Binance customers see temporary freeze as rivals upgrade security after $6.3 billion breach

Withdrawals at the world's largest cryptocurrency exchange were suspended following a theft that stripped $6.3 billion from the platform. For the millions of users who hold their digital assets there, the pause in service marked an immediate disruption. The company stated it would use its own capital to cover the deficit, aiming to prevent the loss from impacting individual account balances directly.

The attack occurred late Thursday and lasted approximately 20 minutes. Richard Teng, co-CEO of Binance, told followers on X that the intrusion likely started with a compromised laptop belonging to a software engineer. That access gave the hackers a foothold in the systems that process withdrawals. The company later identified additional breaches, but software intended to wipe the attackers' digital traces complicated the investigation.

Analysts at US blockchain analysis firms TRM Labs and Chainalysis pointed to patterns consistent with previous attacks attributed to North Korea. The North Korean mission in Geneva declined to confirm or deny involvement. The thieves used sophisticated laundering methods that Chainalysis had not previously documented, attempting to move the stolen funds before exchanges could freeze the assets.

Rival exchanges moved quickly on Friday to reassure their customers. Coinbase reported it adjusted the systems used to store cryptocurrency keys offline as a precautionary measure. Kraken stated its full-time teams monitor for vulnerabilities daily and are reviewing the incident for applicable lessons. Tether, a stablecoin issuer, froze nearly $1.57 billion linked to the breach, while Circle froze $800 million. Bitcoin and ether could not be frozen because no single entity controls those networks.

Market reaction was swift but partially reversible. Bitcoin dropped more than 4% on Thursday, and ether fell more than 5%. Both tokens recovered some of that value on Friday. Josh Riezman, chief legal and strategy officer at crypto firm GSR, said the industry should not suffer material losses overall, noting that Binance has the resources to absorb the exploit directly.

Harry Donnelly, CEO of Circuit, a crypto risk infrastructure company, said firms are planning additional employee training to counter social engineering tactics. Security experts believe the initial laptop compromise involved tricking the employee into revealing sensitive information or granting system access. This vulnerability highlights the human element in digital security as platforms grow in complexity.

Executives are now calling for a more coordinated response strategy across the sector. Star Xu, CEO of crypto exchange OKX, posted on X that the industry needs a real-time alert system. Such a tool would allow participants to share information immediately, coordinate a rapid response, and temporarily freeze suspected stolen funds. Chris Perkins, Franklin Templeton’s head of crypto, agreed that the security situation must be addressed immediately for the sector to reach its full potential.

Regulators under President Donald Trump are promoting deeper integration of digital assets into the financial system. This push raises the stakes for an industry with a history of significant hacks. Riezman noted that this confluence of traditional and digital finance makes the current security improvements a necessary catalyst for the next phase of growth.