Hackers just pulled off the biggest crypto heist in history, and the world’s largest exchange says it will eat the loss. Binance put the “estimated total impact” at about $6.3 billion, roughly four times the previous record.
If you hold crypto on an exchange, here’s what you need to know: Binance says user funds are safe and that it will cover every dollar. However, that promise comes from Binance, not from an insurer or a regulator. The Binance hack is a reminder of how little protection sits behind an exchange balance.
How the Binance hack happened
This one was not a movie-style break-in. No lasers, no ventilation ducts. According to CNN’s reporting on Binance’s statement, an attacker compromised an engineer’s laptop late Thursday, Oct. 29. That gave the attacker a way into a service container, where they submitted unauthorized withdrawal transactions.
Blockchain analytics firm TRM Labs says about $6.36 billion left Binance wallets across 10 blockchains, most of it in roughly 20 minutes.
Binance says there is no evidence a wallet private key leaked. Not everyone buys that. Mark Karpeles, the former Mt. Gox chief, told France 24 the attackers likely got private keys for at least two Binance wallets. Binance and Karpeles have offered conflicting accounts, and neither has produced evidence that settles the question.
Who is behind the Binance crypto attack
TRM says it has “high confidence” the attack was the work of TraderTraitor, a North Korean hacking unit. Chainalysis also points to North Korea. It says it saw money stolen in last month’s Bitget exploit mixing with funds taken from Binance, according to The Hacker News.
No government has confirmed that attribution, and North Korea has denied crypto hacks before. Still, the group is the same one the FBI tied to the $1.5 billion Bybit theft in February 2025, the old record. This time the target was roughly four times bigger.
What is frozen after the Binance heist, and what is not
Binance says it has frozen about $3 billion on-chain so far, including $2.3 billion in the stablecoins USDT and USDC. Tether froze about $1.56 billion and Circle about $800 million, and Ripple froze about $200 million.
That still leaves roughly $3.3 billion unfrozen, by Fundstrat analyst Sean Farrell’s estimate. Binance’s SAFU emergency fund is worth about $1.2 billion. So the exchange will have to dig into company money to make everyone whole.
Farrell says the breach does not currently look like a solvency threat to Binance. Co-CEO Richard Teng has said the exchange will cover losses from the SAFU fund and company funds. Founder Changpeng Zhao also weighed in: “As a shareholder, I expect all user funds will be fully covered.”
Chainalysis put the haul near $5.9 billion at the time of the theft. The $6.3 billion number, meanwhile, is Binance’s own estimate of impact.
Here’s the thing for your money
Exchange balances are not insured like a bank account. As NBC notes, getting your money back depends on the exchange keeping its pledge. Regulators have leaned hard on other big institutions over weak controls, as Bank of America’s $1.2 billion penalty showed, but crypto exchanges face no comparable safety net.
Until deposits and withdrawals reopen, any funds you hold there are stuck.
Markets noticed. BNB, Binance’s own token, fell about 5% over 24 hours to $709.70, per CoinGecko, and shares of listed crypto exchanges took a hit. The bigger risk is confidence. Crypto was already under pressure, and a $6 billion Binance theft at the industry’s biggest name is not a great look.
What happens next
CNN reports Binance expects deposits and withdrawals to resume by Sunday, Nov. 1. That is an expectation, not a promise, so treat it that way. Meanwhile, tracing and freezing the rest of the stolen money continues, with law enforcement and blockchain intelligence firms involved. Fraud on this scale tends to draw federal attention, much like the DOJ’s push against ghost-student fraud.
So far we could not find a statement from the FBI, the Treasury or the SEC about the Binance hack, and there is no date for one.
The question everyone will ask next is simple: if the biggest exchange in the world can lose $6 billion to one compromised laptop, who is actually safe?
