Crypto News

Breaking: Binance Hacked for US$6.3 Billion, the Biggest Crypto Robbery Ever

In one night, attackers moved billions out of Binance's hot wallets, several times the previous record. Tether, Circle and others froze about US$3 billion within hours. Here is what we know, what is still unconfirmed, and what it means for anyone holding crypto on an exchange.

Quick answer: On the evening of 29 October 2026 (UTC), attackers drained Binance's hot wallets in what the exchange estimates is about US$6.3 billion of impact, with Chainalysis putting the theft at US$5.9 billion, several times the previous record set by the US$1.4 billion Bybit hack in 2025. Binance says a compromised DevOps engineer's laptop let the attacker submit unauthorized withdrawals, that no wallet private key leaked, and that it will cover all losses. Tether froze more than 1.567 billion USDT and Circle more than 800 million USDC, and Binance said verified frozen assets reached about US$3 billion.

Key takeaways

The biggest crypto theft on record. Binance puts the impact at about US$6.3 billion and Chainalysis at US$5.9 billion, against the US$1.4 billion Bybit record of 2025.
A laptop, not a leaked key. Binance's first findings point to a compromised engineer's laptop that reached a service container and pushed withdrawals. Binance says it found no evidence of a private key leak.
Stablecoins were frozen, bitcoin was not. Tether froze over 1.567 billion USDT and Circle over 800 million USDC within hours. BTC and ETH cannot be frozen this way.
Binance says users are covered. Withdrawals and deposits are paused, and Binance says it will cover all losses. Binance.US was not affected.
Your move: Fizen wallet users are unaffected because the wallet is non-custodial. Everyone else: do not panic-sell, ignore any "refund" links or support DMs, and think about how much you keep on any exchange.

Crypto just had its worst night. In less than an hour on Thursday evening, billions in bitcoin, ether and stablecoins left the hot wallets of the world's largest exchange. Here is what happened, based on Binance's own statements and reporting by CoinDesk, Cointelegraph and TechCrunch, as of the morning of 30 October 2026 (UTC).

What happened at Binance?

Large, unusual outflows started from Binance hot wallets on Ethereum, Bitcoin and Tron on the evening of 29 October 2026 (UTC). Blockchain analytics firm Arkham labelled the receiving wallets, which at one point held more than US$5.7 billion, according to CoinDesk: roughly US$1.5 billion in bitcoin, US$900 million in ether, US$1.5 billion in USDT and over US$800 million in USDC.

Binance first told TechCrunch it was "aware of reports of a potential security issue" and investigating. Hours later it confirmed the incident. In its update on X, Binance said its initial investigation suggests a compromised DevOps engineer's laptop let an attacker reach a service container and submit unauthorized withdrawal transactions, adding that it had found no evidence of any wallet private key leak.

Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private… pic.twitter.com/5REncAI77y
— Binance (@binance) October 30, 2026

Blockaid CEO Ido Ben-Natan, whose firm tracked the transfers, told CoinDesk it was "the biggest crypto hack in history" and said his team did not think a key was leaked, pointing instead at the signing infrastructure.

How much was stolen, and how big is it?

Estimate	Amount	Source
Total impact	About US$6.3 billion	Binance, 30 October
Stolen at the time of theft	US$5.912 billion	Chainalysis, via Cointelegraph
Peak balance of attacker wallets	More than US$5.7 billion	Arkham, via CoinDesk
Verified frozen	About US$3 billion	Binance, 30 October
Previous record (Bybit, February 2025)	About US$1.4 billion	TechCrunch

Even the lowest estimates put this well above the Bybit hack, which was blamed on North Korean hackers. According to DefiLlama data cited by CoinDesk, Binance held roughly US$144 billion in assets before the attack, so the loss is around 4% of its balance.

What did Tether, Circle and others freeze?

The fast part of the story is the stablecoins. Unlike bitcoin or ether, USDT and USDC can be frozen by their issuers, and they were, within hours.

Tether: CEO Paolo Ardoino said Tether froze more than 1.567 billion USDT linked to the attack, writing that "protecting the industry and our partners is our main priority".
Circle: CEO Jeremy Allaire said Circle, in coordination with law enforcement, had "frozen more than 800M USDC associated with the incident".
First Digital: CEO Vincent Chok said the FDUSD stolen in the attack was frozen.
Others: World Liberty Financial froze US$27 million in USD1, Ripple began freezing linked RLUSD, and the Arbitrum Security Council froze about US$30.5 million in ARB and ETH, Cointelegraph reported.

Tether froze more than 1.567B USDT related to a potential Binance exchange hack.

Protecting the industry and our partners is our main priority.

Stay safe everyone.
— Paolo Ardoino 🤖 (@paoloardoino) October 29, 2026

Circle is closely tracking reports of a potential exploit involving Binance. In coordination with law enforcement, we have frozen more than 800M USDC associated with the incident and will continue supporting the investigation.
— Jeremy Allaire (@jerallaire) October 29, 2026

Binance said verified frozen assets climbed from US$2.54 billion to about US$3 billion overnight. The rest, mostly bitcoin and ether, cannot be frozen by any company and will have to be traced, a process that took months after Bybit.

Are Binance users' funds safe?

Binance says yes. In its statement on X, the exchange said it will cover all losses and will publish a full post-mortem once the investigation ends. Co-founder Changpeng Zhao wrote on X that "user funds are SAFU", and co-CEO Yi He said Binance would cover all hacking losses.

Binance will cover all losses.

As a precaution, all deposits and withdrawals are temporarily suspended while our team conducts security checks, freezes funds, and works with law enforcement.

We are working around the clock and will share a full post-mortem once the… pic.twitter.com/3LxFFRiomJ
— Binance (@binance) October 30, 2026

Withdrawals were suspended on multiple networks, then deposits and Binance Alpha trading too, until the security issue is resolved.
Binance.US was not affected, according to Cointelegraph.
Who did it: not confirmed. Investigator ZachXBT and Blockaid said North Korea was likely behind it. Binance has not attributed the attack.

How did the market react?

Hard, but not in panic. Per CoinGecko data reported by Cointelegraph, bitcoin fell about 4.9% to near US$77,000, ether dropped 5.7%, BNB lost 8% and AAVE about 11%. The Crypto Fear and Greed Index slid to 30, its lowest since August.

Is my Fizen wallet affected?

No. The Fizen wallet is non-custodial: your USDT and other tokens sit at your own wallet address on the blockchain, controlled by keys only you hold. They were never on Binance or any exchange, so this incident does not touch them and there is nothing you need to do.

Your keys stay with you. Fizen cannot move your wallet funds, and neither can anyone else without your recovery phrase.
The real risk after a hack is phishing. Fizen will never DM you, never ask for your recovery phrase and never send a "compensation" link. Anyone who does is a scammer.
Sent funds from Binance recently? Check the transaction in your wallet history. Binance has paused withdrawals, so a pending withdrawal will arrive only after Binance resumes them.

What should you do now?

If you have funds on Binance: wait for official updates on binance.com and Binance's verified X account. Do not move fast on rumours.
Ignore every "refund" or "compensation" link. Big hacks are always followed by phishing: fake support DMs, fake claim pages, fake wallet-sync requests. No real exchange asks for your password or recovery phrase.
Do not panic-sell into a falling market. Prices react to headlines first and facts later.
Rethink how much sits on any exchange. An exchange is useful for trading. It is a big target for storing.

What does this hack mean for people who hold stablecoins?

Two lessons sit side by side. The freezes show why accountable stablecoin issuers matter: about US$3 billion was stopped in hours, while the stolen bitcoin and ether simply moved on. And the same week Google launched key-splitting custody for banks, the world's biggest exchange lost billions through one compromised laptop. When someone else holds your keys, their security is your security.

That is why Fizen starts from a self-custody wallet. Fizen is building the stablecoin neobank for people on the move: you hold your own keys and your USDT, and the same app gets you online abroad with a travel eSIM in 150+ countries and lets you invest in tokenized US stocks where eligible. Read how the Fizen wallet works.

Frequently asked questions

How much was stolen in the Binance hack?

Binance estimates about US$6.3 billion of total impact from the 29 October 2026 incident. Chainalysis put the theft at US$5.9 billion at the time it happened, and about US$3 billion had been frozen by the morning of 30 October.

Is the Binance hack the biggest crypto hack ever?

Yes, by reported value. Every estimate is several times the previous record, the roughly US$1.4 billion Bybit hack in February 2025.

How did hackers get into Binance?

Binance's initial investigation suggests a compromised DevOps engineer's laptop let an attacker reach a service container and submit unauthorized withdrawals. Binance said it found no evidence of a wallet private key leak.

Did Tether and Circle freeze the stolen funds?

Yes. Tether froze more than 1.567 billion USDT and Circle more than 800 million USDC linked to the incident. Bitcoin and ether cannot be frozen this way.

Is the Fizen wallet affected by the Binance hack?

No. The Fizen wallet is non-custodial, so your funds sit at your own wallet address under your keys and were never held on Binance.

Who was behind the Binance hack?

Not confirmed. Investigator ZachXBT and security firm Blockaid said North Korea was likely behind it, but Binance has not named an attacker.

Your keys, your stablecoins

Fizen is a self-custody wallet: you hold the keys to your USDT, not an exchange. The same app gets you online abroad with a travel eSIM in 150+ countries.

Get the Fizen app

Terms and conditions

Information only. This article summarises a developing news story from public statements and news reports as of the morning of 30 October 2026 (UTC). Figures may change. It is not financial, legal, tax or investment advice, and not an offer or sale of any product.
For readers in the United States. This is information only, not an offer or sale, and not advice. Fizen products and services are not offered to US Persons.
Independent, with one disclosure. Fizen is not affiliated with Binance, Circle or the other companies named here. Tether has made a strategic investment in Fizen. Facts are as stated in the sources listed below.
Image. Banner uses the Binance logo (Wikimedia Commons, public domain) for news identification. Binance is a trademark of its owner.

Sources

Developing story. Checked against Binance's statements, CoinDesk, Cointelegraph, TechCrunch and CNBC on the morning of 30 October 2026 (UTC).