Binance’s latest security crisis sent shock waves through crypto trading Friday, with Bitcoin sliding more than 3% to a six-week low of $76,368 in early Asian trading and Ether falling more than 3% to a two-month low of $2,178 after the world’s largest exchange confirmed a breach with an estimated total impact of about $6.3bn. Coinbase Global shares dropped 4.8% in extended US trading, while Strategy, the bitcoin buyer, fell nearly 6%. The timing could hardly have been worse for a market already on edge, and the scale of the hit has revived fears about whether even the biggest venues can keep user funds safe under pressure.
Binance said its initial investigation suggests the breach may have started with a compromised DevOps engineer’s laptop, which gave an attacker access to a service container and allowed unauthorized withdrawal transactions. Richard Teng, Binance’s co-chief executive, tried to calm customers and investors with a blunt reassurance: “Bottom line – your money is safe, and we’re covering every loss.” The company temporarily suspended deposits and withdrawals while it completed security checks, a move that immediately highlighted how quickly one incident at a central exchange can ripple across the wider market.
The exchange said it found no evidence of any wallet private key leak, an important point because key compromise can point to a deeper failure of custody security. Binance also said about $3bn of affected assets were frozen on-chain with blockchain partners, limiting the immediate damage. In a separate statement, Yi He, Binance co-founder, said: “Binance will cover all hacking losses.” Binance said it will cover all losses from the SAFU fund and company funds, underscoring how seriously it is treating the event even as the investigation continues.
The breach is potentially the largest crypto heist in history, and it lands in a market that has learned to price in security risk but not necessarily at this scale. The estimated total impact of about $6.3bn is roughly four times the $1.5bn Bybit hack of February 2025, according to the reporting cited by BBC News and The Guardian. Binance did not confirm attribution, but analytics firms TRM Labs and Chainalysis attributed the attack to North Korea’s TraderTraitor unit. For now, that remains an outside assessment, not a conclusion Binance has adopted.
Changpeng Zhao, Binance founder and former chief executive, also weighed in publicly, saying: “User funds are safe! It does look like a hack on Binance.” That line will likely be quoted widely across crypto circles, but it does little to erase the market’s immediate reaction. In a sector where confidence can vanish faster than liquidity, even a temporary suspension of withdrawals can spook traders into moving first and asking questions later.
The price action tells the story. Bitcoin’s drop to a six-week low of $76,368 and Ether’s fall to a two-month low of $2,178 show that traders treated the Binance breach as a broad-sector event, not just an exchange-specific problem. Coinbase’s 4.8% decline in extended trading suggests investors also read the incident as a potential drag on crypto sentiment more generally, while the nearly 6% slide in Strategy shares shows how quickly the shock can spread to stocks tied to bitcoin exposure.
That reaction makes sense. Binance is not a niche platform; it is the largest crypto exchange in the world, and it sits at the center of global digital-asset liquidity. When it freezes withdrawals, even briefly, the market has to consider whether other exchanges may face similar issues, whether customer trust will wobble, and whether regulators will use the moment to press harder on controls. None of those questions need to be answered immediately for prices to fall. The mere uncertainty is enough.
Binance said withdrawals will remain suspended until the security revamp of the withdrawal service is complete, and it plans to publish a detailed technical post-mortem once the investigation is finished and facts are verified. It also said it will issue an updated Proof of Reserves once remediation is complete. Those steps matter because they will shape how much confidence the market has in the exchange’s own version of events and how much reassurance it can give customers who want a clearer picture of what happened.
The partial freezing of assets also shows how much of crypto’s defensive infrastructure now runs across multiple players. Tether froze about $1.57bn and Circle froze more than $800m in assets linked to the incident, according to the reporting. That bought Binance time and likely reduced the eventual damage, but it also reinforces a grim reality for the industry: fast-moving settlement rails can help freeze illicit flows, yet they can’t prevent the initial breach or the panic that follows.
For Binance, the immediate financial cost may be easier to absorb than the reputational one. The company is promising full coverage through its SAFU fund and company resources, and its leadership has moved quickly to project control. But the market will want more than reassurances. It will want a clear technical account of how a compromised engineer’s laptop could lead to unauthorized withdrawals, why the breach was not blocked sooner, and whether the incident exposes a weak point in the exchange’s operational setup rather than just a single machine.
That is why the promised post-mortem matters so much. If Binance can show the attack path was narrow and contained, the damage may prove manageable. If the investigation reveals deeper gaps in access control or transaction approval, the story could extend beyond one exchange and into the broader debate over how much risk investors are taking when they leave assets on centralized platforms. For now, the market verdict is already in: when Binance stumbles, bitcoin, ether and crypto-linked stocks all feel it at once.
