On Thursday, October 29, 2026, Binance, the world’s largest crypto exchange by trading volume, confirmed what is now being called the biggest crypto hack in history. The exchange said roughly $6.3 billion in assets were affected. That is more than four times the $1.5 billion stolen from Bybit in 2025, the previous record, which was linked to North Korea.
Here is what we know so far, how the attack appears to have worked, and what it could mean for the wider industry.
What happened
Binance suspended all deposits and withdrawals while it worked with law enforcement to secure its infrastructure and trace the stolen funds. Estimates of the total loss vary by outlet, from about $5.7 billion to $6.3 billion, and Binance itself has cautioned that the final numbers for stolen, frozen and recovered assets could change.
Binance co-founder Yi He said on X that the company would cover all losses, and the company has stated that user funds are safe. Former CEO Changpeng Zhao, who remains a majority shareholder, said it does look like a hack.
The stolen assets spanned several networks, including Bitcoin, Ethereum and TRON. One tally put the losses at about $1.45 billion in Bitcoin and $875 million in Ether, alongside large amounts of stablecoins.
How it happened (so far)
Binance’s initial investigation points to a compromised laptop belonging to a DevOps engineer. According to the company, that gave an attacker access to a “service container” inside its systems and the ability to submit unauthorized withdrawal transactions. Binance also said it has found no evidence that private keys were leaked from its wallets.
In other words, this looks like a breach of the exchange’s operational infrastructure rather than a flaw in Bitcoin or Ethereum themselves.
Some independent security researchers have suggested a different mechanism. Reporting from BeInCrypto said they suspect attackers abused an Ethereum feature known as EIP-7702 to take control of a Binance hot wallet, and that about 167,000 ETH and 1.6 billion USDT moved out of one wallet within minutes. Binance has not confirmed that theory, so it should be treated as unverified for now.
Who may be responsible
Blockchain analysts have pointed to North Korea’s Lazarus Group, the state-linked hacking collective behind several of the largest crypto thefts, including Bybit. Binance has not confirmed attribution, and investigators typically need time to firm this up.
The response: freezing the funds
The speed of the response may be the most important part of this story. Tether said it froze about $1.6 billion in USDT linked to the incident, and Circle froze a further portion of USDC. Overall, around $3 billion of the stolen funds has reportedly been frozen and could potentially be recovered, according to Axios.
That is a major difference from past hacks, where stolen funds were often laundered before anyone could react.
Market impact
Markets reacted quickly. Bitcoin fell below $79,000, Ether dropped, and roughly $1 billion in leveraged futures positions were liquidated, according to CoinDesk. Binance’s own BNB token fell nearly 10% before partially rebounding. Institutional investors reportedly moved funds off exchanges, and India’s largest crypto exchange curbed futures trading as liquidity was disrupted. Standard Chartered has warned of more pain ahead.
What it could mean for the crypto industry
1. A new test of trust in centralized exchanges. If the largest exchange in the world can be drained, expect louder calls for self-custody and a renewed push toward decentralized alternatives. Whether users act on that, or stay for the convenience of exchanges, is an open question.
2. Regulatory pressure is likely to rise. After Bybit, analysts expected tighter oversight of exchanges. A hack of this size makes stricter rules on security standards, proof of reserves and incident disclosure more likely in many jurisdictions.
3. Stablecoin issuers are becoming key enforcers. Tether’s and Circle’s freezes limited the damage and may become a standard part of the incident-response playbook. They also highlight how much control these companies hold over flows of funds, which will fuel debate about centralization.
4. Operational security is the real battleground. If the laptop compromise explanation holds, the weak point was not cryptography but people and internal access. Expect exchanges to tighten controls on developer access, secrets management and withdrawal approval flows.
5. The AI-security debate will intensify. The breach comes as security teams worry that advances in AI could make attacks easier. No source has said AI played a role here, but the timing will feed that conversation.
6. Geopolitical stakes. If Lazarus is confirmed, the theft would add to concerns that stolen crypto funds a state weapons program, which could mean more sanctions and international enforcement.
7. Short-term volatility. Analysts suggest markets may not find a new base until frozen assets are released and clearer details emerge. Binance’s ability to cover the losses, and how much it recovers, will be closely watched.
What users should do
Binance says user funds are safe, but this is a good moment to review your own security. Use hardware-based two-factor authentication, enable withdrawal allowlists, avoid leaving large balances on any exchange longer than needed, and be alert to phishing messages exploiting the news.
The bottom line
The Binance hack is a record-setting event, but the quick freezes and the promise to cover losses may soften the blow for users. The bigger consequences will play out over the coming months in regulation, exchange security practices and how much trust people place in centralized platforms.