Binance Freezes Assets After Reported $6.3 Billion Security Breach

Binance, the world’s largest cryptocurrency exchange, is facing intense scrutiny after a security breach with an estimated financial impact of $6.3 billion, in what analysts say could become the biggest cryptocurrency theft on record.

The exchange said it had worked with blockchain partners to freeze approximately $3 billion in affected assets. However, the whereabouts and recovery prospects of the remaining funds were still unclear as investigations continued.

Blockchain analytics firm Chainalysis said it had confirmed that at least $5.912 billion was stolen, with the funds moved across several blockchain networks, including Bitcoin, Ethereum, Tron and Ripple. The firm said its investigators were working to identify further opportunities to freeze the assets and support recovery efforts.

The breach triggered an immediate reaction across cryptocurrency markets, with Bitcoin and Ether both falling by more than three per cent. Shares in Coinbase Global also dropped, while shares in Strategy, a major corporate holder of Bitcoin, declined in extended trading.

Analysts warned that the incident could have consequences beyond the direct financial losses, particularly because Binance plays a major role in global cryptocurrency trading.

Amanda He, chief investment officer at ChainUp Investment, said the initial price decline may have been driven by the hacker selling assets, before anxiety spread among investors. She said her firm had reduced its exposure to Binance and moved assets that could be withdrawn into safer holdings.

Tim Sun, a senior researcher at HashKey Group, warned that the disruption could create liquidity problems across the wider digital-asset market. He explained that restrictions on deposits and withdrawals could affect market makers’ ability to transfer funds between trading platforms.

Geoffrey Kendrick, head of digital assets research at Standard Chartered, also cautioned that cryptocurrency prices could face further pressure until more information about the breach emerges and frozen assets are released.

Other analysts said the incident could encourage investors to reconsider where they hold their digital assets and whether decentralised exchanges offer an alternative to centralised platforms.

Binance said its preliminary investigation suggested that the attacker may have gained access through a compromised laptop belonging to a DevOps engineer. The company, however, said it had found no evidence that wallet private keys had been leaked and indicated that further technical details would be released after its investigation.

As an immediate response, Binance temporarily suspended deposits and withdrawals, revoked authorisation for the affected address and contacted law enforcement agencies and blockchain intelligence firms to help trace the stolen assets.

The exchange also pledged to cover all losses through its Secure Asset Fund for Users, known as SAFU, and company funds. It maintained that customer funds were safe and said it would publish an updated proof of reserves after remediation work was completed.

Blockchain intelligence firms TRM Labs and Chainalysis have linked the attack to North Korea’s TraderTraitor hacking group, citing similarities with previous cyberattacks attributed to the group. The attribution remains part of the ongoing investigation.

The breach has renewed concerns about the security of centralised cryptocurrency exchanges, particularly following previous high-profile attacks, including the $1.5 billion theft from Bybit in 2025.

For Binance, the immediate challenge is to recover as much of the stolen cryptocurrency as possible, restore normal operations and reassure users that their assets remain protected. Analysts say the exchange’s ability to meet its financial commitment and restore confidence will be crucial to determining the incident’s longer-term impact on the cryptocurrency industry.