According to Tom's Hardware, the haul includes $1.57 billion in USDT, $1.45 billion in Bitcoin, $875 million in Ethereum and $823 million in USDC. Geektime reports that the company itself puts the damage at $6.3 billion. If the figures hold, it is the largest theft in crypto history, above the $1.5 billion taken from Bybit in February 2025. Binance.us was reportedly not affected.
Binance said its initial investigation pointed to a compromised laptop, but that it later found additional points of breach, and called it "a complex attack". Security firm TRM attributes the attack to TraderTraitor, the North Korean group it says was also behind the Bybit hack.
The issuers of USDT, USDC and RLUSD blacklisted the thief's main wallet, so about $2.4 billion is frozen, though not recovered. Most of the rest, about $3.2 billion in assets such as Bitcoin and Ethereum, is much harder to stop. Binance's SAFU insurance fund holds about 15,000 BTC, roughly $1.17 billion. It is not yet known whether access came through stolen private keys, a compromised signing process or another route.
