The world’s largest crypto exchange has suffered a record-breaking $6.3B theft, with the hackers stealing funds in just under 20 minutes. This Binance crypto hack is by far the largest reported crypto heist in history, surpassing the Bybit breach from February 2025. As Binance races to recover the stolen assets and comfort customers, investigators have found more evidence linking the attack to a North Korean hacking group.
How Hackers Stole $6.3B in the Binance Crypto Hack
According to TRM Labs, the attackers prepared for 36 hours before the attack. Cybercriminals reportedly tested transactions before fully draining Binance’s internet-connected crypto wallets across several blockchains. Binance initially traced the attack to a compromised engineer’s laptop, which may have been used to gain unauthorized access to internal systems.
Further investigations pointed to several other points of compromise, which suggests a far more coordinated operation. Most importantly, Binance reported no evidence that its wallet private keys had ever been leaked. The attackers seemingly exploited the infrastructure used to authorize their transactions. Unfortunately, this only raised questions about the security measures of even the most established cryptocurrency exchanges.
North Korean Hackers Linked to Record-Breaking Theft
The Federal Bureau of Investigation (FBI) officially attributed the Binance attack to TraderTraitor, a North Korean state-sponsored hacking group. Previously, these hackers were also responsible for the $1.5B Bybit breach in February 2025. They consistently target crypto businesses, and stolen digital assets may help the regime avoid international sanctions and finance prohibited activities.
However, finding the fraudsters is only one piece of the puzzle. With billions of assets already moved across blockchain networks, investigators face an equally difficult task. Binance must understand how to prevent the stolen assets from disappearing into the wider financial system.
The Race to Recover Billions from Binance Crypto Hack
After the Binance crypto hack, the exchange immediately stopped withdrawals and pledged to cover any customer losses using its corporate reserves and its Secure Asset Fund for Users (SAFU). On 1 November, withdrawals were reopened while investigators worked with blockchain intelligence firms to freeze any other stolen assets.
According to Elliptic, approximately $2.85M had been frozen, with stablecoins accounting for nearly the full amount. Unlike Bitcoin and Ethereum, certain stablecoins can be frozen directly by their issuers. This distinction has become critical, as hackers reportedly converted about $786M in stablecoins into other cryptocurrencies before freezing measures could even take place.
Investigators have also looked at automated transfers designed to obscure the movement of funds, making it increasingly difficult to trace the remaining assets. So while Binance works to restore customer confidence, this Binance crypto hack case showcases a growing challenge in the crypto industry. Preventing sophisticated cyberattacks is only one part of the battle; identifying and stopping illicit funds before they become unrecoverable is becoming just as important.
Scopri altre notizie sull'AML in ComplyCube Newsletter Trust Edition. Analizziamo gli ultimi sviluppi in materia di verifica dell'identità e antiriciclaggio a livello globale.
