Binance Freezes $3 Billion in Assets After $6.3 Billion Cyberattack
The exchange cites a compromised laptop as the entry point for the breach, which has halted withdrawals and triggered a temporary dip in major crypto prices.
By Nadia Singh ·
Cryptocurrency market stability faced a major test this week when Binance, one of the world's largest digital asset exchanges, disclosed a substantial security breach. The incident has led to temporary operational changes and raised questions among users regarding the safety of their digital holdings.
Binance stated on October 30, 2026, that it estimated the total economic impact of the cyberattack at $6.3 billion. In response, the platform froze approximately $3 billion in assets linked to the intrusion. As a preventive measure, the company suspended withdrawal requests while it completes internal security reviews and revokes authorizations for affected addresses.
The company said it will cover all user losses using its own capital and the SAFU user protection fund, meaning clients will not bear the direct cost of the incident. Binance also indicated that it expects to normalize withdrawal functions within 48 hours, though this timeline reflects current projections rather than a guaranteed deadline.
Preliminary findings suggest that attackers gained access by compromising the laptop of a DevOps engineer. This breach allowed them to enter a service container and execute unauthorized withdrawal transactions. Binance reported that it found no evidence that the private keys for its wallets were leaked, a detail the company noted as a key indicator that the core security architecture remained intact.
TRM Labs, a blockchain analysis firm, reported a high level of confidence that the attack was organized by TraderTraitor, a hacker group linked to North Korea. The firm identified similarities in on-chain data and external indicators with previous cryptocurrency thefts attributed to the country. While TraderTraitor has been associated with the Lazarus Group, official confirmation of the perpetrators' identity remains pending.
Collaboration with external partners has helped contain the movement of stolen funds. Tether, a stablecoin issuer, stated that its CEO, Paolo Ardoino, confirmed the freezing of approximately $1.6 billion in related assets. Circle, another issuer, reported that its CEO, Jeremy Allaire, blocked more than $800 million in USDC, a dollar-pegged stablecoin.
The breach also affected broader market sentiment. Bitcoin fell to its lowest level in six weeks before recovering some ground. Ether dropped to its lowest price in two months, and BNB, Binance's associated token, declined by approximately 6.1%. Pre-market trading in the United States saw similar drops, with Coinbase shares down 5.2% and Strategy shares down 5.1%.
