Cryptocurrency exchange Binance is actively investigating a security breach that could rank as the largest digital asset heist in history, after users reported substantial fund outflows on a Thursday afternoon. Financial analysts and market traders tracking the incident estimate that between $1.7 billion and $5.7 billion may have been drained from digital wallets during the suspected cyberattack.
Changpeng Zhao, co-founder of Binance, stated on the social media platform X that the exchange appeared to have been compromised. However, a company spokesperson emphasized that the platform is still thoroughly investigating the situation. Kevin March, co-founder of cryptocurrency trading firm JPEG Trading, described the scale of the incident by noting that the situation is unprecedented.
In response to the emergency, Binance restricted customer withdrawals while digital asset issuers Tether and Circle acted to freeze more than $1 billion in cryptocurrencies, according to Zhao, an intervention designed to curtail customer losses. Both Zhao and a Binance spokesperson maintained that general user funds remain safe, with the spokesperson noting that the exchange’s security teams are reviewing all pertinent information with urgency.
Should the higher estimates be confirmed, the suspected breach would eclipse previous major digital heists. In 2025, hackers linked to North Korea stole approximately $1.5 billion worth of cryptocurrency from the Bybit exchange. State-backed actors have increasingly utilized cyberattacks and digital scams as an industrial-scale enterprise, frequently targeting crypto assets alongside schemes to place North Korean workers within Western companies.
While cryptocurrency platforms remain frequent targets for malicious actors, massive attacks routinely threaten smaller exchanges with collapse due to sudden panics and withdrawal runs. Because of its immense scale, Binance occupies a more resilient position against such systemic failure. March observed that if an identical incident had struck any other entity in the digital asset sector outside of Binance, the outcome would have been catastrophic. He added that the exchange possesses the financial capacity to absorb potential losses through its established reserves and balance sheet, though wider market repercussions and asset price volatility remain plausible.
The timing of the Binance incident coincided with other digital security disruptions across the sector. Decentralized predictions market operator Polymarket confirmed it suffered a cyberattack on the same day, forcing the platform to suspend trading for an hour after an attacker absconded with at least $2.7 million in user assets. Security researchers at Hudson Rock connected the Polymarket breach to a compromise at third-party website monitoring tool DebugBear, which had reported handling its own security incident earlier Thursday.
As the investigation continues, Binance has not yet officially confirmed the identity of the perpetrators or the exact total value of the digital currencies compromised.
