Hackers Stole $6.3 Billion From Binance. Here's What We Know So Far
Hackers stole $6.3 billion from Binance, the world's largest cryptocurrency exchange, in what Reuters describes as a record theft. An exchange is a company that lets people buy, sell and hold digital coins. Binance reported a security incident on October 29.
Stablecoin issuers Tether and Circle moved to freeze tokens worth $2.38 billion, according to Reuters. A stablecoin is a digital token designed to stay worth one US dollar.
The two numbers do different jobs, so it helps to keep them apart. A freeze blocks transfers of specific tokens at the company that issued them. Think of it like a bank stopping a cheque. The money stays where it is, but nobody can spend it.
A freeze does not send anything back to Binance. It also does not tell us how much of the $6.3 billion can still be reached. Anyone holding Tether or USDC-linked tokens should read the freeze as a limit on those tokens, not as a recovery of the loss.
Analysts have blamed North Korea for the breach. They usually reach that kind of conclusion by following the digital trail: where stolen coins move on public blockchains, how they are laundered, and whether the tools match earlier attacks. Reuters reports this blame as the view of analysts. It is not an official finding.
The blame matters more because of earlier 2026 figures. In an April report, TRM Labs, a blockchain analytics firm, linked two 2026 hacks to North Korea: Drift Protocol and KelpDAO. The report said North Korea stole $577 million across those two attacks, and accounted for 76% of all crypto hack value that year.
If the Binance attribution holds, the theft alone would be many times the combined value TRM assigned to those two attacks. That would change the picture of state-linked theft for the year so far.
For ordinary savers, the risk runs through custody and withdrawals. Custody means who controls the coins. When you keep coins on an exchange, you have a claim on the exchange's assets. How much of the stolen value can be frozen, traced or recovered decides whether that claim is damaged. The freeze suggests some tokens are contained. But the unfrozen balance and the recovery path have not been established, so anyone with exposure should expect the figures to change as Binance and the issuers update their positions.
For institutional desks, the trading and risk teams at large firms, this case is a real test of how stablecoin freezes work at scale. A freeze can stop funds from moving on quickly. But it depends on the issuer finding and blocking specific addresses before the money is spread out. The $2.38 billion is the amount frozen in this episode. The gap between that and the $6.3 billion stolen is the number that risk teams will watch closely, since it shows how much exposure remains with their trading partners.
Binance's own description of the incident is the starting point. The coming days should show how much of the $6.3 billion is contained. For now, the confirmed core is narrow: a $6.3 billion theft, a $2.38 billion freeze, and a North Korea attribution that rests on analysts' assessment rather than an official finding.
