Binance Freezes US$6.3 Billion in Assets After Major Crypto Exploit

A reported US$6.3 billion exposure at Binance has put confidence in the crypto market under pressure. The exchange paused deposits and withdrawals while it investigates, and token prices fell as traders weighed the scale of the incident and the possibility of further losses.

Binance said the estimated impact was “around US$6.3 billion” and that about US$3 billion had been frozen on-chain. The exchange cautioned that the frozen total “may continue to increase.” Co-founder Yi He said withdrawals were expected to resume within 48 hours. Binance also said it would cover all losses and that “user funds are safe.”

For customers, the immediate issue is access: withdrawals are temporarily unavailable while the exchange carries out security checks. For the wider market, the incident raises questions about how a large trading platform authorizes transactions and whether its response can limit the financial damage. The reported figures are estimates, and the asset-freezing effort is still developing.

How the reported exploit worked

Blockchain intelligence firm TRM Labs attributed the attack to TraderTraitor, which it described as a North Korean hacking unit. The firm said its assessment drew on on-chain and off-chain intelligence and that it had “high confidence” in the attribution.

TRM’s account points to transaction authorization as the apparent weak point. Attackers seemingly gained access to Binance’s systems and used internal software to approve transfers across 10 blockchains, including Bitcoin and Ethereum. Binance said a software engineer’s laptop may have been compromised, but reported no evidence that private keys for wallets had leaked.

That distinction matters for understanding the incident. Binance’s account suggests the suspected route involved access to systems used to approve transfers, rather than a confirmed leak of wallet keys. The company has not described the full chain of events, and the possibility of a compromised laptop remains under investigation.

Freezes and reserves may limit customer losses

Stablecoin issuers Tether and Circle said they had frozen funds connected to the reported exploit. Tether chief executive Paolo Ardoino said the company froze more than US$1.5 billion of its stablecoin “related to a potential Binance exchange hack.” Circle chief executive Jeremy Allaire said US$800 million of its coin had been frozen amid reports of a possible exploit involving Binance.

Those amounts show how issuers can respond when affected assets are identifiable and within their control. They do not establish how much of the reported US$6.3 billion can ultimately be recovered. Binance said roughly US$3 billion had been frozen across the affected assets, while the exchange’s estimate of the total impact could still change.

Binance also has the Secure Asset Fund for Users, or SAFU, a reserve established in 2018 to act as a backstop for customers in “extreme situations.” The exchange said in 2024 that the fund was generally maintained at around US$1 billion, though its value has fluctuated with market movements. The source article does not say how much SAFU holds now or how it would be used in this case.

Market reaction meets a fragile mood

Bitcoin fell 3 per cent at the end of the US session and another 3 per cent in Asian trading, dropping below US$77,000 to its lowest level since September. Other tokens also declined. Fredrick Collins, chief executive and co-founder of crypto data platform Velo Data, said the suspected Binance hack was weighing on coin prices. He argued that doubts about a major exchange can shake confidence across the industry, particularly as traders worry about the growing cyber capabilities of artificial intelligence.

The price decline followed a two-month rebound that had lifted sentiment among crypto investors. The Binance incident is therefore a setback to that recovery, though the article does not establish how much of the market move came from the exploit itself. Traders were also bracing for greater volatility, with US$11 billion in options set to expire on Friday.

The event adds to a run of security concerns. In recent months, hundreds of millions of dollars were drained from Bitget, while tampering connected to Ledger devices caused losses worth millions. Binance’s reported exposure is larger than the almost US$1.5 billion in tokens attackers took from Bybit in February 2025, previously the largest publicly known crypto hack.

A longer record of exchange failures

Exchange thefts and fraud have shaped crypto’s history, with the collapse of FTX in November 2022 among the industry’s most damaging episodes. Japan-based Mt. Gox, hit by a hack in 2011, eventually went bankrupt; the tokens taken were later worth billions of dollars at current market prices.

Those cases do not prove that Binance will face the same outcome. They do explain why a major exchange incident can affect confidence beyond the platform’s own customers. Tian Zeng, chief executive of crypto hedge fund Third Eye, said repeated successful exploits leave the industry exposed, especially as new AI models emerge.

Recent attacks have also affected companies outside crypto. South Korea’s Daishin Securities disclosed a data leak affecting about 38,000 customers, while Mirae Asset Global Investments reported a hacking incident, Yonhap reported. In Japan, hackers threatened on Tuesday to release trader data held through a GMO Internet Group cloud service for foreign-exchange trading.

TRM Labs’ Ari Redbord said attackers are operating at unprecedented speed and scale, while tracking tools are also improving. He pointed to stablecoin issuers freezing funds within hours and investigators tracing money across blockchains in real time. For Binance customers and the broader market, the next measures of the response are practical ones: how quickly withdrawals resume, how much of the affected assets remain frozen, and whether the exchange can clarify the route used to authorize transfers.