• Binance has suspended deposits and withdrawals after a theft of approximately $6.3 billion, the largest crypto heist on record, and says it will cover customer losses.
  • The FBI is aware of the incident and is working with partners to assess the scope, while Binance cooperates with U.S. authorities; around $3 billion in assets has been frozen by stablecoin issuers and other partners.
  • Bitcoin tumbled to a six-week low of $76,368 as the attack stoked fresh concerns about centralized exchange custody and risk appetite in digital assets.

Massive Breach

Binance, the world’s largest cryptocurrency exchange, is scrambling to restore normal operations after disclosing a theft of roughly $6.3 billion in digital assets, the largest such heist in the industry’s short history. The attack unfolded over about 20 minutes late on October 29, according to blockchain analytics firm TRM Labs, which estimates $6.36 billion was moved across 10 blockchains. Binance’s own rounded estimate is $6.3 billion.

The exchange halted deposits and withdrawals for security checks and said Friday it expected withdrawals to resume within 48 hours, though that timeline remains an estimate and not a confirmation that service has restarted. Binance has pledged to cover customer losses using approximately $6.34 billion of company funds, but it has not detailed the source of those funds, according to people familiar with the matter. The exchange’s dedicated customer-protection reserve—a $1 billion bitcoin fund now valued at roughly $1.2 billion—is far smaller than the gross theft.

Investigation and Attribution

The FBI said it is aware of the incident and is engaged with relevant partners to understand the scope of activity and evaluate potential impacts. Reuters (TRI) reported that Binance is working with the FBI and the U.S. Secret Service, citing a person familiar with the situation. Binance has not publicly confirmed the extent of its cooperation, and the FBI statement does not establish attribution, recoverability, or final losses.

Binance initially pointed to a compromised engineer’s laptop as a possible entry point for unauthorized withdrawals, but subsequently reported additional breach points, leaving the full attack path unresolved. TRM Labs and Chainalysis independently attribute the attack to North Korea’s TraderTraitor group, though Binance says its investigation has not yet established responsibility. The FBI previously attributed the February 2025 Bybit theft to the same group, but that earlier finding should not be confused with official attribution of the current Binance incident.

Frozen Assets and Recovery Hopes

Roughly $3 billion in affected assets has been frozen by stablecoin issuers and other partners, according to the companies involved. Tether froze nearly $1.57 billion and Circle (CRCL) more than $800 million, while Ripple, World Liberty Financial, and others also assisted. The aggregate frozen amount is approximately $3 billion; individual figures should not be added to that total again.

Recovery, however, is not guaranteed. Frozen assets have not necessarily been returned, and returning funds generally requires legal processes such as court orders or seizure warrants, according to TRM’s Ari Redbord. Chainalysis researcher Eric Jardine cautioned that returning funds can take months or years even when the technical freeze happens quickly. The distinction between freezing and recovery is critical for customers awaiting reimbursement.

Market Fallout

The attack jolted cryptocurrency markets already under pressure from higher U.S. interest rates and softer demand from exchange-traded-fund buyers. Bitcoin fell to a six-week low of $76,368, while ether dropped more than 3% to a two-month low of $2,178 before stabilizing. BNB, the token originally launched as Binance Coin, was down 5.3% over the preceding 24 hours at the time Reuters reported. Shares of listed cryptocurrency exchanges also came under pressure.

“The immediate impact is concentrated in cryptocurrency markets and confidence in exchange custody,” said HashKey (3887.HK) researcher Tim Sun, warning that the breach could further weaken risk appetite and lead investors to reassess assets held on centralized exchanges. Moody’s (MCO) analyst Cristiano Ventricelli said the wider consequences depend on final losses, exposed counterparties, recoveries, and whether disruption or loss of confidence spreads through the digital-asset ecosystem.

Regulatory Scrutiny Intensifies

The incident arrives against the backdrop of Binance’s substantial compliance history. The exchange’s approximately $4.3 billion U.S. settlement in 2023 addressed anti-money-laundering and sanctions violations, and a separate SEC civil enforcement case was dismissed with prejudice in May 2025 as a policy matter—a dismissal that was not a determination that Binance’s cybersecurity controls were adequate.

Abu Dhabi’s Financial Services Regulatory Authority, which issued Binance’s main operating licence, said it is engaging closely with the company and monitoring the incident. No new hack-specific penalty or regulatory order has been established. The attack also highlights the growing role of stablecoin issuers in post-theft response: Tether and Circle can freeze tokens and, through legal processes, facilitate their return, while bitcoin and ether lack an issuer with equivalent freeze powers, forcing investigators to trace them and seek interception at cooperating exchanges.

Leadership and Solvency Questions

Binance operates under a dual-leadership structure introduced in December 2025, with Yi He and Richard Teng serving as co-CEOs. Teng had succeeded founder Changpeng Zhao in November 2023 following Zhao’s guilty plea over U.S. anti-money-laundering violations. The incident reporting reviewed does not announce a hack-related leadership departure or restructuring.

Fundstrat’s Sean Farrell offered a preliminary assessment that the breach does not currently appear to create significant solvency risk, assuming eventual recovery of frozen assets and access to Binance’s own resources. That judgment is not an independent audit or guarantee. The exchange’s 335 million registered users and approximately $162.8 billion in assets under custody, cited in its 2025 annual report, underscore the scale of the customer base affected by the service suspension.

What’s Next

The most informative developments in the coming days will be the restoration of withdrawals, the completeness of Binance’s technical investigation, evidence supporting its loss-coverage commitments, and whether customer outflows remain orderly. Farrell identified reopening speed and subsequent outflows as key indicators of financial stress. Freezing approximately $3 billion improves recovery prospects but does not erase the loss.

As of October 30, 2026, 10:13 a.m. EDT, this is a developing incident; amounts, technical findings, and service-restoration estimates remain provisional. Binance did not immediately respond to a request for comment on the FBI’s engagement or the status of its investigation.