Overview
- Late Thursday, attackers moved roughly $6.3 billion from Binance operational wallets across multiple blockchains in about 20–30 minutes, a flow trackers say could be the largest crypto exchange theft on record.
- Blockchain intelligence firms including TRM Labs and Chainalysis have high confidence the operation matches DPRK-linked TraderTraitor activity, citing technical links to prior hacks and rapid laundering patterns.
- Binance and partners have frozen about $3 billion on-chain, with Tether reporting roughly $1.57 billion and Circle more than $800 million locked, while an estimated $3.3 billion remains under attacker control and is being laundered through swaps, bridges and OTC trades.
- Binance’s preliminary probe points to a compromised DevOps engineer laptop and possible manipulation of hot-wallet signing or authorization systems rather than a simple private-key leak, and the company has revoked the affected authorizations.
- The exchange says user funds are safe, pledged to cover losses using SAFU and company funds, temporarily suspended withdrawals for security checks, and promised a technical post-mortem and updated proof-of-reserves as law enforcement continues tracing and freeze efforts.