Binance's reported $6.3 billion hack: what's known so far
Major outlets report that the crypto exchange Binance was hit by a hack worth about $6 billion. The company has promised to cover losses and plans to reopen. Here's what that means in plain terms.
For educational purposes only. Not investment advice.
- Several outlets report that Binance lost about $6 billion to $6.3 billion in a hack, which MarketWatch calls possibly the largest ever.
- The South China Morning Post reports that Binance has pledged to cover user losses, and MarketWatch says the exchange has announced plans to reopen.
- SecurityWeek says the attack looks like the work of North Korea-linked TraderTraitor hackers, but that link isn't confirmed.
- Crypto on exchanges usually isn't government-insured, and scammers often target users after big hacks.
Binance, one of the world's best-known cryptocurrency exchanges, has been hit by a hack that several outlets put at about $6 billion. CNBC and MarketWatch use the figure of $6.3 billion, and MarketWatch calls it what's believed to be the largest crypto hack ever.
The story is still developing. Below is what the coverage says so far, plus some background on how crypto exchanges work and why hacks like this happen.
What happened
According to headlines from CNBC, MarketWatch, SecurityWeek, the South China Morning Post and CryptoTicker.io, attackers took digital assets worth roughly $6 billion to $6.3 billion from Binance. The outlets give slightly different numbers, which is common early on, while losses are still being counted and crypto prices keep moving.
MarketWatch reports that Binance has said when it plans to reopen. That suggests at least some of the platform's services were paused after the attack. The headlines don't give the reopening details, so readers should check Binance's official channels or the full reports for the timing.
The South China Morning Post reports that Binance has pledged to cover users' losses. That promise matters a lot for customers, though the headlines don't explain how the company will pay for it.
Who might be behind it
SecurityWeek reports that the hack "bears hallmarks" of TraderTraitor, a hacking operation linked to North Korea. The word "hallmarks" is important: it means the methods look similar to past attacks. It is not a confirmed finding about who did it.
Background: US government agencies have used the name TraderTraitor for North Korea-linked hackers who target crypto companies. They often trick employees with fake job offers or booby-trapped software, then use that access to move funds. The FBI blamed this group for the roughly $1.5 billion theft from the exchange Bybit in early 2025, which until now was widely seen as the biggest crypto hack.
Can Binance absorb a loss this size?
CryptoTicker.io asks how much it would take to bankrupt Binance, which is the question many customers have. The headlines don't answer it with figures, so this article won't guess.
Background: big exchanges usually keep most customer funds in "cold" storage, meaning offline, and a smaller share in "hot" wallets that are connected to the internet for daily withdrawals. Binance also set up an emergency reserve in 2018, called SAFU, meant to protect users in cases like this. Whether a company can make customers whole depends on its total reserves, how much was stolen, and whether any of the stolen funds can be frozen or recovered.
Why it matters for everyday people
Unlike a US bank account, crypto held on an exchange generally isn't covered by government deposit insurance such as the FDIC. When something goes wrong, customers rely on the exchange's own promises and finances.
Big hacks also tend to bring out scammers. People may get fake "refund" emails or messages claiming to come from Binance support. As a general precaution, only trust information from a company's official website or app, and never share passwords or recovery phrases.
| Publisher | Their angle | Original |
|---|---|---|
| CNBC | Overview of known facts and next steps | Read ↗ at CNBC |
| MarketWatch | Binance's reopening plans and record size of the hack | Read ↗ at MarketWatch |
| SecurityWeek | Possible North Korean TraderTraitor involvement | Read ↗ at SecurityWeek |
| South China Morning Post | Binance's pledge to cover customer losses | Read ↗ at South China Morning Post |
| CryptoTicker.io | Whether the loss threatens Binance's survival | Read ↗ at CryptoTicker.io |
Words to know
- Crypto exchange
- An online platform where people buy, sell and store cryptocurrencies, similar to a brokerage for digital coins.
- Hot wallet
- Crypto storage that's connected to the internet. It's handy for quick transactions but easier to hack than offline "cold" storage.
- TraderTraitor
- A name US agencies use for a North Korea-linked hacking operation known for targeting crypto companies.
- SAFU
- Short for Secure Asset Fund for Users, an emergency reserve Binance created in 2018 to protect customers from losses.
Questions readers ask
Will Binance customers get their money back?
The South China Morning Post reports that Binance has pledged to cover losses. The headlines don't say how or when, so customers should follow official updates from Binance.
Did North Korea definitely do this?
No, that isn't confirmed. SecurityWeek reports that the attack bears hallmarks of a North Korea-linked group, which means the methods look similar to past attacks. That isn't the same as a confirmed finding.
Is crypto on an exchange insured like a bank deposit?
Generally, no. US deposit insurance such as the FDIC doesn't cover cryptocurrency held on exchanges. Protection depends on the exchange's own reserves and policies.
For educational purposes only. Not investment advice. We do not recommend any stock, fund, broker or trading platform. Headlines are sourced from Google News · Business; every story links to the original publishers.