Compliance
Binance Says $7.6 Billion Affected In Crypto Attack

The saga, details of which are still coming to light, is a blow to the cryptocurrency sector that has in some ways become a mainstream area in financial services.
Binance, the
cryptocurrency exchange, said today that $6.3 billion worth of
funds were affected, with $3 billion in crypto frozen, in the
largest such hacking attack on this sector yet recorded.
“The company has already publicly committed to cover losses
through company funds in the prior announcement. Binance has
already reserved over $6.34 billion of company funds to cover
this incident. $5 billion of these funds are already held in the
exact token assets that were impacted,” it said in a statement
today, issued via the X platform.
“We are completing the purchase of the remaining amount by buying
token assets through market channels and OTC [over the counter]
channels. We are doing this to match the format of the remaining
token assets and address any asset shortfalls,” it continued.
“This step can take longer because some tokens may have low
liquidity and OTC settlement also takes time. We will share more
progress as soon as we can. These figures do not include frozen
or protected assets, which remain subject to ongoing recovery and
verification,” it said. As of the time of writing, Binance said
$3 billion has been frozen.
A report by Bloomberg yesterday said
blockchain intelligence firms TRM Labs, Chainalysis and Elliptic
have pointed to North Korea as behind the Binance heist. TRM
called it “the largest crypto theft on record.” The funds drained
in the attack were a mix of the largest cryptocurrencies,
including Bitcoin, Ether, and the dollar-backed stablecoins USDT
and USDC, the report said.
With cryptos and digital assets being promoted as an increasingly
mainstream element of modern finance, including wealth
management, the episode will come as a blow.
“With investigators examining the possibility of compromised
employee access and state-linked involvement, the incident raises
uncomfortable questions about whether traditional security
approaches can keep pace with increasingly sophisticated
attackers,” Phoebe Hodgson, banking and payments senior analyst
at GlobalData, an intelligence and productivity platform,
said.
“Attackers are no longer focused solely on breaking into systems
or stealing customer data. They are increasingly seeking to
exploit the trust embedded within financial infrastructure,
turning legitimate access and transaction processes into
mechanisms for moving money,” she continued.
“For financial institutions, the implications are significant.
Decades of investment in cybersecurity has strengthened
traditional defenses, yet the growing complexity of digital
banking and AI have created new vulnerabilities,” Hodgson
continued.
Citing her firm’s Wealth Management Industry Conditions Analytics
2026, the greatest threat to the wealth management industry is
cybersecurity threats. Of the institutions surveyed, 65 per cent
said this was their greatest concern, up from 56 per cent in 2025
(478 wealth management companies across 20 markets were surveyed
in Q2 2026). Such attitudes can be relayed into retail banking,
payments and other financial industries. As institutions become
more interconnected and dependent on automated processes, the
distinction between a security breach and a major financial loss
is becoming dangerously narrow,” she said.
“Ultimately, the Binance hack reinforces a critical message for
financial-services leaders: the next generation of cyber
resilience will be defined not by whether institutions can
prevent every breach, but by whether they can stop attackers from
turning that breach into irreversible financial loss,” Hodgson
said.
Bloomberg said Bitcoin's price fell on news of
the Binance attack, dropping below $77,000, before later
recovering slightly as the US working day began.
“The Binance hack demonstrates the inherent insecurities of
digital asset ownership and that just as in other forms of
cyber-crime the main weakness is not the strength of the
underlying cryptographic technology, but the human factor," David
Bowman, a partner at London law firm DMH Stallard and specialist
in digital asset litigation, said.
"The compromising of a single senior developer’s laptop at the
cryptocurrency exchange has allowed hackers to orchestrate one of
the greatest thefts of all time with little more than a computer
and an internet connection," Bowman said. "The fact that Binance
has the ready means to cover the losses, which they would likely
be legally responsible to cover given the apparently nature of
the hack, is also a startling feature of the case.”