Crypto giant Binance has confirmed it was the victim of what is being described as the largest crypto heist on record. In a statement issued on Thursday 29 October 2026, the exchange said attackers had got into its core systems and taken around $6.3 billion (£4.7 billion) in assets. The news has dominated tech and crypto conversations around the world and rattled investors across the Web3 space.
How it happened
According to an urgent security update from Binance, early forensic findings point to a surprisingly ordinary way in. The company says a senior DevOps engineer's laptop was compromised, reportedly through a phishing or malware payload.
That gave the attacker a route into a back-end service container. From there, Binance says, the intruder got past secondary safeguards and submitted a wave of unauthorised withdrawals. These drained the platform's multi-signature hot wallets before its automated alerts could trigger a freeze.
What has been frozen, and what hasn't
Once the breach was spotted, security teams moved quickly to track the stolen funds on public ledgers. They worked with validators to freeze roughly $3 billion of the stolen tokens. However, Binance has admitted it cannot yet verify the status of the remaining $3.3 billion. There are fears that this money has been moved through privacy-mixing tools or cross-chain bridges.
Some blockchain compliance experts and international intelligence agencies are reportedly pointing towards North Korean state-sponsored hacking groups. Binance itself is taking a cautious line and says the attackers' identity has not been verified. The story has also been a major talking point on forums such as Hacker News.
Binance's response
To head off a run on the exchange, Binance moved fast to reassure customers. It says user funds are untouched and that the full $6.3 billion shortfall will be repaid using its Secure Asset Fund for Users (SAFU), alongside money from its own emergency profit reserves. "User funds are safe," the company's statement said.
Reassurance or not, the breach puts crypto security under fresh scrutiny. If the early findings hold, one compromised laptop sits at the start of the biggest crypto theft on record.
It is a reminder that even the most sophisticated systems can be undone by their weakest human link.
No comments:
Post a Comment