binance 6.3b hack: Half Frozen, Yi He Vows to Cover Losses
The binance 6.3b hack is the largest crypto theft on record: about half the assets are frozen, withdrawals are paused, and Binance says it will cover all losses.
Early story. Some claims here are not officially confirmed yet. We update this post as it confirms.
- Binance says about $6.3B was impacted; early checks point to a compromised engineer's laptop that enabled unauthorized withdrawals (BBC).
- TRM Labs and Chainalysis both link the attack to North Korea's TraderTraitor unit, the group the FBI tied to the $1.5B Bybit hack in 2025.
- Tether froze about $1.57B, Circle more than $800M, Ripple about $200M; Binance.US and Coinbase said they were not affected.
in this block
The binance 6.3b hack is now the largest crypto theft on record, and it landed on the biggest exchange in the game. Binance said about $6.3 billion of digital assets were impacted, roughly half has been frozen with help from issuers and other platforms, and co-founder Yi He said the exchange will cover all losses. Withdrawals were paused while the team checks that the environment is secure.
What actually happened
The incident started on Thursday afternoon U.S. time. Arkham's CEO told Reuters, via Nikkei Asia, that it began around 4:30 p.m. EDT and that billions appeared to be leaving Binance wallets. By Friday, the BBC reported Binance's own figure: $6.3 billion of assets impacted, in what analysts called the largest hack in history.
TRM Labs estimated about $6.36 billion moved from Binance wallets across 10 blockchains, most of it within roughly 20 minutes, according to CNBC. The firm said preparation started at least 36 hours before the theft, with wallets funded through Tornado Cash. Chainalysis CEO Jonathan Levin told CNBC his firm assessed the theft at about $6.4 billion and also pointed to TraderTraitor.
Binance's line on cause is still early. The BBC reported the exchange's initial checks suggest an engineer's laptop was compromised. Co-CEO Yi He posted that withdrawals stay disabled "until the environment is confirmed to be secure." Reuters added that Binance temporarily suspended trading on its Binance Alpha platform as a precaution.
The freeze race
What made this different from older megahacks is how much got locked in hours. Reuters reported Tether froze nearly $1.57 billion and Circle more than $800 million. Ripple froze about $200 million, World Liberty Financial worked with BitGo on roughly $27 million in stablecoins plus about $2 million in WLFI, and Binance said the frozen total could grow.
TRM's Ari Redbord explained the catch to CNBC: freezing stops movement, but recovery needs a legal process. Stablecoins are the easiest to claw back because issuers control the contract. Bitcoin and ether can only be traced and intercepted when they touch a cooperating platform.
A freeze buys time. It does not put coins back in user wallets on its own.
Can Binance eat it?
Fundstrat's Sean Farrell told CNBC the hack does not currently appear to create meaningful solvency risk. He estimated about $3.3 billion stayed unfrozen and said Binance's SAFU fund, around $1.2 billion, could cover roughly a third of that gap, with company funds covering the rest. His tell: how fast withdrawals resume and whether outflows stay orderly.
If you remember our binance super cz story, the brand has spent months leaning into big product launches. This week is the stress test of the boring stuff: custody, key management, and incident response. We saw a far smaller version of vendor and device risk in coinbase amplitude; the binance 6.3b hack shows how expensive that attack surface can get.
What Polymarket thinks
The cleanest live market is "Another crypto hack over $100M by ___?". At 06:02 UTC (09:02 MSK) on October 30, the October 31 line traded near 99.35% Yes. Traders are treating the Binance incident as a qualifying exploit, pending the market's resolution process. The Polymarket rules count any project or exchange hack of at least $100 million in the window.
What to do as a reader
Don't panic-move funds through random links. Phishing spikes after every big hack, and fake "Binance recovery" pages are a classic follow-up. Use only Binance's official announcement channel and the app itself for withdrawal status.
If you hold assets on any centralized venue, review where your keys live. Self-custody has its own risks, but the binance 6.3b hack is a reminder that "not your keys" is not just a meme. Spread exposure, keep records, and watch for official updates rather than screenshots on X.
Nothing here is investment advice. The figures above are early estimates from Binance and analytics firms and may change as the investigation continues.
Sources: BBC, CNBC explainer, Nikkei Asia / Reuters, Al Jazeera.
Not financial advice. DYOR, ser.
