Binance Suffers Record Crypto Hack Linked to North Korea

Hackers stole $6.3 billion in cryptocurrency from Binance, marking what analytics firms and industry executives describe as the largest digital asset heist in history. US blockchain analysis firms TRM Labs and Chainalysis attributed the raid to North Korean actors who targeted Binance wallets across ten blockchains and shifted the majority of funds in approximately twenty minutes.

Crypto Prices and Sector Equities Drop After Breach

Global markets reacted sharply during Asian trading hours following the breach. Bitcoin dropped over 3% to a six-week low of $76,368, while Ether fell more than 3% to a two-month low of $2,178. BNB, the native token used to pay fees on Binance, slid 5% over a twenty-four hour window to $709.70 according to CoinGecko data. Equities connected to the sector also felt immediate pressure. Shares in Coinbase Global dropped 4.8% and Strategy slid nearly 6% in extended US trading.

In response to the unauthorized withdrawals, stablecoin issuers and platform partners moved to contain the damage. Tether froze nearly $1.57 billion in assets tied to the incident, while Circle locked funds. World Liberty Financial worked with cryptocurrency custodian BitGo to freeze roughly $2 million in World Liberty tokens alongside $27 million in stablecoins. Binance co-founder Yi He stated that the exchange would cover all hacking losses and noted that about $3 billion had been located and frozen with the assistance of partners.

It’s the biggest hack in history. — Aravind Srinivasan, head of large crypto market maker GSR’s systematic OTC business

Internal Probe Links Breach to Compromised Engineer Laptop

An initial internal investigation by Binance suggested the breach may have originated from a compromised laptop belonging to one of its engineers, granting an attacker access to internal systems to submit unauthorized withdrawals. TRM Labs reported that several technical characteristics of the attack matched earlier heists linked to North Korea, including the 2025 Bybit exchange hack previously attributed to Pyongyang by the US Federal Bureau of Investigation. TRM Labs stated it made this attribution with high confidence.

North Korea’s mission in Geneva and its embassy in China did not immediately respond to Reuters requests for comment regarding the allegations. Binance announced that its user deposits remained unaffected and stated an expectation to resume regular withdrawal services within 48 hours of the initial incident. The exchange maintains a secure asset fund for users, held entirely in Bitcoin to protect user assets during security breaches.

Broader Industry Ramifications

Analysts warned that the security breach could accelerate a shift in user behavior across the digital asset ecosystem. Tim Sun, senior researcher at HashKey Group in Hong Kong, noted that the incident may further dampen risk appetite and prompt investors to reassess counterparty, solvency, and liquidity risks on centralized exchanges. Bernardo Brites, CEO of Trace Finance, observed that artificial intelligence allows malicious actors to identify vulnerabilities faster than developers can patch them, driving users away from smaller and medium-sized platforms unable to absorb large-scale losses.

The event compounds a difficult period for digital assets, which faced prior pressure from higher US interest rates and softer demand from exchange-traded fund buyers. Binance reported having approximately $162.8 billion in assets under custody as of its 2025 annual report, serving more than 335 million registered users globally.

More on North Korea: US Treasury Sanctions North Korea Network for Scamming US Firms · North Korea Breached South Korean Lines in Simulation: Business AM · North Korea Denies Rumors That Kim Jong-un Is in a Coma