Binance Faces $6.3 Billion Losses from Cyberattack, Market Reaction Follows
Binance has confirmed that it is investigating a complex cyberattack that has led to estimated losses of $6.3 billion. The exchange, which is the largest in the world, stated that the breach was more intricate than initially believed, revealing multiple points of compromise by unknown hackers. In response, Binance has committed to covering all losses through its Secure Asset Fund for Users (SAFU) and its own resources, having already frozen approximately $3 billion in assets. Withdrawals are expected to resume within 45 hours, while deposits remain unaffected.
The company initially suspected that the attack might have stemmed from a compromised laptop belonging to a member of its DevOps team. However, further investigation has indicated that the incident involved a more sophisticated method, and no specific individual has been identified as responsible. Binance co-chief executive Richard Teng emphasized that there is no evidence suggesting that private keys for digital wallets were leaked during the breach.
In light of the attack, Binance temporarily suspended withdrawals and revoked authorizations for affected addresses while enhancing its security protocols. Co-founder Yi He mentioned that the platform is working to improve its withdrawal services and associated address checks, with a phased resumption anticipated within the next two days. The company is collaborating with law enforcement and blockchain analytics firms to trace and recover the stolen funds.
Other companies in the cryptocurrency sector have also taken action to freeze assets linked to the incident. Circle's CEO Jeremy Allaire reported that over $800 million has been frozen, while Tether's CEO Paolo Ardoino noted that more than $1.5 billion has been similarly secured. Ripple has also announced measures to freeze funds associated with the attack that are held in its stablecoin.
Link to North Korean Hacking Group Revealed
Blockchain analytics firm TRM Labs has linked the cyberattack to TraderTraitor, a North Korean hacking group, marking this incident as potentially the largest cryptocurrency theft on record. The involvement of North Korean hackers raises concerns, as they have previously targeted cryptocurrency exchanges, including a $1.5 billion theft from Bybit last year. Data from Chainalysis indicates that cryptocurrency thefts attributed to North Korean hackers reached $2 billion in 2025, a significant increase from the previous year.
Final Brief
The ramifications of the attack have already impacted the cryptocurrency market, with Bitcoin dropping over 4% to around $76,000, its lowest level since mid-September. Other digital assets, including Ether, Solana, and XRP, have also seen declines. Additionally, positions worth approximately $1.3 billion that had anticipated rising cryptocurrency prices were liquidated within a 24-hour period, coinciding with the expiration of $11 billion in options contracts on the Deribit platform.
The ongoing threat of cyberattacks on digital asset platforms remains a critical concern for the industry, as evidenced by previous incidents involving Bybit and Bitget, which suffered significant losses due to similar breaches.
