B.Mirror Desk: Massive cyberattack on Binance, one of the world’s largest cryptocurrency exchanges, has reignited concerns regarding the security of digital assets. In a span of just 20 minutes, approximately $6.3 billion worth of assets were siphoned off from various digital wallets belonging to the platform. Cybersecurity analysts suspect the involvement of a notorious North Korean-linked hacker group. While about half of the stolen funds have already been frozen, Binance continues its efforts to recover the remaining assets.

According to a BBC report, hackers carried out a cyberattack on October 29, targeting various digital wallets on the Binance platform and making off with a substantial amount of assets. Data from blockchain analytics firm TRM Labs indicates that approximately $6.36 billion in digital assets were stolen across 10 different blockchains. Most alarmingly, the bulk of these assets was moved within a mere 20-minute window.
Initial investigations by Binance suggested that the attack began when a laptop belonging to one of the company’s engineers was compromised. By gaining unauthorized access to this computer, the hackers were able to infiltrate the technical infrastructure used to manage transactions. However, subsequent investigations revealed vulnerabilities and signs of intrusion across multiple security layers, indicating that the attack was far more sophisticated and complex than initially assumed.
Analyses by blockchain firms TRM Labs and Chainalysis point strongly toward the involvement of a North Korean hacker group known as “TraderTraitor”—also referred to as the “Lazarus Group.” Previously, North Korean-linked hackers were also held responsible for the theft of approximately $1.5 billion in digital assets from the cryptocurrency exchange Bybit. Immediately following the attack, Binance began coordinating with various organizations to recover the stolen assets. Richard Teng, the company’s co-CEO, stated that recovery efforts are being conducted in collaboration with cryptocurrency issuers, blockchain analysts, and law enforcement agencies. So far, approximately $3 billion worth of stolen assets have been seized. Furthermore, the company has pledged to use its own funds to compensate affected users for their financial losses.
The U.S. Secret Service has also joined the investigation and recovery efforts. The agency reported that it is working around the clock to locate, seize, and recover the stolen digital assets. Simultaneously, initiatives are underway to identify those responsible for the attack and bring them to justice. Leading stablecoin issuers, such as Tether and Circle, are also assisting in this process, playing a key role in freezing assets held in suspected digital wallets.
This major cyberattack on Binance has impacted the global cryptocurrency market. Following the news of the incident, the market value of Bitcoin fell by more than 4%. Prices for other popular digital currencies, including Ethereum and Solana, also saw a downward trend, fueling renewed uncertainty among investors.
Binance, which launched in 2017, is estimated to have over 300 million registered users worldwide. A cyberattack of this magnitude on an exchange built upon the trust of such a vast user base has highlighted the limitations in the security infrastructure of the cryptocurrency sector. According to experts, securing digital wallets alone is insufficient; the entire technical infrastructure—used for authorizing, managing, and controlling transactions—must be significantly strengthened to ensure the protection of digital assets.