AnswersPublished18 sources
How the $6.3 Billion Binance Hack Unfolded
Binance reported an approximately $6.3 billion theft on October 29, 2026; about $3 billion was reported frozen, but that does not mean it was recovered.
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- Binance reported an approximately $6.3 billion theft on October 29, 2026; about $3 billion was reported frozen, but that does not mean it was recovered.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What happened in the record Binance cryptocurrency hack on Thursday, October 29, including the estimated $6.3–$6.43 billion stolen and its c. Article summary: Reports dated October 30, 2026 describe Binance’s October 29 breach as a record cryptocurrency theft of about $6.3 billion, with approximately $3 billion subsequently frozen—not necessarily recovered. [1][4] The availabl. Topic tags: general, general web, news, documentation, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, water
Binance reported a security breach on October 29, 2026, with an estimated impact of about $6.3 billion. Blockchain tracing attributed roughly $6.36 billion in outflows to the incident, making it far larger than the $1.5 billion Bybit theft reported in 2025. About $3 billion was reported frozen—but frozen assets are not necessarily returned assets. 1
3
18
What happened
TRM Labs’ tracing put the outflows across ten blockchains, with most of the funds moving in roughly 20 minutes from 20:05 UTC. The figures are estimates from different sources: Binance put the impact at about $6.3 billion, while TRM Labs’ reported total was about $6.36 billion. 1
9
The breach was described as a record crypto theft, roughly four times the $1.5 billion Bybit theft reported in 2025. 3
The suspected route into Binance
Binance’s initial account said a compromised DevOps engineer’s laptop may have allowed an attacker to reach a service container and submit unauthorized withdrawal transactions. Binance CEO Richard Teng described the incident as a more complex process, rather than a single action using one employee’s permissions. 60
Separately, Reuters reported that the attackers compromised Binance’s signing infrastructure—the systems used to authorize transactions—so they could issue instructions that emptied affected wallets. Binance said it had found no evidence that wallet private keys had leaked. These findings describe what investigators reported at the time; they do not establish every step of the attack. 17
2
Who was blamed—and what remains uncertain
Blockchain analytics firms TRM Labs and Chainalysis reportedly linked the attack to TraderTraitor, a group associated with North Korea. Binance had not publicly confirmed an attacker attribution in the reporting available at the time. The attribution should therefore be understood as analysts’ assessment, not as a confirmed finding from Binance. 5
Frozen funds are not the same as recovered funds
Binance said it was working with partners to freeze about $3 billion in affected assets. Reuters also reported that stablecoin issuers, including Tether and Circle, froze assets connected to the incident. A freeze can prevent some funds from moving, but it does not by itself mean those assets have been returned to Binance or its customers. 18
The difference matters: the headline loss, funds frozen on-chain, funds recovered, and any reimbursement by Binance are separate measures. The reporting establishes substantial freezes, but does not establish that the frozen amount had already been recovered. 18
Binance’s response and the market impact
Binance pledged to cover losses, and Reuters reported that the company had set aside about $6.34 billion. That commitment is distinct from the status of the stolen or frozen assets. 18
60
Reuters also reported falling cryptocurrency prices and concerns about the effect of the theft on confidence in digital assets. The available reporting does not establish a reliable set of price changes for individual tokens or stocks, or prove that specific liquidations were caused by the breach.
The key point
The breach appears to have involved access to systems that could authorize withdrawals, not simply a reported leak of wallet private keys. The exact attack sequence and attribution remained under investigation, while the estimated loss and reported freezes describe different stages of the incident. 2
17
18
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "How the $6.3 Billion Binance Hack Unfolded"?
Binance reported an approximately $6.3 billion theft on October 29, 2026; about $3 billion was reported frozen, but that does not mean it was recovered.
Sources
stingrai.ioBinance Hack October 2026: How the $6.3B Theft Happened
investmentnews.comBinance hack: $6.3 billion stolen in largest crypto heist in ...
reuters.comHackers steal $6.3 billion from Binance in record heist blamed on North Korea
247wallst.comNorth Korea Just Pulled Off the Biggest Crypto Heist in History, Draining $6.4 Billion From Binance in 20 Minutes