The $6.3B Binance hack: what happened, and what to watch this week
In late October, attackers drained one of Binance's hot wallets in about 20 minutes and took roughly $6.3 billion. It is the largest theft crypto has seen. A week later, most of the story is no longer about the hack itself but about the response: who covered the losses, who froze what, and how the market took it. Here is a plain summary of what is known, written on 1 November. Figures differ slightly between outlets, so treat them as provisional.
What happened
The attack hit a single hot wallet: the online wallet an exchange keeps topped up for everyday withdrawals. Binance's CEO said the entry point was EIP-7702, an Ethereum feature that lets an ordinary account temporarily run smart-contract code. The whole drain took about 20 minutes.
The FBI has attributed the attack to North Korea. Blockchain analytics firms TRM Labs and Chainalysis point the same way, to the Lazarus Group's TraderTraitor unit, the team behind several of the largest exchange thefts of recent years.
How Binance responded
- Withdrawals were paused right after the attack.
- About 90% of the stolen assets were covered from Binance's own funds, so customer balances are meant to stay whole.
- Withdrawals reopen in phases from 1 November, subject to security checks.
- A new proof of reserves is expected by 3 November.
One analyst quoted by the press said the breach does not currently appear to create a meaningful solvency risk for the exchange. That is an outside opinion, not an audit; the proof of reserves will say more.
The industry stepped in
Stablecoin issuers can freeze tokens at the contract level, and they did. Tether and Circle froze funds linked to the attack, and reports put the total frozen so far at around $3 billion. The US Secret Service is tracing the rest. North Korean groups usually launder slowly, through bridges and mixers, over months, so expect more freezes and more headlines.
What the market did
- Bitcoin fell about 5% on the news and was trading around $77,000–78,000 on 1 November, roughly 38% below its $126,200 peak from October 2025.
- US spot Bitcoin ETFs saw about $643 million of outflows in a single session.
- About $427 million of leveraged positions were liquidated in 24 hours.
- Total crypto market value stood near $2.63 trillion; Ether was around $2,250.
Three dates this week
- 2 November: the first spot ETF flow numbers after the hack. Continued outflows would show institutions are still nervous.
- 3 November: the US midterm elections. Elections usually add volatility to every market, crypto included.
- 3 November: Binance's new proof of reserves, and whether withdrawals have reopened smoothly by then.
Expect larger swings than usual until all three are behind us.
The lesson that never changes
Coins on an exchange are a promise from the exchange, not coins in your hands. This time the promise was kept: Binance had the reserves to cover the loss. Not every exchange will.
- Keep long-term holdings in your own wallet, where you hold the keys.
- Stay away from leverage, especially in weeks like this one. Liquidations are what turn a 5% drop into a total loss.
- Have a plan before the news, not after it.
*Not financial advice. Written on 1 November 2026 from public reports; figures may be revised.*
Sources
Get new articles by email
Only when a new article is out. No ads. Details →