Binance says it is scrambling to trace and freeze assets after what outside analysts described as a $6.3 billion theft, a scale that would make it the largest crypto heist on record. The useful number is not only the headline loss. It is that Binance said about $3 billion had been located, leaving roughly half still unaccounted for by that measure.
The exchange said deposits and withdrawals were temporarily suspended while it checked systems, secured wallet infrastructure and worked with law enforcement and industry partners. Co-chief executive Richard Teng said customer money was safe and losses would be covered. That matters because Binance is not a fringe venue nursing a speculative niche. The company said it had 335 million registered users globally and $162.8 billion in assets under custody at the end of 2025.
What is confirmed, and what remains inferred, needs separating. Binance acknowledged a security incident and said an initial investigation suggested the breach may have begun with a hacked laptop used by one of its engineers, allowing unauthorized withdrawals. It did not explicitly confirm the full amount reported stolen. The $6.3 billion figure, and the attribution to North Korea’s TraderTraitor group, came from blockchain analysis firms TRM and Chainalysis, which The Guardian reported had linked the attack to the state-backed unit with high confidence.
Markets did what markets do when custody risk stops being theoretical. Bitcoin fell more than 3% in early Asian trading to a six-week low of $76,368, according to The Guardian. That drop says investors were rattled. It does not prove a straight line from the hack to a lasting repricing of crypto risk, only that trust in centralized exchanges remains one software failure away from theology.
The freeze-and-recover effort shows where power in crypto actually sits when things go wrong. The Guardian reported that Tether had frozen nearly $1.57 billion in assets tied to the incident and Circle more than $800 million. World Liberty Financial, a crypto company linked to Donald Trump and his family, said it had worked with custodian BitGo to freeze funds it described as stolen from Binance. Decentralization has its uses. So do a few large issuers with an off switch.
Binance also has a reserve fund intended to protect users in breaches. Whether that backstop is enough to restore confidence is a narrower question than the slogans suggest. Covering losses may protect customers. It does not erase what the incident says about operational risk at the biggest name in the business.
Isla Camilleri
Alex de Valletta
Dua Mifsud