Overview
- Binance confirmed late Thursday that roughly $6.3 billion in assets were moved without authorization and that withdrawals and some deposits were temporarily suspended for security checks.
- The company says about $3 billion of the diverted funds have been frozen on‑chain by partners and stablecoin issuers and that it has reserved more than $6.34 billion of SAFU and company funds to cover losses.
- Binance’s preliminary forensics point to a compromised DevOps engineer laptop and additional access points as the entry that allowed automated, rapid withdrawals across multiple service containers.
- Blockchain analysis firms TRM Labs and Chainalysis report patterns consistent with North Korea‑linked hacker units but official attribution has not been confirmed and law enforcement remains engaged.
- The theft moved across roughly ten blockchains in about 20 minutes, knocked major crypto prices lower, limited customer access to funds in the near term, and is likely to intensify regulatory and custody scrutiny of centralized exchanges.