Roughly $6.3 billion in cryptocurrency was drained from Binance wallets in what analysts are calling the biggest digital asset theft on record. Blockchain records show the bulk of the heist unfolded in about 20 minutes, starting shortly after 2000 GMT on a Thursday.
Binance, the world's largest crypto exchange, initially blamed a compromised laptop, but later admitted investigators had found "additional points of breach". According to analytics firm TRM Labs, the attackers got into the exchange's signing infrastructure — the system that authorises transactions — which let them issue instructions emptying the wallets. As Hong Kong crypto lawyer Joshua Chu put it, they may not have stolen the vault key, but hijacked the system telling the vault to open.
Who did it? No one has claimed responsibility, and Binance co-CEO Richard Teng says the investigation hasn't identified the attackers. But several US blockchain firms say the attack resembles operations attributed to North Korean hackers, and TRM is highly confident the same group behind last year's Bybit theft — which the FBI blamed on North Korea — carried this one out too. Chainalysis notes funds from a recent Bitget hack are being mixed with the Binance proceeds.
There's a partial silver lining: about half the stolen assets were stablecoins, and issuers including Tether, Circle, Ripple and World Liberty Financial (the Trump family's crypto venture) can freeze them remotely — and did. That's roughly $3 billion locked out of reach, though it doesn't mean the coins return to Binance. The harder-to-catch money is bitcoin and ether, which no company can freeze. TRM estimates around $2.4 billion of that is already effectively gone, with some funds posted as collateral to borrow more ether. Experts say laundering window is short: within hours, marked coins get blacklisted and tend to sit untouched for years.
Binance says losses will be covered by its $1 billion Secure Asset Fund for Users plus company resources, so customers aren't expected to wear the losses directly. Still, the breach rattled markets — crypto prices fell the next day and stablecoin values dropped as investors pulled back. It also adds to a grim run of numbers: TRM counts $2.9 billion stolen across nearly 150 crypto incidents last year alone.
Why does this matter if you're a traveller, not a trader? Plenty of holidaymakers now hold crypto or use stablecoins for payments and transfers on the road. The practical takeaways: an exchange holding your coins is a point of failure, no matter how big its name — assets in your own wallet are far safer. Freeze-able stablecoins can be clawed back by issuers in a crisis, which cuts both ways. And if you do use a major exchange, check that it maintains an insurance or protection fund and what it actually covers. Biggest exchange, biggest target — worth thinking about before your next trip.
