Binance Halts Operations Following Record $6.3B Breach
The exchange suspended all deposits and withdrawals after an attack resulted in the largest crypto theft in history.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust centralized cryptocurrency exchanges to keep your assets safe from major cyberattacks?
Binance has suspended all deposits and withdrawals following a cyberattack that resulted in an estimated $6.3 billion loss. Industry partners have successfully frozen $3 billion in stolen assets, leaving approximately $3.3 billion still outstanding.
Why it matters
This breach represents the largest crypto theft in history, significantly surpassing the $1.5 billion Bybit incident of early 2025. The scale of the event is forcing investors to reassess liquidity, solvency, and counterparty risks across centralized exchanges.
The incident involved $2.4 billion in bitcoin and ether drained from a hot wallet. This attack significantly exceeds the $1.5 billion stolen in the 2025 Bybit breach.
The players
Binance
A centralized cryptocurrency exchange that provides trading services and manages the Secure Asset Fund for Users.
Aave
A decentralized finance protocol that enables users to lend and borrow various crypto assets.
TraderTraitor
A North Korea-linked cybercriminal group identified by investigators as the suspected actor behind the breach.
The details
Attackers gained unauthorized access by compromising a DevOps engineer's laptop, which allowed them to interface with an internal service and submit fraudulent withdrawal requests. A hot wallet — a cryptocurrency wallet connected to the internet to facilitate rapid transactions — served as the primary point of egress for the funds. Following the initial breach, Aave protocol participants moved to freeze affected markets to contain the movement of stolen capital.
Timeline
2018: Binance established the Secure Asset Fund for Users.
February 2025: The Bybit exchange suffered a $1.5 billion theft.
September 2026: Bitget suffered a loss of approximately $350 million.
October 29, 2026, 8:24pm GMT: The Binance hack began with a large outflow from a hot wallet.
October 30, 2026: Reports confirmed the scale of the ongoing breach.
The Tech Race
The Binance hack eclipses the $1.5 billion Bybit breach of early 2025 as the largest-ever theft of digital assets from a centralized platform. This incident highlights a growing shift where state-linked actors, such as the TraderTraitor group, are successfully targeting institutional-grade security infrastructure.
Users currently face a complete suspension of deposits and withdrawals, with no confirmed timeline for service restoration. Bitcoin prices dropped 3% and BNB tokens fell between 5% and 8% in the immediate aftermath, reflecting broader market volatility.
The takeaway
The event underscores the systemic risk posed by centralized hot wallets and the aggressive targeting of DevOps infrastructure. Investors should monitor whether Binance successfully covers the remaining $3.3 billion shortfall using its internal funds and the Secure Asset Fund for Users.
Further reading
For broader analysis on exchange vulnerabilities, visit our Cybersecurity section.
Source note: This article includes information reported by Insurance Business.
Live Poll
Do you trust centralized cryptocurrency exchanges to keep your assets safe from major cyberattacks?
