Binance security breach has $6.3 billion impact in potential record crypto heist

Binance reported a security breach affecting an estimated $6.3 billion in assets. Analysts and industry experts described it as a potential record crypto heist because the suspected loss could exceed previous cryptocurrency thefts. The incident also raised concerns about the safety of assets held on centralised exchanges.

An initial investigation suggested that a hacker accessed one of Binance’s systems through an engineer’s compromised laptop. The attacker then made unauthorised withdrawals. Binance said it worked with industry and law-enforcement partners to trace and freeze affected assets, while temporarily suspending deposits and withdrawals.

About $3 billion had been located, but Binance gave no update on the remaining $3.3 billion. Co-founder Yi He said the company would cover all hacking losses. The breach pushed major crypto prices lower and could make investors reconsider counterparty, solvency, liquidity, and custody risks.

Binance estimated that the breach affected $6.3 billion in assets. It said about $3 billion had been recovered or frozen through cooperation with partners. The exchange did not provide an update on the remaining $3.3 billion, so the final loss remained uncertain when the report was published.

Binance held about $162.8 billion in assets under custody, according to its 2025 annual report. The estimated impact therefore equaled roughly 3.9% of those assets. The recovered or frozen amount equaled about 1.8% of total custody assets. These comparisons show the breach’s enormous absolute size, even though it involved a minority of assets held by the exchange.

Binance said user funds remained safe and that it would cover all hacking losses. It temporarily suspended deposits and withdrawals while teams checked wallets, secured infrastructure, and traced affected assets.

A security breach occurs when an unauthorised person gains access to an exchange’s computer systems or controls. In a crypto exchange, that access can threaten wallet infrastructure, transaction approvals, customer information, or withdrawal processes. The danger matters because digital transfers can be difficult to reverse once completed.

Binance’s initial investigation suggested that an engineer’s laptop had been hacked. If that device held login details, session access, or a route into internal systems, the attacker could use those permissions to reach another system. From there, the attacker allegedly made unauthorised withdrawals. The article does not identify the exact technical weakness or explain which credentials were used.

Binance temporarily suspended deposits and withdrawals as a precaution. Its security teams checked systems, secured wallet infrastructure, and traced assets with law-enforcement and industry partners. The company said user funds remained safe and promised to cover hacking losses.

Some cryptocurrency assets can be frozen by the organisations that issue or control their token contracts. This is different from simply reversing a bitcoin transfer. When a token’s system supports restrictions, the issuer or a cooperating custodian can prevent identified assets from moving further.

Tether said it froze nearly $1.57 billion linked to the incident. Circle froze more than $800 million. World Liberty Financial worked with custodian BitGo to freeze stolen funds, including $27 million in stablecoins and about $2 million in its tokens. Ripple froze roughly $200 million, according to Yi He, while Ripple said it was coordinating with relevant parties.

These actions helped Binance locate or immobilise about $3 billion. They also showed why rapid cooperation matters after a breach. However, the article does not explain the technical procedures used by each company or whether all affected assets could be frozen.

Markets reacted quickly after news of the breach emerged. Bitcoin dropped more than 3% in early Asian trading to a six-week low of $76,368. Ether also fell more than 3%, reaching a two-month low of $2,178. The moves showed that investors treated the incident as a broader crypto-market risk, not only a Binance problem.

BNB, Binance’s token used partly to pay exchange fees, fell 5% over 24 hours to $709.70, according to CoinGecko. In extended US trading, shares of crypto exchange Coinbase Global slid 4.8%. Shares of bitcoin buyer Strategy fell nearly 6%.

The market was already under pressure from higher US interest rates and softer demand from exchange-traded fund buyers. Analysts said the breach could further reduce risk appetite. It might also prompt investors to reassess the safety of assets held on centralised exchanges.

Chainalysis and other industry experts said the incident could become the world’s biggest crypto heist. Aravind Srinivasan of GSR called it the biggest hack in history. The article does not name earlier cryptocurrency thefts or provide figures for comparing them, so its historical ranking remains a potential outcome rather than a confirmed record.

The article identifies several reasons crypto thefts remain a recurring problem. Binance’s initial investigation pointed to a hacked engineer’s laptop and unauthorised system access. Bernardo Brites of Trace Finance also said AI can find vulnerabilities faster than companies can fix them. These details highlight the continuing challenge of protecting complex digital systems.

The breach could also make users move away from smaller and medium-sized exchanges. Analysts expected investors to reconsider exchange safety, counterparty exposure, solvency, and liquidity. Binance said it would cover hacking losses and had frozen or recovered about $3 billion.

A centralised cryptocurrency exchange is a company that provides a platform for buying, selling, and trading digital assets. It commonly holds customer assets and processes transactions on users’ behalf. Binance is an example: it had 335 million registered users globally and about $162.8 billion in assets under custody.

The arrangement creates counterparty and custody risk because users rely on the exchange rather than controlling every transaction themselves. A breach can threaten stored assets. Solvency risk means the company may not have enough assets to meet claims. Liquidity risk means it may struggle to provide withdrawals quickly, even if assets exist elsewhere.

The Binance breach made these concerns more visible. Deposits and withdrawals were temporarily suspended while teams checked systems and traced assets. Analysts said investors might reassess exchange safety and the risks of leaving assets on centralised platforms.