Crypto platform Binance confirms major hack, more than US$2.5 billion frozen

Binance is a cryptocurrency exchange, meaning a platform where people trade digital currencies. It is the world’s largest exchange by daily trading volume, according to the article. A hack means attackers gained unauthorized access to systems, accounts, or assets connected with the platform. The danger is not only stolen money. Users may also lose access while the company investigates.

The incident showed this risk clearly. Binance temporarily suspended deposits and withdrawals while conducting security checks and freezing funds. Tether froze about US$1.6 billion linked to the possible hack, while Circle froze more than US$800 million in USDC. Chainalysis estimated that about US$5.912 billion had been stolen at the time of theft.

The full method of attack was not explained. Binance said user funds were safe and promised to cover all losses, although its messages were sometimes contradictory. The incident matters because exchanges hold large amounts of customer-linked assets, making security failures financially significant and disruptive.

The reported scale was enormous, but the figures were not identical. Binance said more than US$2.5 billion had been frozen to prevent further theft. Chainalysis gave a current estimate of approximately US$5.912 billion stolen at the time of theft. Binance also said the frozen amount could continue rising as partners traced more assets.

The estimate was almost four times the previous record crypto cyberattack. In February 2025, hackers took US$1.5 billion from the Bybit platform. Binance’s former chief, Changpeng Zhao, offered a lower early estimate, saying losses could be slightly above US$1 billion. The different figures show that the final total was still uncertain.

The money was not necessarily all recovered. Freezing assets can stop some transfers, but it does not automatically return funds to victims. Binance said it was working with law enforcement, issuers, blockchain intelligence firms, and industry partners to trace and freeze additional assets.

When an exchange suspends deposits and withdrawals, users cannot move funds into or out of the platform through those functions. Trading may also be affected, depending on the exchange’s systems, although the article specifically reports the suspension of deposits and withdrawals. The immediate purpose is containment: investigators can check systems and stop suspicious assets from moving.

Binance said all deposits and withdrawals were temporarily suspended while its team conducted security checks, froze funds, and worked with law enforcement. The company also coordinated with issuers, blockchain intelligence firms, and industry partners. These steps can help identify compromised assets and prevent further transfers during an investigation.

For users, the practical effect is restricted access and uncertainty. A suspension does not by itself prove that every user has lost money, and Binance insisted that user funds were safe. However, users may be unable to withdraw funds when they want them. The pause lasts until security checks and recovery efforts progress.

Tether and Circle were the companies identified as freezing linked funds. Tether CEO Paolo Ardoino said his firm froze about US$1.6 billion related to a potential Binance exchange hack. Circle boss Jeremy Allaire said Circle had frozen more than US$800 million in USDC. Both USDT and USDC are stablecoins linked to the US dollar.

The article does not explain the technical mechanism. In general, stablecoin issuers can restrict transfers or freeze balances through controls built into their token contracts and supporting systems. They can identify blockchain addresses, place them on a blocked list, and prevent or limit movement of tokens from those addresses. This gives issuers an intervention power that many decentralized cryptocurrencies do not have.

The freezes aim to stop suspected stolen funds from being moved or converted. They do not necessarily recover every asset, and they depend on correctly identifying connected addresses. Binance said the total frozen figure could increase as companies and investigators traced additional assets with law enforcement and blockchain intelligence firms.

The price falls reflected fear and uncertainty after news of a major exchange attack. Bitcoin, Ethereum, and BNB are volatile cryptocurrencies whose prices depend heavily on buying, selling, confidence, and expectations. News that a major trading platform may have been compromised can prompt investors to sell, reducing prices across the market.

The article gives clear examples. At about 0025 GMT, Bitcoin had lost nearly five per cent, Ethereum had fallen nearly six per cent, and BNB, Binance’s native cryptocurrency, had dropped nearly 10 per cent. BNB’s sharper fall may reflect its close association with Binance, although the article does not identify a specific cause for the difference.

Stablecoins behaved differently. USDT and USDC are designed to track the US dollar, so they normally fluctuate only within tight margins. That design explains why they changed very little during the broader sell-off. Their issuers’ decisions to freeze linked funds also showed that stablecoin systems can respond directly to suspected theft.

The reported Binance incident was much larger than the earlier record crypto attack. Chainalysis estimated approximately US$5.912 billion stolen from Binance at the time of theft. By contrast, US$1.5 billion was taken from Bybit in February 2025. The Binance estimate was therefore almost four times the Bybit amount, although other early estimates were lower.

The Bybit attack had been described as the biggest cyberattack of its kind before this incident. The article says it was attributed to hackers affiliated with North Korea. It does not explain how investigators reached that conclusion, identify the specific group, or provide supporting evidence. That attribution therefore appears as background rather than a detailed finding in the supplied text.

The comparison shows how rapidly the reported scale had increased. Changpeng Zhao estimated Binance’s losses could be slightly above US$1 billion, while Chainalysis estimated nearly US$6 billion. The final amount remained uncertain as companies and authorities continued tracing and freezing assets.

A blockchain is a shared record of transactions maintained across a network. A crypto wallet is software or hardware that manages the credentials connected with digital assets. The private key is the secret credential used to authorize a transaction; whoever controls it can generally direct the associated funds. The article does not explain these basics, so this explanation uses established general knowledge.

When a user signs a transaction with a private key, the network checks it and records it on the blockchain. Public addresses and transaction histories can often be viewed, allowing investigators to follow funds between addresses. Binance said it was working with blockchain intelligence firms and industry partners to trace assets, illustrating this tracking process.

Tracing does not mean reversing. Once a transaction is confirmed, the network’s records generally treat it as final. Reversal usually requires the recipient to send funds back, or an issuer with special controls to freeze or restrict tokens. That is why tracing and freezing are different from automatically restoring stolen crypto.