According to CNBC, crypto exchange Binance said a security incident affected about $6.3 billion in client assets, with about $3 billion frozen on-chain, the largest crypto hack on record [1]. Binance initially said a compromised DevOps engineer's laptop may have let an attacker reach a service container and submit unauthorized withdrawals, though Co-CEO Richard Teng later said the attack was more complex; TRM Labs and Chainalysis pointed to North Korea-linked TraderTraitor, while Binance has not attributed it [1]. Binance users should rely on official announcements for withdrawal status, note that affected address authorizations were revoked, and beware of scams impersonating Binance offering compensation [1].
Unauthorized withdrawals drain about $6.3 billion in client assets from Binance; exchange pauses withdrawals and pledges SAFU fund to cover losses
1 min read
- Disclosed
- Oct 29, 2026
- Occurred
- Oct 29, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Verify via official channels verify[1]
Use official Binance announcements to confirm withdrawal and address status, and beware of scams.
References
Media1
- [1]
“Binance said Friday that a security incident impacted about $6.3 billion in client assets, with around $3 billion frozen on-chain, marking the largest crypto hack on record.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.