Huge Binance hack shows: no crypto company is safe

The record hack at Binance shows that even the largest crypto companies are not safe from cyber attacks. The largest crypto exchange in the world took an estimated 6.3 billion dollars worth of crypto assets.

Security experts warn that the consequences extend beyond Binance alone. The attack raises questions about how securely crypto companies keep their customers' money, especially as more and more large financial institutions enter the crypto market.

Binance is by far the largest crypto exchange in the world. Yet hackers have managed to steal billions of dollars worth of crypto coins. The attack shows that even the largest companies in the crypto sector are not safe from cybercriminals.

According to security expert Aneirin Flynn, director of cybersecurity company FailSafe, the scale of the attack is unprecedented. Opposite Bloomberg, he even calls it the largest digital theft ever, also outside the crypto sector.

Flynn is particularly concerned about confidence in crypto. The sector is trying to attract more and more large financial institutions, such as banks and asset managers. But they place high demands on the security of their money.

If large crypto companies are hacked again and again, this can deter these institutions.

Binance estimates the size of the hack at $6.3 billion. The crypto exchange emphasizes that customers' money is safe and promises to fully compensate for any losses.

Binance has also temporarily halted withdrawals while the company investigates how the hackers were able to strike.

The attack is the largest in a long line of crypto thefts. In February 2025, crypto exchange Bybit was hacked, capturing about $1.5 billion. That was the biggest crypto hack ever at the time.

The US FBI designated North Korean hackers as responsible. They then spread the stolen money across thousands of addresses on different blockchains to make it harder to find the coins.

Several crypto companies were also affected this year. In August, more than $100 million worth of Bitcoin disappeared from thousands of wallets secured with devices made by Coinkite. The attackers exploited a software flaw that made secret access keys predictable.

A month later, crypto exchange Bitget fell victim to an attack that reportedly stole about $388 million.

In October, security issues with Ledger hardware wallets also came to light. Criminals had modified devices distributed through a reseller in Southeast Asia. Researchers estimate the damage at more than $90 million. Ledger stressed that its own systems had not been hacked.

This week, forecast platform Polymarket also had to temporarily stop trading after a security incident with a third-party software provider. According to reports, more than $2.5 million was lost in the process.

The attacks show that the vulnerabilities are not limited to crypto exchanges themselves. Software suppliers, employees and other parties with whom crypto companies cooperate can also be an entry point for hackers.

Incidentally, this problem does not only occur within the crypto sector. Several financial institutions in South Korea have also recently been affected by cyberattacks in which customer data was stolen.

At Binance, the security incident may have started with an employee's laptop. According to the initial findings of the crypto exchange, an infected computer from a software developer may have played a role.

Exactly how the attackers gained access to the systems is still being investigated. Binance emphasizes that there are no indications that the private keys of cryptowallets have been leaked.

According to blockchain researcher TRM Labs, the North Korean hacker group TraderTraitor is behind the attack. The group would have spent at least 36 hours preparing.

Then, within a short period of time, billions of dollars of crypto coins were moved across ten different blockchains, including Bitcoin, Ethereum, Solana, and XRP.

The possible access via a laptop makes it clear how complicated the security of large crypto companies has become. It's not just about protecting digital wallets. Internal software, employees and systems that approve transactions must also be properly secured.

According to Luca Parlamento, founder of investment company D2 Finance, large investors in particular should be aware of these risks.

When customers leave their crypto coins on a trading platform, they trust the company to keep them safe. In the event of a security incident, they are therefore dependent on the measures and financial reserves of the stock exchange.

According to experts, this is precisely what makes the Binance hack so far-reaching. If even one of the largest and best-known parties in the crypto sector can be affected by an attack of this size, other companies cannot imagine themselves safe either.