Cyber — 2026-11-02
Binance Hit by $6.3 Billion Security Incident With Nearly $3 Billion Frozen On-Chain
BLUFIt is unlikely that more than $4 billion of the stolen funds are frozen or recovered by November 16, because the attacker converted billions into untraceable assets before freezes began.
Binance stated on Thursday that a security incident affected about $6.3 billion in assets, with nearly $3 billion frozen on-chain, including 1.567 billion USDT frozen by Tether and 800 million USDC frozen by Circle 12. Chainalysis, in a primary report, placed the theft at about $6.4 billion beginning near 4:20 p.m. ET on October 29, with freezes starting by 5:14 p.m. and about $2.8 billion frozen so far 3. Chainalysis attributes the hack to North Korea's TraderTraitor, citing real-time commingling with funds from last month's Bitget theft, and says the attacker swapped $325 million in stablecoins for $285 million in ETH over nearly 20 minutes 3. CNBC reported that TRM Labs also attributed the attack to TraderTraitor with high confidence, and that Binance pledged to cover all losses 4.
AnalysisBinance confronts a recovery problem more than a solvency problem: roughly $2.8 billion to $3 billion is frozen, but the Bitcoin and Ether the attacker converted cannot be frozen by any issuer. We have high confidence in this judgment because freeze totals are consistent across Binance, Tether, Circle and Chainalysis, and the attacker converted stablecoins to ETH before freezes began. Only Chainalysis offers primary on-chain analysis, while the other outlets largely amplify Binance's disclosures. Further gains depend on tracing laundered funds to cooperating exchanges, and the automated laundering pattern Chainalysis describes will slow that work. It is
unlikely that Binance or Chainalysis reports more than $4 billion of the stolen or affected funds frozen or recovered by November 16. Returning frozen stablecoins to victims requires court orders and issuer coordination that can take months, so none will reach customers in that window. Still, further stablecoin freezes and rapid exchange cooperation could push recoveries past $4 billion, since the frozen total has already risen. Past that level, Binance's SAFU fund and balance sheet cover the remainder and withdrawals resume sooner, so counterparties can ease exposure limits. Near $3 billion, they should keep limits tight and keep screening for exposure to the laundering addresses.
5 sources
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen - The Hacker News
- Binance Hit by $6.3 Billion Security Incident, South Korea Busts AI-Powered Hacking Ring and More - The Cyber Express
- Binance Hack: Tracing the $6.4 Billion Theft to North Korea - Chainalysis
- Binance hack: $6.3 billion stolen, $3 billion frozen - CNBC
- Binance flags 'potential security issue,' says approximately $6.3 billion impacted - NPR
View in full brief →