Binance hacked for an estimated $6.3 billion; $3 billion in crypto frozen

Binance has been hacked in an incident with an estimated $6.3 billion impact, CNBC reported on Oct. 30, 2026. About $3 billion in cryptocurrency assets have been frozen so far, the exchange has pledged to cover all losses, and blockchain investigators have linked the attack to North Korea.

TRM Labs attributed the attack with high confidence to TraderTraitor, a North Korean state-sponsored hacking unit, based on on-chain and off-chain intelligence. The firm estimated that about $6.36 billion in digital assets were moved from Binance wallets across 10 blockchains, most within roughly 20 minutes. TRM said preparations began at least 36 hours before the theft, with attackers using Tornado Cash, a crypto mixing service, to fund their wallets before the breach.

Chainalysis also pointed to North Korea. Co-founder and CEO Jonathan Levin said the firm assessed that the $6.4 billion Binance hack was likely carried out by TraderTraitor, citing links to previous attacks. The FBI previously identified the same group as responsible for the $1.5 billion Bybit hack in February 2025, according to TRM Labs.

Freezing versus recovering funds

Freezing crypto prevents it from being transferred, but recovering it needs a separate legal process, said Ari Redbord, global head of policy at TRM Labs and a former U.S. federal prosecutor and Treasury official. "A freeze stops the money from moving, and recovery follows through legal process," Redbord told CNBC.

Redbord said law enforcement usually obtains a court order or seizure warrant before working with stablecoin issuers to release or reissue assets and return them to their owners. Stablecoins are easier to recover than other crypto assets because the issuer controls the token contract, he said, noting that Tether and Circle can freeze, burn and reissue tokens so frozen USDT and USDC can be returned to a victim. Bitcoin and ether are harder to recover because no issuer can directly freeze them, Redbord added; investigators must trace funds through exchanges and other crypto services where they can be intercepted.

Eric Jardine, head of research at Chainalysis, said getting frozen assets back involves coordination among law enforcement, exchanges and token issuers. "There is no standard recovery timeline. A technical freeze may happen quickly, while returning funds can take months or years," Jardine told CNBC. Bitcoin and ether can still be followed on public blockchains and potentially recovered when they reach a cooperating exchange or another centralized platform, he added.

Solvency risk

The hack does not currently look likely to create a major solvency problem for Binance, according to Sean Farrell, head of digital asset strategy at Fundstrat Global Advisors. Farrell estimated about $3.3 billion in assets remained unfrozen. Assuming frozen stablecoins are eventually returned, Binance's SAFU emergency fund, worth about $1.2 billion, could cover roughly a third of the remaining losses, with the balance coming from the exchange's own funds, he said.

Farrell said the main things to watch are how soon Binance restarts withdrawals and whether outflows stay orderly. A shortfall in customer assets could force the exchange to sell reserves, potentially triggering broader selling across crypto markets. "I do not think that is the setup we are dealing with, but the key tell will be how quickly withdrawals resume and whether outflows stay orderly," he said.

Calls for stronger security

The hack highlights calls for tougher cybersecurity standards and more coordination between governments, according to Chris Perkins, head of Franklin Crypto at Franklin Templeton. Speaking to CNBC's "Squawk Box Asia," Perkins said the industry must address cybersecurity challenges to reach its full potential. He urged stronger defenses and policies aimed at holding cybercriminals accountable, and called for greater international cooperation, pointing to how G20 countries coordinated regulation after the global financial crisis as a possible model. He also said AI could help identify and fix vulnerabilities, even as the technology is used by attackers and defenders.

Source: CNBC Top News.