Binance, the world’s largest cryptocurrency exchange, has reported a security breach affecting approximately $6.3 billion in digital assets with about $3 billion already frozen as investigations continue into the incident.
The company disclosed on Friday, October 30, 2026, that unauthorised withdrawals were detected following a suspected compromise of its internal systems, prompting emergency security measures and the temporary suspension of withdrawals.
According to Binance, preliminary investigations suggest that attackers gained access through a compromised laptop belonging to a DevOps engineer, allowing them to access internal infrastructure and initiate unauthorised transactions.
The exchange said it had found no evidence that wallet private keys were compromised, although investigations were continuing to establish the full extent of the breach.
Binance has since worked with blockchain companies, stablecoin issuers and law enforcement agencies to identify and freeze affected assets across multiple networks.
Approximately $3 billion has been frozen, leaving an estimated $3.3 billion whose recovery status remains uncertain.
The company assured customers that it would cover losses associated with the incident through its Secure Asset Fund for Users (SAFU) and other corporate resources.
Binance also promised to publish an updated proof of reserves and a detailed technical report once investigations and security improvements are completed.
The breach has raised concerns across the cryptocurrency industry because of its scale and the potential implications for the security of digital assets held on centralised trading platforms.
Blockchain intelligence companies TRM Labs and Chainalysis have linked the attack to hackers associated with North Korea, citing similarities with previous cryptocurrency thefts attributed to the country.
However, the identity of those responsible has not been conclusively established, and investigations involving law enforcement agencies are ongoing.
The incident triggered selling pressure across cryptocurrency markets, with Bitcoin falling to a six-week low as investors reacted to uncertainty surrounding the exchange.
Shares of cryptocurrency-related companies also declined, reflecting concerns that the breach could weaken confidence in digital asset trading platforms.
Stablecoin issuers Tether and Circle participated in efforts to restrict the movement of affected assets, demonstrating the role of cooperation between blockchain companies in tracing and potentially recovering stolen funds.
The incident could become the largest cryptocurrency theft on record if the estimated losses are confirmed.
It also exceeds the approximately $1.5 billion stolen from cryptocurrency exchange Bybit in February 2025, an incident previously regarded as one of the industry’s largest security breaches.
For cryptocurrency users in Nigeria and other markets where Binance maintains a significant presence, the development raises questions about asset custody, withdrawal access and the financial protection available when trading platforms experience security failures.
Although Binance has pledged to compensate affected users, the scale of the incident could increase regulatory scrutiny of cryptocurrency exchanges and their internal security controls.
The exchange said deposits were operating normally in its latest service update, while withdrawals remained suspended pending additional security checks. It indicated that withdrawal services were expected to resume within 48 hours.
The company has not confirmed a final recoverable amount or disclosed when its investigation will be completed.
