Binance Says It Froze $3bn After $6.3bn Hack

The split inside Binance’s own numbers is the story. The exchange says roughly half of the stolen digital assets have been secured, while the rest remain with unidentified hackers. In an industry used to thefts that disappear into mixers, bridges and offshore indifference, recovering that much is significant. It is also only half the problem.

Binance told users that “your money is safe” and said it would cover every loss. That may steady the immediate panic. It does not settle the less theatrical question of what, exactly, customers could enforce if a dispute emerged later. The BBC reports that legal specialists have warned users not to assume those assurances are automatically binding, with any claim likely to depend on contract terms and where Binance could be sued.

What changed inside Binance’s own explanation matters too. The company initially said an engineer’s laptop may have been compromised, allowing unauthorised withdrawals. Later, it said the attack was wider. Co-chief executive Richard Teng said the hackers used “a self-destruct mechanism that destroyed tooling and traces as they went,” which helps explain both the shifting account and the difficulty of tracing what happened cleanly.

That does not make the North Korea link a settled fact. It remains an attribution by outside analytics firms and investigators, not a courtroom finding. But the pattern is familiar enough that TRM Labs said elements of the attack resembled earlier North Korean-linked incidents, including the 2025 Bybit hack, and Chainalysis said it had “high confidence” that a North Korean was linked to this one.

US authorities have moved in as well. The Secret Service said it was working “around the clock” to identify, freeze, trace and recover the stolen funds, and Binance said it was also working with the FBI. Some of the assets involved were US-linked stablecoins including Tether and Circle, which helps explain why Washington has a direct lane into the case even though Binance said its US-facing exchange was unaffected.

Binance also has a larger confidence problem to manage than the raw recovery tally. The company said in 2024 that it had more than $160bn in assets under custody, and it has repeated that it is strong enough to absorb the loss. Crypto customers have heard versions of that language before. The BBC notes that observers online have compared it with the reassurances FTX gave before collapsing in 2022.

For now, Binance has shown that stolen crypto is not always instantly gone for good. It has also conceded, in effect, that its first explanation of the breach was too narrow and that billions of dollars are still outside its control.