Back to all incidents

Binance

binance.com
ACKNOWLEDGED

Binance, the world's largest cryptocurrency exchange, confirmed Thursday that it had been hacked in a $6.3 billion cyber heist that blockchain investigators are blaming on North Korea.

Observable Status ACKNOWLEDGED
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-10-29
Last Updated 2026-10-30
Authentication Credentials
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

64% CONFIDENCE
1. Primary Authority INDEPENDENT VERIFICATION Base weight: 32%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +20% 8 independent domains
4. Timeline & Staleness +5% 9 milestones logged
Corroborated Source Domains:
therecord.media thehackernews.com helpnetsecurity.com bleepingcomputer.com securityweek.com theguardian.com theregister.com securityaffairs.com

Technical Forensic Briefing

Incident Overview

Binance, within its operating sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

Binance, the world's largest cryptocurrency exchange, confirmed Thursday that it had been hacked in a $6.3 billion cyber heist that blockchain investigators are blaming on North Korea.

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include binance.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (9 events logged)

2026-10-30 00:00 UTC
INDEPENDENT VERIFICATION

Binance hit by record $6.3 billion crypto hack, scrambles to freeze funds

2026-10-30 04:14 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

2026-10-30 08:26 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

2026-10-30 09:18 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Binance links $6.3 billion crypto theft to compromised DevOps laptop

2026-10-29 22:45 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: Binance probes potential $5.8 billion crypto-theft hack

2026-10-30 08:16 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: $6 Billion Binance Hack Bears Hallmarks of North Korea's TraderTraitor

2026-10-30 16:35 UTC
Media Pickup INDEPENDENT VERIFICATION

Mainstream Media Pickup: North Korea is likely culprit behind $6.3bn crypto hack, ‘largest heist in history’

2026-10-30 04:22 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security

2026-10-30 18:50 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: $6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub