Channelnewsasia Binance Suffers $6.3 Billion Hack, 90% of Assets Replenished
Article Content
- •Binance lost $6.3 billion in a hack attributed to a compromised engineer's laptop.
- •90% of stolen assets have been replenished using internal funds and SAFU.
- •The incident caused significant drops in crypto prices and over $3 billion in frozen assets.
On October 31, 2026, Binance reported a significant security breach resulting in the theft of $6.3 billion in assets, marking it as the largest crypto theft to date. The attack was attributed to a compromised engineer's laptop, which allowed hackers to infiltrate the platform. Binance has managed to cover 90% of the stolen assets, utilizing $6.34 billion from its internal funds and partially deploying its $1 billion Secure Asset Fund for Users (SAFU). The remaining 10% consists of less liquid tokens, which may take longer to recover. Following the incident, crypto prices fell across the board, with Bitcoin and Ethereum dropping over 4%. As of now, more than $3 billion in crypto assets remain frozen on-chain while Binance works to address the fallout. The exchange plans to resume withdrawal services on November 1, 2026.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Binance in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What assets were affected?
How is Binance addressing the hack?
What should users do now?
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…