.com/2026/10/223-binance-billion-hack-suspends-withdrawals/)
Tags: Binance Crypto Cybersecurity Stablecoins CoinDCX