Binance faces suspected multibillion-dollar hot-wallet heist as major stablecoin issuers freeze funds
Binance has suspended withdrawals and confirmed a security incident after blockchain trackers saw between $2 billion and $5.7 billion drain from its hot wallets, prompting Circle and Tether to freeze roughly $800 million and $1.56 billion in linked stablecoins and intensifying scrutiny of the exchange’s controls.
Binance, the world’s largest cryptocurrency exchange by trading volume, is scrambling to respond to what on-chain analysts say could be one of the biggest thefts in the sector’s history.
The company confirmed a security incident and halted withdrawals on multiple networks after users and blockchain trackers reported massive, unauthorized outflows from Binance hot wallets. These online wallets hold assets needed for daily operations and are more exposed to hacks than offline storage.
Crypto tracking services estimate that between $2 billion and $5.7 billion was pulled from Binance-linked hot wallets over a short period. The final total remains uncertain as investigators sort through transactions.
Two of the biggest stablecoin issuers, Circle and Tether, moved quickly to freeze tokens associated with addresses flagged in connection with the suspected heist. Circle froze about $800 million, and Tether froze roughly $1.56 billion, according to early tallies. Because these dollar-pegged tokens are centrally issued, the companies can block specific addresses at the smart-contract level.
Binance has yet to identify who is behind the attack or explain the technical method used. There is no public indication so far that its core trading engine or user identity data were compromised, but the scale of the outflows has shaken confidence in centralized exchanges at a time when many users still remember past collapses and hacks.
For customers, the immediate questions are whether their funds are safe and when they can move them. Paused withdrawals, even described as precautionary, often trigger heavy withdrawal demand once services partly resume, which can stress liquidity and widen price swings, especially in less-traded tokens.
The intervention by Circle and Tether shows how large issuers now act during major hacks: freezing stablecoins to limit an attacker’s ability to cash out. That can help contain losses but also underlines how much control these private firms exercise over assets many users assume behave like neutral digital cash.
Regulators in the United States, Europe, and other markets were already scrutinizing Binance’s compliance and risk management. A suspected theft of this size is likely to harden calls for rules on capital, custody, and transparency that bring big crypto platforms closer to the standards applied to major financial institutions.
Other exchanges and decentralised finance platforms now face a separate exposure: the risk of handling tainted coins. If stolen funds move through their systems and aren’t flagged, they could face legal and reputational fallout.
Attention will now focus on Binance’s eventual technical explanation of the breach, any commitment to compensate affected users, and the reaction from supervisors in key jurisdictions. Investigators will track frozen stablecoin balances, efforts to launder funds through mixers or smaller platforms, and how much of the stolen value the attackers manage to convert or move.
Sources
- OSINT