Binance has suspended deposits and withdrawals while investigating a major security incident involving billions of dollars transferred from exchange-controlled cryptocurrency wallets. Independent blockchain-analysis companies estimate that between $5.8 billion and more than $6 billion may have been stolen, potentially making this the largest cryptocurrency theft on record. Binance has not confirmed the final losses but maintains that customer funds are safe and has promised to cover losses connected to the incident.
BILLIONS MOVED FROM BINANCE HOT WALLETS
Blockchain investigators identified suspicious transfers from Binance-controlled hot wallets to newly created cryptocurrency addresses. The affected assets reportedly included Bitcoin, Ether, USDT and USDC. Chainalysis estimated approximately $5.9 billion in losses, while TRM Labs placed the figure above $6 billion. Binance has not disclosed how attackers gained access to the wallets or identified a responsible threat actor.
CRYPTO COMPANIES FREEZE BILLIONS IN STOLEN ASSETS
Cryptocurrency companies responded by freezing assets linked to the suspicious transfers. Tether reportedly froze more than $1.5 billion in USDT, while Circle restricted more than $800 million in USDC. Binance said approximately $3 billion in affected assets had been frozen through industry cooperation. The exchange also suspended deposits and withdrawals while conducting security checks and coordinating with law enforcement. Binance.US reportedly remained unaffected, and the timeline for restoring unrestricted transactions was unclear.
CUSTOMER FUNDS AND SECURITY CONCERNS
The incident has raised concerns about cryptocurrency exchange security and customer reserves. External analysis suggested that affected wallets backed customer balances, although Binance has not confirmed a reserve shortfall. Security experts recommend reviewing account activity, strengthening wallet authorization controls and monitoring phishing attempts involving fraudulent recovery messages. Binance has promised a detailed incident report, while investigators continue determining the attack method, total losses and potential recovery of frozen cryptocurrency.