What happened?
Binance’s early investigation suggests that attackers may have gained access through an employee’s laptop. They then used company systems to make withdrawals without permission.
The investigation is continuing. The full explanation of how the attack happened is still being established. Source: Binance
Who is suspected?
Two companies that investigate cryptocurrency transactions, TRM Labs and Chainalysis, have linked the attack to a North Korean hacking group called TraderTraitor.
This is the investigators’ assessment. Binance said it was still working with law enforcement to confirm who was responsible. Readers should understand that a strong suspicion and an officially confirmed finding are different things. Source: Associated Press
Was Bitcoin itself hacked?
The reports concern Binance’s systems and the digital money held in its accounts. They do not establish that the Bitcoin network itself was broken into.
Think of it this way: if someone steals dollars from a money-changing business, the theft happened at that business. It does not mean the dollar itself has stopped working.
Investigators have reported suspicious transfers involving Bitcoin, Ethereum and other digital currencies. Source: Crystal Intelligence
What does this mean for customers?
Binance says it will use its emergency protection fund and company money to cover the losses.
That is a promise from the company. It does not mean that every step of the recovery process has already been completed.
Binance initially announced temporary restrictions on deposits and withdrawals while it carried out security checks. Customers should check the official Binance website or app for the latest information about their accounts. Source: Binance
Has something like this happened before?
Yes. In February 2025, another cryptocurrency company, Bybit, lost approximately $1.5 billion in digital assets.
The FBI confirmed North Korea’s responsibility for that separate theft. However, that earlier finding does not prove who carried out the Binance attack. Source: FBI
What should readers do?
If you use Binance, open its official app or website directly to check for updates. Be careful with messages claiming that you must click a link or send money to protect your account.
Never give anyone your password, security code or wallet recovery words—the secret words used to restore access to a digital wallet.
If you do not use Binance, this report alone does not mean that your own account has been affected.
Editor’s note: Information reviewed on October 30, 2026. The investigation is continuing. Recovery figures and account restrictions should be checked again before publication.