The exchange said it had been working with blockchain partners, cryptocurrency companies and law enforcement agencies to identify and freeze affected assets. Approximately $3 billion had been located or frozen through coordinated recovery efforts, while the status of the remaining estimated $3.3 billion remained unclear.
Binance co-founder Yi He said the company would cover all losses associated with the incident, seeking to reassure customers amid concerns about the potential financial consequences of the breach.
The incident is being described by industry analysts as potentially the largest cryptocurrency theft in history, although investigations into the full scale and technical details remain ongoing.
Compromised employee device suspected
Binance’s initial investigation suggests that the security incident may have originated from a compromised laptop belonging to one of its engineers.
According to the preliminary findings, the attacker allegedly used access obtained through the device to enter one of the company’s systems and initiate unauthorised withdrawal transactions.
The company said it had not found evidence that cryptocurrency wallet private keys had been leaked. However, investigators are continuing to examine how the attacker gained access and how unauthorised transactions were processed.
Binance has engaged cybersecurity specialists, blockchain intelligence firms and law enforcement partners to trace the affected assets and investigate the attack.
The company also said it would publish a detailed technical report after completing its investigation and provide an updated proof of reserves once the security remediation process is finished. <Cite refs={[“turn761405search0″,”turn761405news28”]}/>
Cryptocurrency prices fall following breach
The security incident triggered immediate reactions in cryptocurrency markets, with major digital assets recording losses during early Asian trading on Friday.
Bitcoin declined by more than three per cent, reaching a six-week low of approximately $76,368. Ethereum also dropped more than three per cent to around $2,178, its lowest level in two months.
Binance’s native BNB token fell approximately five per cent over 24 hours, trading near $709.70.
Shares of cryptocurrency exchange Coinbase Global also declined by 4.8 per cent, while shares of Strategy, a major corporate holder of Bitcoin, dropped nearly six per cent in extended US trading.
Market analysts warned that the incident could further weaken investor confidence in digital assets, particularly at a time when cryptocurrency markets are already facing pressure from higher US interest rates and softer demand from exchange-traded fund investors.
Major cryptocurrency companies freeze affected funds
Several cryptocurrency companies have joined efforts to prevent the movement of assets linked to the incident.
Stablecoin issuer Tether froze approximately $1.57 billion in assets associated with the breach, while Circle blocked more than $800 million.
Ripple also froze approximately $200 million, according to Binance co-founder Yi He.
World Liberty Financial, a cryptocurrency company linked to US President Donald Trump and his family, said it had coordinated with digital asset custodian BitGo to freeze funds connected to the incident.
The company reportedly helped freeze approximately $27 million in stablecoins and around $2 million worth of World Liberty tokens.
These coordinated actions demonstrate the importance of cooperation between cryptocurrency exchanges, stablecoin issuers and blockchain networks when attempting to recover assets following major cyber incidents.
Binance promises protection for customers
Binance said customer funds remained safe despite the estimated financial impact of the incident.
The company operates a Secure Asset Fund for Users (SAFU), a reserve intended to provide additional protection to customers in exceptional circumstances, including security breaches.
Binance has committed to using the SAFU reserve and its corporate resources to cover all losses arising from the incident.
As part of its immediate response, the exchange initially suspended deposits and withdrawals while security checks were conducted. It subsequently indicated that deposits could operate normally again, while withdrawals remained temporarily restricted during further security work. <Cite refs={[“turn761405search2″,”turn761405search0”]}/>
Fresh concerns over cryptocurrency security
The incident has renewed debate about the risks associated with holding digital assets on centralised cryptocurrency exchanges.
Binance has approximately 335 million registered users worldwide and reported around $162.8 billion in assets under custody in its 2025 annual report, highlighting the scale of the platform and the potential consequences of a major security failure.
The breach also adds to a series of significant cryptocurrency thefts in recent years. Cybercriminals stole approximately $2.9 billion in digital assets across nearly 150 attacks during the previous year.
Another major cryptocurrency exchange, Bitget, also reported a security incident involving approximately $350 million in stolen assets in September.
Cybersecurity specialists have warned that increasingly sophisticated attacks, including those assisted by artificial intelligence, are making it more difficult for companies to identify vulnerabilities before criminals exploit them.
The latest Binance incident could encourage investors to reconsider how they store digital currencies and assess the financial strength, security arrangements and recovery guarantees of cryptocurrency platforms.
The investigation remains ongoing, while Binance and its industry partners continue efforts to trace affected assets, strengthen security systems and restore normal withdrawal services.
