Binance Hit by $6.3 Billion Breach as Report Links North Korean Hackers to Billions in Past Crypto Theft
A reported $6.3 billion security incident at Binance and a separate claim that North Korean hackers have stolen more than $6 billion in cryptocurrency from the exchange over time are raising questions about the safety of user funds and the geopolitical risks around major crypto platforms.
A multibillion‑dollar security breach at Binance, combined with a fresh allegation of large‑scale North Korean crypto theft, has pushed the world’s biggest exchange into the middle of a cyber and geopolitical dispute.
On October 30, cybersecurity outlet The Hacker News reported that Binance suffered a security breach affecting about $6.3 billion in assets. According to that report, attackers submitted unauthorized withdrawals from the platform, and a compromised DevOps engineer’s laptop is suspected as the entry point. Binance reportedly froze nearly $3 billion of the affected assets on‑chain, but the remaining exposure would still place the incident among the sector’s largest.
Separately, a CNN report claimed that North Korean hackers are responsible for theft of more than $6 billion in cryptocurrency from Binance over time. The report described this figure as the result of a sustained campaign, not a single hack. Binance has not publicly confirmed this number.
Taken together, the new breach report and the North Korea allegation highlight how central Binance has become to both global crypto trading and the risks around it. Users face the prospect that attackers can reach billions of dollars in assets if they compromise the wrong laptop or system inside a major exchange.
Based on the Hacker News account, the latest breach appears to have started with that kind of weakness. A DevOps engineer’s compromised laptop allegedly gave attackers a foothold to submit withdrawals that should not have been authorized. That points to a familiar problem in cybersecurity: even if on‑chain systems are robust, staff devices and internal tools can still provide a way in.
If CNN’s reporting on North Korean involvement in earlier thefts from Binance is borne out, it would fit a broader pattern of North Korean groups targeting crypto to raise funds despite sanctions. In this case, the report suggests that more than $6 billion in cryptocurrency may have been taken from Binance over an extended period, far exceeding many previous public estimates of North Korea‑linked crypto theft across all victims.
For crypto markets, large‑scale incidents like this threaten confidence in centralized exchanges. Binance’s ability to freeze nearly $3 billion of the affected assets may limit some losses, but the size of the breach still raises questions about how the company manages internal access and monitors suspicious activity.
For governments, allegations that North Korean hackers extracted billions of dollars through a single exchange feed concerns that crypto platforms can be used to bypass sanctions and fund prohibited programs. That could draw more pressure on exchanges to tighten controls and subject them to closer regulatory oversight.
Key developments to watch now are how Binance publicly characterizes the $6.3 billion incident, whether it confirms or disputes the reported North Korean link to more than $6 billion in earlier thefts, and what concrete changes it announces to its internal security and monitoring practices. Regulatory reactions in major jurisdictions will signal whether this episode accelerates efforts to treat large crypto exchanges as part of the global financial security perimeter.
Sources
- OSINT