How was the breach executed?
The attackers successfully siphoned approximately $6.3 billion from Binance by exploiting an Ethereum network upgrade designed to enhance wallet functionality. According to reports, the hackers leveraged a vulnerability within this 2025 protocol update to bypass standard security measures, utilizing 50 forged signatures from the exchange’s own internal wallet system to authorize the illicit transfers. CEO Richard Teng stated that the perpetrators took active steps to erase digital forensic evidence, complicating the initial investigation into how the security perimeter was breached.
Who is responsible for the theft?
Multiple blockchain forensics firms, including TRM Labs and Chainalysis, have linked the breach to the North Korean state-sponsored group known as TraderTraitor. This actor has been previously implicated in other high-profile digital asset thefts, such as the Bybit exchange hack. While the exact methodology remains under investigation, industry analysts at firms like Elliptic have characterized the Binance breach as the largest theft in the history of the cryptocurrency sector, significantly eclipsing previous security incidents.
What is the status of the stolen funds?
Binance has confirmed that it has set aside $6.34 billion of company funds to ensure all affected users are fully reimbursed. Law enforcement agencies, including the Federal Bureau of Investigation (FBI) and the U.S. Secret Service, are actively collaborating with the exchange to trace and recover the stolen assets. As part of these recovery efforts, stablecoin issuer Circle has reportedly frozen $823 million tied to the exploit, contributing to a total of approximately $3 billion in stolen funds that have been successfully frozen across various platforms.
"Binance has set aside more than $6.3 billion from the company’s funds to cover the shortfall."
What are the next steps for the exchange?
Binance is currently working toward a projected Sunday restart for its withdrawal services as it continues to finalize the recovery process. The exchange has committed to publishing a comprehensive proof of reserves report on Monday to reassure investors of its ongoing financial stability. Throughout this period, the company maintains that it is prioritizing user security and cooperating closely with international authorities to track the remaining stolen capital that has not yet been frozen.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $76,490 | -5.39% | $1537.9B |
 Ethereum ETH | $2,224 | -4.43% | $271.8B |
 BNB BNB | $695.73 | -6.41% | $91.5B |
 XRP XRP | $1.24 | -3.49% | $78.4B |
 Solana SOL | $94.09 | -6.14% | $55.5B |
 Dogecoin DOGE | $0.0746 | -5.74% | $11.7B |
 Cardano ADA | $0.191 | -5.43% | $7.2B |
Live data: CoinGecko — 2026-10-30 19:21 UTC
