Binance is working to contain the consequences of an estimated $6.3 billion cryptocurrency theft, potentially the largest in the industry’s history, after attackers gained unauthorized access to systems used to process digital asset transactions.
The incident, disclosed on Thursday, October 29, 2026, prompted the world’s largest cryptocurrency exchange to temporarily suspend withdrawals and coordinate with blockchain companies and law enforcement agencies to trace the stolen funds.
Binance said approximately $3 billion in affected assets had been frozen through cooperation with industry partners.
The company also pledged to cover customer losses using its Secure Asset Fund for Users (SAFU) and corporate resources.
How the Security Breach Unfolded
According to Binance’s preliminary investigation, the incident may have involved a compromised laptop belonging to a DevOps engineer.
The unauthorized access reportedly enabled attackers to interact with internal systems and initiate fraudulent cryptocurrency withdrawals.
However, Binance subsequently identified additional points of compromise, indicating that the attack was more complex than initially understood.
Blockchain intelligence firms estimated that most of the stolen assets were transferred within approximately 20 minutes.
The affected transactions involved cryptocurrency wallets across multiple blockchain networks.
Binance said its investigation had not established that wallet private keys were compromised.
The company is continuing to investigate the security failure and has indicated that it will publish additional technical findings once the review is complete.
