Overview
- Binance disclosed on Friday, October 30 that roughly $6.3 billion in digital assets were involved in a major security incident and that deposits and withdrawals have been temporarily suspended while investigations continue.
- The exchange and industry partners have so far traced and frozen about $3 billion of the affected funds with stablecoin issuers Tether and Circle blocking roughly $1.57 billion and more than $800 million respectively.
- Blockchain analysts, led by TRM Labs, have attributed the rapid transfers to a North Korea-linked group called TraderTraitor and say most of the funds were moved in about 20 minutes.
- Binance attributes initial access to a compromised engineer laptop or service container and says it will cover customer losses from its SAFU reserve and company funds while working with law enforcement and forensic firms.
- The theft pushed major crypto prices lower and highlights broader risks of centralized custody, increasing the chance of tighter industry rules and renewed focus on exchange security and rapid on‑chain tracing efforts.