Binance security incident hits $6.3 billion with $3B frozen

The world's largest crypto exchange just put a number on a scare that rattled every major token. The Binance security incident carries an estimated $6.3 billion impact, with around $3 billion in assets frozen so far, and the exchange says it will cover customer losses from SAFU and company funds.

What happened

An initial investigation, Binance said, points to a compromised DevOps engineer's laptop that let an attacker reach a service container and submit unauthorized withdrawal transactions. The company said it found no evidence of a wallet private-key leak, revoked the affected address authorization and temporarily suspended deposits and withdrawals while it rebuilds controls.

Co-founder Yi He said deposits continued to operate and that withdrawal services are expected to resume within about 48 hours. Binance also said it would publish a technical post-mortem and an updated Proof of Reserves after remediation. On X, the exchange put the "current verified total frozen" at $2.54 billion as Circle, Tether and Ripple locked related stablecoin flows.

Outside trackers put the footprint larger still. Arkham Intelligence linked nearly $6 billion in bitcoin, ether, solana and stablecoins to 55 wallet addresses tied to the possible exploit, CNBC reported, a figure that sits close to Binance's own $6.3 billion impact estimate.

Binance said customer funds remained safe and that it had enlisted law enforcement plus blockchain intelligence firms to trace and recover assets. Deposits were described as unaffected even while withdrawals stayed paused, a split that matters for users who only need to get money in, not out.

Why it matters

For markets, the Binance security incident lands as the largest crypto hack on record by estimated impact, eclipsing Bybit's roughly $1.5 billion loss in 2025 and Bitget's more recent $350 million-plus theft. Bitcoin slipped more than 4% below $78,000, and Circle shares fell about 5% after hours on Thursday, CNBC said.

The episode also tests whether exchange self-insurance still works at this scale. Binance's pledge to make users whole via SAFU echoes past recovery plays, but the bitcoin weekend selloff and the crypto liquidations already showed how thin leverage gets when a mega-exchange wobbles.

Past mega-hacks show recovery rates vary wildly once coins are mixed or bridged. The SAFU pledge buys time, but every day of closed withdrawals is a liquidity tax on market makers who warehouse inventory on Binance.

What's next

Watch for the technical report, the resumed withdrawal window and whether recovered funds shrink the $6.3 billion headline. Binance's own update is the primary account of the incident. The Binance security incident will keep hanging over weekend liquidity until withdrawals reopen cleanly.

Watch whether the Proof of Reserves update lands before or after withdrawals reopen, because that sequence will shape how much trust returns with the first outbound transfers.

Industry history also matters for how counterparties behave in the next 48 hours. After Bybit and Bitget, desks shortened settlement windows and raised haircuts on exchange-custodied collateral; expect a similar defensive posture until Binance withdrawals look routine again.