Skip links

Binance Reports North Korea Likely Behind Historic $6.3 Billion Crypto Hack

Binance, the world’s largest cryptocurrency exchange, has become the target of an unprecedented security breach, resulting in the theft of approximately $6.3 billion (£4.7 billion). This incident has been labeled the largest cryptocurrency heist in history, with reports indicating that North Korea is involved, according to cybersecurity experts.

The exchange announced that it would absorb all customer losses and has suspended $3 billion worth of affected assets. Analysts described the attack as extraordinary, showcasing new laundering techniques that had not been previously observed, allowing the hackers to escape with vast amounts of digital currency.

In comparison, this theft overshadows the previous record of $1.5 billion stolen in a 2025 raid, as well as the $1 billion taken from Iraq’s central bank by Saddam Hussein in 2003. “This is almost certainly the largest theft of any kind in history,” stated Tom Robinson, chief scientist at crypto consultancy Elliptic.

Cybersecurity firms have traced the attack back to North Korean state-sponsored hackers. This isn’t the first instance of such an attack; they were reportedly responsible for a similar theft of $1.5 billion from a Dubai-based exchange last year, as noted by the FBI.

Analysts at TRM confirmed with “high confidence” that the hack was executed by North Korea’s elite hacking unit, TraderTraitor. An initial investigation suggests the breach was initiated through a compromised laptop belonging to a Binance engineer, which enabled unauthorized access to sensitive systems. Binance later acknowledged the presence of “additional points of breach”, indicating a highly sophisticated attack.

The exchange, which facilitates the buying, selling, and trading of digital assets, reported having 335 million registered users and approximately $162.8 billion in assets as of its most recent annual report in 2025. Co-CEO Richard Teng reassured users, stating, “Bottom line – your money is safe, and we’re covering every loss,” while committing $6.34 billion for this purpose.

Founded by entrepreneur Changpeng Zhao, who is now a citizen of both Canada and the United Arab Emirates, Binance is facing significant challenges as it temporarily suspended all deposits and withdrawals to secure its network and trace the stolen assets with the assistance of law enforcement.

Following the announcements, the market reacted swiftly: Bitcoin dropped by 5% to $77,380, marking its lowest price in six weeks. Zhao took to social media to reassure users, stating, “User funds are safe!” although he acknowledged the situation “does look like a hack.”

The implications of this breach extend beyond the immediate loss of assets. Analysts worry it could further undermine investor confidence in cryptocurrency exchanges, particularly in an environment already strained by rising U.S. interest rates and lower demand from investors. Tim Sun from HashKey Group highlighted that this incident may exacerbate investors’ concerns over the security of funds held in centralized exchanges.

North Korea’s increasing trend in crypto thefts, aimed at bypassing international sanctions, has reportedly amassed over $6.5 billion in stolen assets in recent years, including more than $1 billion within 2026 alone. Binance is collaborating with global law enforcement like the FBI and the U.S. Secret Service to address the aftermath of the hack.

Tether, a stablecoin issuer, has frozen nearly $1.57 billion in assets linked to the breach, while Circle has halted over $800 million. Analysts identified Ethereum as the most affected cryptocurrency, with losses amounting to $3.8 billion.

The United Kingdom’s financial authorities, including the Bank of England and the Financial Conduct Authority, are observing the fallout from the attack. Despite Binance not having official registration for crypto services in the UK, the FCA has stated it is engaged in monitoring the situation to understand its implications.

Editor’s Take

This incident underscores the persistent vulnerabilities in the cryptocurrency sector, which is already facing regulatory and market pressures. Users may need to reassess where they store their digital assets, particularly with centralized exchanges, while the fallout could prompt broader regulatory scrutiny across the industry.

Source: www.theguardian.com