$6.3 Billion Gone: Binance Investigates Massive Cyberattack Linked to Compromised Employee Laptop

Image Credit: Getty Images

Binance, the world’s largest cryptocurrency exchange, is investigating a massive cyberattack involving an estimated $6.3 billion in cryptocurrency, in what is being described as the biggest crypto hack on record. The incident has raised fresh concerns about the security of digital asset platforms, particularly as hackers continue to target the systems used to manage and transfer funds.

According to Binance co-CEO Richard Teng, initial investigations suggest that attackers gained access through a compromised laptop belonging to a DevOps engineer. This reportedly allowed them to reach an internal service responsible for processing transactions and authorise unauthorised withdrawals. Teng stressed that the attack was complex rather than a simple one-step breach, but assured customers that their money was safe and that Binance would cover any losses.

The exchange responded by suspending affected services, revoking compromised access and working with law enforcement and blockchain security firms to trace the stolen assets. Binance also said it was taking steps to freeze funds where possible. The company has maintained that its customers will not bear the financial cost of the incident.

Attention has also turned to North Korean-linked hacking groups. Blockchain intelligence firm TRM Labs identified similarities between the Binance attack and previous cyberattacks associated with North Korea, including the $1.5 billion Bybit theft in 2025. However, no group has publicly claimed responsibility, and investigations into the attackers’ identities are continuing.

The incident has already unsettled cryptocurrency markets. Bitcoin fell by approximately five per cent to around $76,400, while other major digital currencies, including Ether, Solana and XRP, also recorded losses. The decline reflects renewed investor concerns about the vulnerability of major cryptocurrency platforms.

The Binance breach highlights the growing threat posed by cybercriminals to the global financial system. It also demonstrates that security risks can extend beyond stolen passwords or private keys, as attackers increasingly exploit internal systems and employee access. As investigations continue, the industry faces renewed pressure to strengthen its security measures and protect billions of dollars in digital assets.