Cryptocurrency exchange Binance has reported a security incident involving the alleged theft of approximately $6.3 billion in digital assets, a figure that, if confirmed, would make it the largest cryptocurrency theft recorded to date. The incident has raised concerns about the security of centralised exchanges and the protection of large volumes of customer funds.
The company said it suspended deposits and withdrawals on Thursday as its teams responded to the incident. Binance also reported that approximately $3 billion in funds had been frozen following the suspected attack.
Compromised Engineer’s Laptop Suspected
According to Binance’s initial investigation, the attacker may have gained access to an engineer’s compromised laptop before carrying out unauthorised transactions. The exchange has not yet published a complete technical explanation of how the breach occurred.
Binance said it would cover the reported losses and assured customers that their funds were safe. The company also said its security teams were working continuously to address the incident and investigate the circumstances.
In a statement to Al Jazeera, Binance said it was cooperating with law enforcement agencies to identify those responsible. It added that a detailed technical post-mortem would be released after the investigation was completed.
Founder Changpeng Zhao had earlier indicated that the exchange appeared to have been hacked.
TRM Links Attack to North Korean Hacking Unit
Blockchain intelligence company TRM said it assessed with high confidence that the operation was carried out by TraderTraitor, a hacking unit linked by investigators to North Korea’s Lazarus Group.
Ari Redbord, TRM’s global head of policy, described the incident as unprecedented and said thefts of this scale could have implications beyond the cryptocurrency industry. He told Al Jazeera that funds stolen by North Korean-linked groups have been associated with weapons proliferation and other destabilising activities.
However, the attribution remains an assessment by TRM and should not be treated as a final determination of responsibility. Law enforcement investigations are ongoing.
Bitcoin Falls After Security Incident
The reported theft also affected cryptocurrency market sentiment. Bitcoin, the largest cryptocurrency by market value, reportedly declined by around 5%, falling below $77,000 after news of the incident emerged.
Sean Foley, a cryptocurrency markets expert at Macquarie University in Sydney, told Al Jazeera that an incident involving a major centralised exchange could weaken investor confidence across the wider digital-asset market.
He also highlighted the risks associated with keeping assets on centralised trading platforms. According to Foley, the security of customer holdings depends significantly on the systems and safeguards maintained by the exchange.
The incident may also encourage some traders to consider decentralised alternatives, although these platforms carry their own operational and security risks.
Previous Crypto Theft Record Surpassed
If the reported $6.3 billion figure is confirmed, the Binance incident would exceed the previous record cited in the report. That record was set in 2025, when North Korea-linked Lazarus Group was reported to have stolen approximately $1.5 billion from cryptocurrency exchange Bybit.
TRM’s 2026 Crypto Crime Report also estimated that cybercriminals stole around $2.87 billion in cryptocurrency assets across nearly 150 hacking incidents during 2025.
The scale of the reported Binance incident would therefore represent a major development in the digital-asset security landscape.
Binance’s Market Position Raises Wider Concerns
Founded in 2017 by Changpeng Zhao, Binance is among the world's largest cryptocurrency exchanges. According to CoinMarketCap figures cited in the report, the platform had approximately $155 billion in assets under management, placing it ahead of other exchanges.
The incident has renewed attention on how large trading platforms secure customer funds, manage employee-device risks and respond to suspected unauthorised transactions.
For businesses and investors operating in digital finance, the episode also highlights the importance of cybersecurity controls, transaction monitoring and independent risk assessments. Organisations handling substantial digital assets may consider reviewing their internal safeguards and financial investigation and forensic support arrangements as part of broader risk management.
Binance has said it will publish further technical details after its investigation. Until then, the precise method of the alleged theft, the final amount of confirmed losses and the identity of those responsible remain subject to verification.