Binance Reports Major Cyberattack and Theft of Cryptocurrency

Binance, reported as the world's largest cryptocurrency exchange, stated that it suffered a major cyberattack resulting in the reported theft of cryptocurrencies valued at approximately $6.3 billion. The exchange described the incident as a complex attack and stated it is coordinating with law enforcement and industry partners to trace and freeze stolen assets.

What Happened

According to Binance, the stolen funds were taken from wallets utilized by the exchange to process transactions on its global centralized platform, Binance.com. Binance.US was reported to be unaffected by the incident. Initial assessments indicated the attack originated from a compromised laptop that provided access to a service container, enabling unauthorized withdrawal transactions. Subsequent investigations revealed additional security breaches.

• Estimated Value: Reported at approximately $6.3 billion, with warnings that the figure could rise.
• Timeline: Blockchain records indicated the bulk of transactions occurred within roughly 20 minutes following 2000 GMT on Thursday.
• Impacted Platform: Binance.com global centralised platform; Binance.US unaffected.

Attribution and Investigation

Neither Binance nor official law enforcement authorities have confirmed the identity of the perpetrators. However, US-based blockchain analytics firms TRM Labs and Chainalysis attributed the activity to a North Korean-linked group named TraderTraitor. TRM Labs stated a high confidence judgment regarding this attribution.

Response and User Funds

Binance reported setting aside more than $6.34 billion in company funds to manage the fallout, including $5 billion held in affected token assets. Co-chief executive officer Richard Teng previously stated that user funds were safe, though deposits and withdrawals were temporarily suspended as a precaution. Counterparties and stablecoin issuers have frozen roughly half of the traced stolen assets. Binance stated it remained on schedule to resume withdrawal services within an expected timeline of 45 hours.

Practical Implications and Verification

Users and market participants should verify updates directly through official Binance communication channels, such as their verified social media accounts on X and official company announcements. Independent blockchain intelligence reports from firms like TRM Labs and Chainalysis provide technical context regarding asset tracking and freezes.