2026-10-31 · contested story

Binance loses $6.3 billion in hack; $3 billion frozen, North Korea blamed

On October 29-30, 2026, Binance — the world's largest cryptocurrency exchange — suffered what multiple blockchain intelligence firms (TRM Labs, Chainalysis, Elliptic) and crypto analysts described as the largest cryptocurrency heist in history, with roughly $6.3-6.4 billion drained from internet-connected 'hot wallets' in about 20 minutes. Binance attributed the breach to a compromised DevOps engineer's laptop, later revealing 'additional points of breach.' Around $3 billion was frozen on-chain by stablecoin issuers Tether and Circle, while Binance pledged to cover all losses via its SAFU fund and company reserves (reserving over $6.34 billion). Investigators pointed to North Korea's TraderTraitor/Lazarus unit, the same group blamed for the 2025 $1.5 billion Bybit hack.

How each side frames it

left
"Binance was founded in 2017 by Changpeng Zhao, who in 2023 pleaded guilty to a felony related to his failure to prevent money laundering on the platform and stepped down as CEO. President Donald Trump pardoned him in 2025."
"Zhao and Binance have been key supporters of some of the Trump family's crypto enterprises."
"Unlike traditional bank deposits, funds kept in accounts with companies like Binance are not automatically insured against losses, potentially leaving any refunds up to the discretion of individual exchanges."
"Ari Redbord, TRM's global head of policy, described the attack as "unprecedented" and a "watershed"."
"Any assets held at a centralised exchange are only as safe as the exchange itself, and the larger the exchange's holdings, the larger a target it becomes."
center
"When you leave crypto on an exchange, you are relying on that company's controls and its balance sheet. A pledge to make customers whole is only as strong as the resources behind it."
"Binance founder Changpeng Zhao, who is legally not allowed to have any active role with the company yet still has remarkable amounts of inside knowledge into its inner workings, posted on Twitter less than an hour after the theft that "User funds are safe!""
"The attacker is estimated to have made off with between $2.4 billion and $3.4 billion."
"This looks like one signature that gave the attacker a never-expiring, full-access token to a Binance hot wallet."
"Despite these commonalities, Elliptic has urged caution in attributing the activity to North Korea, citing deviations from previously observed laundering patterns in terms of speed and methodology, as well as the absence of a root cause."
right
""It's the biggest hack in history," Aravind Srinivasan at market maker GSR told Reuters."
""Users will not bear the financial impact of this incident," the spokesperson said. "Binance will cover all losses.""
"North Korean hackers stole $6.3 billion from Binance, the world's largest cryptocurrency exchange, in a lightning-fast theft that an insider has called "the largest bank heist in human history.""
"While the loss is severe and marks a record theft for the industry, it's still just a fraction of Binance's total balance sheet. The exchange holds a total of $167 billion in crypto assets across its digital wallets, according to blockchain analytics firm Nansen."
"As the search for Nancy Guthrie stretches into a second week, her alleged captors are reportedly seeking a $6 million Bitcoin ransom, illustrating how cryptocurrency has reshaped the business of extortion."

What each side left out

The right left out — covered by the Fox Business & New York Post & CBS News & WIRED
The right left out — covered by the NPR & NBC News & LA Times & CBS News & DW
The left left out — covered by the New York Post & Bitcoin Magazine
The left left out — covered by the The Hacker News
The center left out — covered by the NPR & NBC News & DW
The center left out — covered by the New York Post & 24/7 Wall St.

What's actually true?

[verified] Binance suffered a security breach impacting approximately $6.3 billion in assets, making it the largest crypto hack on record.
[verified] Roughly $3 billion of affected assets were frozen on-chain, including over $1.56 billion USDT by Tether and about $800 million USDC by Circle.
[verified] Blockchain intelligence firms (TRM Labs, Chainalysis) attribute the attack with high confidence to North Korea's TraderTraitor unit.
[verified] The breach originated from a compromised DevOps engineer's laptop, allowing unauthorized withdrawal transactions; no wallet private key leak was found.
[verified] Binance pledged to cover all losses from its SAFU fund and company funds, reserving over $6.34 billion.
[verified] The majority of funds were drained in about 20 minutes across approximately ten blockchains.
[contested] Bitcoin fell roughly 2-5% following the hack, dropping below $77,000-$79,000.
[contested] The attacker exploited Ethereum's EIP-7702 feature by submitting a single transaction with 50 pre-signed authorizations to delegate control of Binance's hot wallet.

The narrative clash

Total amount stolen
Left: hackers started quickly siphoning around $6.3 billion in cryptocurrencies
Right: cryptocurrency assets with a total value of $6.43 billion were stolen from Binance (Elliptic, via Hacker News)
How much is permanently lost vs recoverable
Left: The remaining $3.3 billion is mostly Bitcoin, Ether, and XRP, which no one can freeze
Right: roughly $3 billion is likely gone forever, as it was unable to be frozen, according to analytics firms
Size of SAFU/insurance fund vs loss
Left: Held entirely in Bitcoin, SAFU's assets were valued at $1 billion earlier this month — a sixth of the amount impacted by Thursday's hack
Right: Binance has already reserved over $6.34B of company funds to cover this incident... $5B of these funds are already held in the exact token assets that were impacted
Whether the make-whole pledge is actually backed
Left: Binance's promise to reimburse is an unsecured corporate pledge — there is no cyber insurance and no reinsurance behind the SAFU fund, so repayment depends entirely on company reserves and goodwill.
Right: The question is settled: Binance has stated users lose nothing and the company absorbs the entire loss.
Severity — systemic watershed vs absorbable loss
Left: This is an unprecedented, industry-changing event that exposes how dangerous concentrating assets in one exchange has become.
Right: It is a record theft but financially containable — a small slice of what Binance holds, so the institution and its users are not at risk.

50 sources analyzed

Mashable NPR CNBC Fox Business Fox News Al Jazeera CBS News New York Post Fox News The Guardian BBC New York Post Fox News NBC News TODAY.com New York Post National Review Business Insider Yahoo Finance New York Post The Federalist WIRED ABC News - Breaking News, Latest News and Videos Boston Herald The Federalist Los Angeles Times TechCrunch New York Post The Mercury News WRAL Boston Herald The Washington Post AFR Boston Herald Citation Needed by Molly White The Dispatch DW.com Reason ABC News & Headlines – Australian Broadcasting Corporation Reason 24/7 Wall St. Reason The Hacker News Reason Bitcoin Magazine Just The News Fortune Just The News The Defiant Just The News

Perspectivity reads the coverage — not just who published it.

Read the full interactive analysis →