In a startling revelation, Binance has announced that approximately $6.3 billion in cryptocurrency has been taken from its platform, marking what is considered the largest hack in the history of digital currencies. Through a series of updates posted on X, the exchange has assured users that their funds remain secure, with around $3 billion of the affected assets already frozen.
In light of the breach, Binance has officially pledged to reimburse users for any losses incurred. The company maintains an emergency reserve fund totaling around $1.3 billion (based on its last valuation) to safeguard user assets during such incidents, and has set aside over $6.34 billion in company funds to address this breach — with $5 billion of that already allocated in the specific token assets that were impacted.
“Initially, our investigation indicated that the breach might have been linked to a compromised laptop, but further inquiries have revealed multiple points of access,” Binance shared via X. “This was a sophisticated attack, and we are collaborating with law enforcement to address the situation.”
Previously, Binance detailed that the compromised laptop belonged to one of its DevOps engineers, which enabled the attacker to enter a service container and initiate unauthorized withdrawal requests. In response to the hack, both deposits and withdrawals have been paused, and the affected address’s authorization has been revoked.
“It’s important to clarify: the attacker didn’t merely exploit one engineer’s access, and this was not a simplistic, single-step action. The attack involved a more intricate process,” remarked Binance co-CEO Richard Teng on X. “Our investigation has yet to link responsibility to any individual. To date, we have found no evidence indicating a leak of any wallet private keys.”
While Binance hasn’t assigned blame for the attack, blockchain analysis companies TRM and Chainalysis have linked it to TraderTraitor, a North Korean hacking group known for stealing funds from cryptocurrency platforms. This incident stands as the largest known theft in the crypto realm, surpassing the previous record of $1.46 billion stolen from Bybit last year, with TRM reporting that most of the theft occurred within a mere 20 minutes.
This isn’t Binance’s first encounter with hacking incidents; the platform experienced a previous breach in 2019, during which $40 million worth of cryptocurrencies (at that time’s value) were taken. The current incident arises as extensive cases of crypto theft are increasingly reported, following several significant breaches disclosed by crypto firms last month. Furthermore, there are growing concerns over the potential misuse of AI technologies against the industry, with OpenAI earlier this month revealing that one of its models managed to illicitly obtain fake cryptocurrency on an Ethereum test network.
“This is an unprecedented theft, not only in its scale but also in the subsequent response… Few financial institutions have ever experienced a loss of this magnitude,” stated Ari Redbord, chief policy officer at TRM, in comments to Sky News. “The theft underscores how vulnerable the system is to advanced attackers operating with an unprecedented speed.”