If you keep any crypto on an exchange, this weekend’s question is a plain and uncomfortable one. Can the balance in your app disappear because someone else’s laptop was compromised?
On 29 October, an attacker drained Binance hot wallets across 11 blockchains, and Elliptic puts the loss at $6.43 billion. Binance’s own estimate is around $6.3 billion, as Engadget reports it. TechCrunch calls it by far the largest known crypto theft and says the amount is unconfirmed and may change. For scale, Bybit lost $1.46 billion in 2025, and Elliptic says this is over four times that.
Binance says its early investigation points to a compromised engineer’s laptop, which let an attacker reach a service container and submit unauthorized withdrawals. It says it has seen no evidence that private keys leaked. It also says “user funds are safe” and that it will cover losses from its SAFU fund and company money, per Engadget. That is Binance describing its own incident, and TechCrunch notes it has provided no proof yet. An updated proof of reserves is promised once remediation is done.
What custodial risk means for an ordinary holder
When coins sit on an exchange, you do not hold them. The exchange holds the keys, and your balance is an entry backed by wallets it controls. Here, going by Binance’s account, the way in was an employee’s machine, not anyone’s user account. A strong password and two-factor login on your side would not have changed the outcome. That is the part that bothers me. The risk lived in a place no customer could inspect.
So whether you get made whole depends on one thing: whether the exchange can and will pay.
Binance says it will. I cannot verify that, and neither can you today.
What the freezes show, and what they do not
Elliptic has verified $2.84 billion frozen, about 44% of the theft, almost all of it USDT and USDC. It says Tether froze the attacker’s main Ethereum wallet 37 minutes after the USDT arrived, locking 1.18 billion USDT, and Circle froze 823 million USDC three minutes later. Binance estimates about $3 billion frozen assets. The totals differ by source, and Engadget relays larger Tether and Circle figures than Elliptic’s, so treat every number here as a moving one.
The freezes worked because stablecoins have an issuer who can press a button. Elliptic says nothing has been frozen on Bitcoin, the XRP Ledger, Solana, or NEAR, because native assets have no issuer, and it counts about $3.33 billion still under the attacker’s control in assets that cannot be frozen.
A strange trade.
The feature that rescued roughly half the loss is the same one that means that your token has an off switch held by a company.
Who did it is still unknown
TRM Labs attributes the attack to North Korea’s TraderTraitor group with high confidence, per Engadget. Elliptic says North Korea-linked actors likely did it, and adds that no government or law enforcement agency has confirmed this. It also lists reasons for caution: a small overlap with addresses from a September exploit of Bitget, funds that sat longer before moving than is typical, and laundering methods that differ from the Bybit case.
Binance has not issued a post-mortem, so the way the laptop was first hacked is still unknown to the public.
What I would do this weekend
This is not financial advice, just what I would check.
First, how much I leave on any exchange, treated as an amount I could be locked out of for weeks.
Second, if I rely on Binance, I prefer its dedicated status page instead of a summary since TechCrunch reports that all deposits and withdrawals are halted, whereas Engadget mentions that deposits are functioning normally.
Third, I would expect scam messages that use the hack as bait, so I would open nothing that asks me to verify my account. Moving coins to your own wallet has its own risks, like a lost seed phrase, so it is a trade and not a fix. And the loss figure, the frozen share, and the attribution can all change before you read this.
They’re Already Stealing Your Encrypted Data. They Just Can’t Read It Yet.
For the first time in the history of quantum computing, independent researchers proved that quantum error correction actually works at scale. What has been unfolding since the start of 2026 should worry or excite anyone working in tech, finance, cybersecurity, or healthcare.