Cointelegraph Binance Hack: $6.3 Billion Stolen Amid Rapid Asset Conversion
Article Content
- •Binance lost approximately $6.3 billion in a hack executed in under 20 minutes.
- •Attackers converted stablecoins to Bitcoin and Ether to evade freezing efforts.
- •$3 billion of the stolen assets have been frozen, but significant funds remain untraceable.
On October 30, 2026, Binance suffered a large hack resulting in the theft of approximately $6.3 billion in cryptocurrency. The attackers, linked to North Korean hackers, executed the breach in under 20 minutes, quickly converting stablecoins into less traceable assets like Bitcoin and Ether. As a result, around $3 billion of the stolen funds were frozen by issuers such as Tether and Circle. The hack has raised concerns about the security of centralized exchanges, especially given Binance's previous legal troubles. Despite the freezing efforts, a significant portion of the stolen assets remains under the attackers' control. Binance has pledged to cover the losses using its emergency reserves, but experts warn that financial strength does not equate to operational security.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of assets were stolen?
How much of the stolen funds have been frozen?
What measures is Binance taking in response?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…