The cryptocurrency world is facing an unprecedented security crisis after Binance, the world’s largest cryptocurrency exchange, suffered a devastating cyberattack on 29th October 2026, resulting in the theft of approximately $6.3 billion in digital assets.
The incident is believed to be the largest cryptocurrency theft in history, possibly even the biggest heist in history!
How can this happen in such a secure environment?
Investigators believe hackers compromised Binance’s internal transaction-signing infrastructure, enabling them to authorise enormous unauthorised withdrawals from its hot wallets.
The FBI has reportedly attributed the attack to North Korea’s TraderTraitor hacking group, although investigations remain ongoing.
The scale of the theft initially raised fears about Binance’s ability to meet customer withdrawals and maintain confidence in its financial position.
Withdrawals suspended
Binance temporarily suspended withdrawals while it investigated the breach and strengthened security systems.
However, the exchange moved quickly to reassure customers, pledging that users would not bear the financial losses. It set reportedly aside approximately $6.34 billion from corporate funds, its Secure Asset Fund for Users (SAFU) and insurance reserves to replace the stolen assets.
Recovery
By 31st October, Binance reported that 90% of the missing assets had been replenished, with the remaining 10% involving less liquid cryptocurrencies.
Recovery efforts have also achieved some success. Blockchain investigators and cryptocurrency issuers have helped freeze approximately $3 billion of stolen funds, restricting the hackers’ ability to move or convert them.
Damage limitation
But confidence has taken a significant hit. When withdrawals gradually reopened on 1 November, customers withdrew $4.65 billion, against deposits of just $1.01 billion. The resulting net outflow of $3.64 billion represented approximately 2.1% of Binance’s reported $171 billion in assets.
Confidence
Although withdrawal volumes subsequently began stabilising, the episode highlights a fundamental weakness in cryptocurrency markets: even the largest exchanges remain vulnerable to sophisticated cyberattacks.
Binance may have the financial resources to absorb the losses, but rebuilding customer confidence could prove considerably harder.
The incident raises fresh questions about security, transparency and whether cryptocurrency exchanges can truly guarantee the safety of billions in digital wealth.
Footnote
Binance founder Changpeng Zhao (CZ) pleaded guilty in November 2023 to violating U.S. anti-money-laundering laws, resigned as chief executive and served a four-month prison sentence in 2024. Despite his conviction, he retained his estimated 90% ownership stake in Binance.
In October 2025, President Donald Trump granted him a full presidential pardon. The pardon did not erase the historical events or Binance’s separate corporate wrongdoing, but it removed the federal criminal consequences for CZ.
Legally, a criminal conviction does not automatically prevent someone from owning a private company, and ownership is distinct from day-to-day management.
Consequently, CZ can remain the majority shareholder of the world’s largest cryptocurrency exchange, even though he is no longer its chief executive.
It raises an uncomfortable question about accountability: how can an individual convicted of serious financial regulatory offences retain such enormous influence over a global financial institution?