The $6.3 billion theft reportedly began when a DevOps engineer's laptop on Binance's internal infrastructure was compromised, rather than through a leak of wallet private keys. The exchange worked with blockchain partners to freeze about $3 billion on-chain, pledged to cover all losses from company funds and its emergency reserve, and expects to resume withdrawals within 48 hours. Blockchain analysts including TRM Labs and Chainalysis said the attack bears the hallmarks of North Korean cybercriminal groups, which Pyongyang firmly denied, calling the accusations fabricated. Co-CEO Richard Tend said the investigation has not yet identified any individual responsible or found evidence of a private-key leak. Bitcoin hit a six-week low of $76,368, while Ether fell more than 3% to a two-month low of $2,178 before markets stabilized.
Summary written by Upside AI from the original article. Read the source for full details.
Original headline: Bên trong chiến dịch truy tìm nhóm hacker cuỗm 6,3 tỷ USD: Mọi dấu vết điều tra đang dẫn về đâu?
Keywords
Binancecryptocybersecuritybitcoin
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $97.5B |
| Close on 10/29/2026 | 698.46 |
| Change that session | -8.08% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Morning Minute: Binance’s $6.4B Hack Overshadows Hyperliquid’s Biggest Day
An attacker stole about $6.4 billion from Binance, by a wide margin the largest crypto theft on record and roughly four times the $1.5 billion taken from Bybit in February 2025. The funds moved across three blockchains: about $3.5 billion in ETH, $1.4 billion in BTC and $630 million on Tron, with final accounting still underway. Tether and Circle froze about $2.39 billion of the stolen tokens (43% of the haul), while Aave froze its V3 and V4 markets on Ethereum to guard against bad debt. Binance said it has reserved over $6.34 billion in company funds to cover losses, and ZachXBT said the funds were commingled with the $388 million Bitget exploit and believes the same North Korean hacker group was behind both. Markets fell on the day, with over $1.33 billion in positions liquidated, after HYPE had surged on news that Intercontinental Exchange is investing in trade.xyz.
- Crypto liquidations jump to $1.57 billion as Binance hack sends bitcoin, ether lower
- Binance hacker's Bitcoin haul tops Coinbase's corporate treasury
The attackers behind the $6.3 billion Binance hack now hold 18,270 BTC, worth about $1.4 billion according to Bitquery, which exceeds the 18,071 BTC Coinbase reported as of late September (17,954 BTC for investment and 117 BTC for operations). They also hold 508,621 ETH, more than the 495,362 ETH that BitcoinTreasuries.net attributes to The Ether Machine. Bitquery said the attackers initially stole 200,630 ETH and accumulated the rest by swapping stolen stablecoins and other tokens. Binance confirmed the hack, said about $3 billion in stolen assets had been frozen, and pledged to cover all losses. TRM Labs attributed the attack to North Korea's TraderTraitor group.
- Binance's $6.3 billion hack: What we know and what comes next
Binance suffered a hack with an estimated impact of $6.3 billion, with about $3 billion in assets frozen so far and the exchange pledging to cover all losses. TRM Labs attributed the attack with high confidence to TraderTraitor, a North Korean state-sponsored hacking unit, and Chainalysis also linked it to the same group. TRM Labs estimated about $6.36 billion was moved from Binance wallets across 10 blockchains, mostly within about 20 minutes, after preparations began at least 36 hours earlier. Stablecoins such as USDT and USDC are easier to recover because their issuers can freeze and reissue them, while bitcoin and ether are harder to recover. Fundstrat's Sean Farrell said the attack does not currently appear to pose meaningful solvency risk, given that roughly $3.3 billion remains unfrozen and the roughly $1.2 billion SAFU fund could cover part of the losses.
- Live updates: Binance $6.3B hack linked to North Korea’s TraderTraitor
Binance estimates the total impact of the breach at about $6.3 billion, with roughly $3 billion in crypto frozen so far. Withdrawals are paused for a security overhaul and expected to resume within 48 hours, while deposits operate normally. The exchange said the breach may have started with a compromised DevOps engineer's laptop, though it found no evidence of a wallet private-key leak. Chainalysis, TRM Labs and other analysts attribute the attack to North Korea-linked TraderTraitor, and Chainalysis put the theft at $6.4 billion. Standard Chartered said the hack could push more trading toward decentralized exchanges such as Uniswap, while Bitcoin fell 4.9% over 24 hours to about $76,937.
- Binance hacker splits $1.4 billion of bitcoin into 19 wallets that no one can freeze
Related markets
Latest news
- What is EIP-7702? The Ethereum Upgrade Behind the $6.4B Binance Hack
EIP-7702 is an Ethereum upgrade activated in May 2025 that lets standard wallets temporarily take on smart contract abilities, such as batched transactions, gas sponsorship and limited-permission keys. However, delegated code gets full access to the wallet's funds. On October 29, 2026, an attacker drained some $6.4 billion from Binance wallets across 10 blockchains, mostly within about 20 minutes, and TRM Labs and Chainalysis attributed the theft to North Korea's TraderTraitor group. On Ethereum, the attacker used 50 pre-signed authorizations to turn a Binance hot wallet into a sweeper, while Binance wallets on the other 9 blockchains sent funds through ordinary signed transfers. TRM Labs said this points to a compromise of Binance's hot wallet signing infrastructure rather than a flaw in Ethereum itself.
- Instagram wants 90-minute videos but isn't sharing ad money
Instagram is testing long, YouTube-style videos called Features. Its head says paying creators would cause the company to lose money.
- YPF Sociedad Anónima (BASE:YPFD) Stock Fair Value Edges Higher After Mixed Analyst Revisions
Price targets for YPF Sociedad Anónima (BASE:YPFD) range from US$55 to US$66. JPMorgan and BofA keep positive ratings but trimmed their targets, from US$66 to US$60.50 and from US$65 to US$64, respectively. HSBC moved the stock to a Buy rating with a US$60 target, while Bradesco BBI downgraded it to Neutral with a US$55 target, citing valuation. In the Simply Wall St model, fair value rose from ARS 10,898.60 to ARS 11,533.63, with revenue growth moving from 4.86% to 5.39% and net profit margin from 14.13% to 14.24%. The article also notes one flagged risk for the company.
- Stock Market Today (Oct. 30, 2026): S&P 500 sinks as Amazon, Intel losses shake Wall Street
The article argues that strong AI demand alone is no longer enough to satisfy investors.
- Dan Ives Says AI Disruption Is ‘On Full Display’ In Tech Earnings, Sees 2027 As Inflection Year
Yorkville's Dan Ives said AI-driven disruption is “on full display” in tech earnings, as Amazon, Intel and SanDisk shares fell after their quarterly results. Intel dropped over 30%, its worst day since April 1979. Ives said monetization will take time but still sees 2027 as the major inflection year when AI revenue starts to justify capex, with cloud growth and capital spending as key metrics to watch. Amazon reported Q3 EPS of $1.89 on $201.9 billion revenue, while trailing twelve-month free cash flow was negative $42.4 billion, and it kept its 2026 capex forecast at $220 billion. Alphabet fell 12% after its weak report, wiping out over $500 billion in market cap.
- Chip shortage impact on the tech sector, Burger King and Starbucks turnarounds
Yahoo Finance Executive Editor Brian Sozzi examines Google's (GOOGL, GOOG) striking P/E ratio and how a chip shortage is affecting Intel (INTC) and Sandisk (SNDK). He also interviews Burger King CEO Tom Curtis (QSR) and Starbucks CEO Brian Niccol (SBUX) about food innovation and turnarounds at their brands.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.