Binance, the world’s largest cryptocurrency exchange by trading volume, has suffered a massive security breach involving billions of dollars in digital assets, potentially marking the largest cryptocurrency hack in history. Initial onchain estimates suggest that approximately $5.6 billion in cryptocurrencies left Binance linked wallets during the incident, triggering widespread concern across the global crypto market.
The incident, which emerged on October 29, 2026, reportedly involved several major cryptocurrencies, including Bitcoin (BTC), Ethereum (ETH), Tether (USDT), USD Coin (USDC), and Tron (TRX). The scale of the suspicious transactions has raised serious questions about cryptocurrency exchange security and the protection of digital assets held by centralised trading platforms.
According to figures circulating from blockchain tracking reports, the suspected stolen assets include approximately $1.45 billion in Bitcoin, $875 million in Ethereum, $234 million in Tron, $50 million in Tether Gold (XAUT), $1.57 billion in USDT, $823 million in USDC, $75 million in WBETH, $88.5 million in RLUSD, and another $447.5 million in various cryptocurrencies.
However, the precise amount permanently stolen remains subject to verification, as Binance’s investigation continues.
Binance Investigates Massive Security Breach
Binance initially acknowledged reports of a potential security incident and confirmed that its security teams were investigating suspicious activity involving its cryptocurrency wallets.
The exchange temporarily suspended deposits and withdrawals across multiple networks as a precaution while its security team worked to investigate the incident and protect customer assets.
In its October 30 security update, Binance revealed that its initial investigation suggests a compromised DevOps engineer’s laptop may have allowed an attacker to access a service container and submit unauthorised withdrawal transactions.
The company also stated that it had found no evidence of compromised wallet private keys.
Binance subsequently estimated the incident’s total impact at approximately $6.3 billion, higher than several initial blockchain tracking estimates.
The exchange also confirmed that it had revoked the affected address authorisation and engaged law enforcement agencies and blockchain intelligence partners to trace the missing cryptocurrency.
Binance and Crypto Firms Freeze Billions in Assets
Following the incident, cryptocurrency companies and blockchain security partners moved quickly to prevent the attacker from accessing or transferring additional funds.
Binance revealed that approximately $3 billion in affected assets had been frozen onchain through cooperation with industry partners.
Stablecoin issuers, including Tether and Circle, also took action by freezing significant amounts of USDT and USDC connected to the suspicious transactions.
These interventions represent one of the largest coordinated cryptocurrency freezing operations reported in the industry.
Binance has also promised to cover all losses resulting from the incident using its Secure Asset Fund for Users (SAFU) and company funds.
The exchange maintains that customer funds are safe and has promised to publish an updated Proof of Reserves report after completing its remediation efforts.
Largest Crypto Hack Raises Questions About Exchange Security
If the reported losses are confirmed, the Binance incident would surpass the $1.5 billion Bybit hack recorded in February 2025, becoming the largest cryptocurrency theft in history.
The incident has also intensified concerns about the security of centralised cryptocurrency exchanges, particularly their hot wallets, internal infrastructure, and withdrawal authorisation systems.
The market has already reacted to the development, with Bitcoin, Ethereum, and Binance’s BNB experiencing significant price declines amid growing uncertainty.
Despite the massive scale of the incident, Binance says it is working with industry partners and law enforcement agencies to recover affected assets and strengthen its security infrastructure.
The coming days will be critical as investigators establish the final amount involved, determine how the attacker gained access, and assess how much of the affected cryptocurrency can be recovered.
