The theft of $6.3 billion from the crypto exchange Binance raises alarm and draws close scrutiny from regulators

Industry experts assert that the Binance hack, amounting to a record $6.3 billion and becoming the largest cryptocurrency theft globally, demonstrated operational weaknesses in crypto exchanges rather than any issues with the blockchain technology itself.

The world's largest cryptocurrency exchange estimated the total alleged damage at approximately $6.3 billion, which is four times the amount stolen during the previous record—the Bybit hack. About $3 billion in assets that passed through wallets linked to hackers were identified and frozen. The exchange promised to cover all incurred losses.

Binance reported that initial investigations pointed to a compromised DevOps engineer's laptop, which allowed the attacker access to a service container and sent unauthorized withdrawal transactions. Later, the exchange clarified that further study uncovered additional points of entry, contradicting the initial finding of a single compromised laptop. However, the exchange stated it found no evidence of private wallet key leakage.

The UAE financial services regulator overseeing the Abu Dhabi Global Market stated that it is aware of the incident and is monitoring the situation. Binance confirmed that it has allocated over $6.34 billion from its own funds to cover the consequences of this incident.

Georgy Kucherin, Senior Security Researcher at Kaspersky GReAT, noted that the attack on Binance and a separate incident on the Polymarket prediction platform involving a compromised script from third-party developer DebugBear prove that exchanges can be hacked both through internal systems and external dependencies. He added that technical personnel remain the weak link, as even experienced engineers can inadvertently upload malware.

Sandip Pyapali, founder and CEO of Mesta, suggested that the attacker likely used the exchange's own access channels. He believes that if the hacker gained privileges through an employee's device, the system might have accepted the withdrawals as legitimate. Pyapali characterized the event as a 'maturity test' for the crypto industry, not a catastrophe, noting that exchanges will now require more robust safeguards, deeper insurance, and larger reserves.

Karsten Menke, Head of Next Generation Research at Julius Baer, stated that this incident is a 'company problem, not a crypto problem,' thereby highlighting the risks of holding assets on centralized exchanges. He recommended using self-custody in offline cold storage to reduce risk exposure. Menke also mentioned that there is no evidence of AI involvement in the attack, but noted that AI reduces the cost and speed of sophisticated attacks. He cited industry estimates that one of four malicious attacks now utilizes AI, reiterating Julius Baer's constructive view on cybersecurity.

Vincent Choc, CEO and Founder of First Digital, noted that the past day showed how crucial coordination between exchanges, issuers, and networks is when they exchange information within hours. Sergey Kunts, co-founder of 1inch, reported that Tether and Circle froze over $2.4 billion in stablecoins, and other teams blocked addresses associated with the exploit. According to him, this 'significantly limited' the attackers' ability to move funds.

Binance, considered the largest global platform for cryptocurrency trading, was the victim of a hacker intrusion that resulted in the theft of $6.3 billion (equivalent to R$ 33.9 billion in direct conversion) in assets held in its users' wallets. This incident is cited as the largest cyberattack ever documented involving cryptoassets, although investigations must confirm this claim.

If confirmed as the largest attack, the event at Binance would surpass the $1.5 billion loss suffered by Bybit in February 2025, an attack linked to the North Korean hacker group known as TraderTraitor.

In response to the incident, Binance announced that it will assume full responsibility for the damage caused by the attack, as disclosed in its post on the X platform. However, the company had to temporarily suspend withdrawal and deposit processes (although the latter have since been reactivated) while analyzing its systems and investigating the situation.

The cyberattack began on October 29, 2026, with most of the fraudulent transfers occurring within a twenty-minute period, despite other movements being registered in the subsequent hours.

Preliminary analysis conducted by Binance suggests that the intruders gained access to a DevOps engineer's laptop. Using this computer, the hackers allegedly managed to penetrate Binance's internal systems by leveraging the engineer's access privileges. This allowed them to execute cryptocurrency transfer transactions using the company's own system authorizations, without needing to violate or capture cryptographic keys.

Binance also communicated that it has identified other potential vulnerabilities in its systems, indicating that the engineer's laptop may have been only one of the vectors used in the attack.

According to the initial investigation conducted by the digital security firm TRM Labs, the hacker group TraderTraitor reappears as the probable perpetrator of this action.

The total amount of the loss was not higher because a significant portion of the stolen cryptoassets consisted of stablecoins, which are digital currencies pegged to the value of fiat currencies and issued by corporations capable of blocking these assets in digital wallets.

In this specific case, Tether, the issuer of the USDT stablecoin, blocked assets totaling $1.77 billion. Concurrently, Circle, responsible for USDC, froze an equivalent amount of $825 million. Furthermore, other entities, such as Ripple, also participated in the blocks.

However, cryptocurrencies like Bitcoin and Ether do not have the same blocking mechanisms, which led the intruders to attempt to convert part of the stolen stablecoins into unprotected cryptoassets. The swift actions taken by Tether, Circle, and other companies helped contain these operations.

Despite this, a considerable volume of cryptocurrencies was captured by the intruders. CEO Richard Teng and co-founder Changpeng Zhao assured that Binance will fully cover the $6.3 billion lost, using its own funds and a guarantee fund called SAFU (Secure Asset Fund for Users).

Affected customers should await further instructions provided by Binance itself.

YourStory's daily startup news review highlights the latest events across various sectors, including Pixxel's expansion in the US and the assessment of damages from the security incident at Binance.

The cryptocurrency exchange Binance estimated the total damage from the major security incident to be approximately $6.3 billion. Of this, about $3 billion in affected digital assets were frozen on the blockchain in cooperation with blockchain partners.

According to a preliminary investigation published on October 30, 2026, the world's largest cryptocurrency exchange by trading volume suggested that the incident might have occurred due to a compromised DevOps engineer's laptop. It is presumed that the attacker used this access to enter a service container and send unauthorized withdrawal transactions.

The space technology startup Pixxel, based in Bangalore, has established an American subsidiary, Pixxel Federal. This structure is intended to expand the company's business involvement with civilian, defense, and intelligence agencies in America.

This move reflects the growing importance of private satellites in government operations, covering areas such as resource monitoring, national security, and environmental surveillance. It also demonstrates Pixxel's ambition to go beyond providing specialized satellite imagery, offering a broader range of sensor technologies, software, and satellite systems.

Furthermore, Virat Kohli's stake in Agilitas Sports increased from 1.8% to 6.4% following the merger of one8 Sports with Agilitas, which was approved by NCLT. Previously, Kohli invested 40 crore rupees in the company and will continue to serve as a co-founder of one8.

This merger provides one8 with access to Agilitas's capabilities in product development, design, research, manufacturing, and retail. The brand plans to expand into new sports categories and international markets, including the US, UK, Canada, and Australia, aiming to create a global sportswear business starting from India.