Binance suspends withdrawals after $6.3 billion hack and freezes stolen funds

Situation Overview

On 30 October 2026, Binance said it temporarily suspended all withdrawals and deposits after a major hacking incident in which about $6.3 billion was accessed, potentially the largest cryptocurrency theft in history. Binance said it had frozen around half of the stolen digital assets, with $3 billion secured, and later said the attack was wider than an initial belief that a compromised engineer laptop enabled unauthorised withdrawals. The US Secret Service said it was working to identify, freeze, trace and recover stolen funds, while Binance said it was working with the FBI. Several analytics firms linked the hack to a North Korean hacking unit, and one analysis cited a group called TraderTraitor. Binance said it could freeze additional funds as it works with law enforcement agencies, token issuers, blockchain intelligence firms and other industry partners to trace and freeze more assets. Next, Binance said it would continue tracing and potentially freezing additional stolen assets, while the US Secret Service and the FBI work to identify and recover funds.

Geopolitical Implications

1. 01

   Reported linkage to North Korean cyber capabilities underscores state-linked financial theft.

2. 02

   US federal involvement highlights cross-border enforcement challenges in crypto theft cases.

3. 03

   The incident raises pressure on exchanges to improve incident response and coordination with law enforcement and analytics firms.

Key Signals

• —

  Whether Binance freezes additional stolen assets beyond the initially secured $3 billion.

• —

  Progress by the US Secret Service and FBI on identifying perpetrators and recovering remaining funds.

• —

  Further attribution findings from blockchain analytics firms regarding the alleged North Korean unit.

Topics & Keywords

Market Impact Analysis

AI Threat Assessment

Event Timeline