> ## Content Index
> Fetch the complete content index at: https://www.businessbagel.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Binance is covering an estimated $6.3 billion hack, with nearly half is already frozen
- URL: https://www.businessbagel.com/binance-is-covering-an-estimated-6-3-billion-hack-and-nearly-half-is-already-frozen/
- Published: 2026-10-30T11:55:19.000Z
- Updated: 2026-10-30T11:55:45.000Z
- Description: The world's biggest crypto exchange says one compromised laptop may have let an attacker in, and that customers will not carry the loss.
- Author: Christian Maidman
- Tags: Companies, Business Bagel News, #breaking

Every crypto hack headline comes with the same question attached: who ends up paying? Binance, the world's biggest crypto exchange, put the damage from Thursday night's breach at around $6.3 billion, and said it will cover all losses from its SAFU emergency fund and its own money. "User funds are safe," it said.

That makes it the biggest crypto hack on record. The previous record belonged to Bybit, which lost about $1.5 billion in February 2025, so this one is roughly four times the size.

## One laptop, one container

Binance's first look points at a DevOps engineer, one of the people who keep its systems running. Their laptop appears to have been compromised, which gave the attacker access to a service container, a piece of Binance's internal software, and from there the ability to submit withdrawals nobody had approved. Binance says it has found no evidence that any wallet private keys, the master passwords to its crypto, were leaked. It has not yet said how the laptop was compromised, and has promised a full technical post-mortem once the facts are verified.

The clawback started fast. Binance says about $3 billion has been frozen on-chain so far with the help of blockchain partners. The stablecoin issuers did a lot of that work, because they can freeze their own tokens: Tether froze more than $1.5 billion of its USDT, and Circle more than $800 million of its USDC. That still leaves roughly $3.3 billion out of reach.

As for who did it, the security firm TRM Labs and others say North Korea is almost certainly behind it. Binance itself has not named anyone, saying only that it is working with law enforcement to confirm the identity of the criminals.

## What it means if you're on Binance

For now, withdrawals are paused while security checks finish. Binance's first update said deposits were suspended too, but co-CEO Yi He has since said deposits are unaffected and working as normal, and that she expects withdrawals to start resuming within 48 hours. Binance has also revoked the affected address authorisation and brought in law enforcement and blockchain intelligence firms to trace the money.

The market flinched rather than panicked. Bitcoin and Ether were down around 3% early on Friday, and that drop came alongside a sell-off in wider financial markets.

The next marker is an updated Proof of Reserves, the public check that customer balances are fully backed, which Binance says it will publish once the fix is complete. Until withdrawals reopen, official Binance channels are the only place to take updates from.