Binance, the world’s largest cryptocurrency exchange, recently confirmed a major security breach after users reported unauthorized withdrawals from their accounts. The company has temporarily suspended withdrawals across multiple networks to mitigate the attack while its security teams investigate the incident. Binance assured customers that their funds remain safe and cautioned users against scams and phishing attempts arising in the breach’s aftermath.

The cyberattack reportedly drained at least $2 billion from Binance’s online wallets, with some estimates suggesting losses could exceed $5.7 billion, although these figures are yet to be confirmed. This potential loss would make it one of the largest cryptocurrency thefts in history. The breach was first publicly acknowledged by Binance founder and major shareholder Changpeng Zhao, who stated that user funds are expected to be fully covered, but did not elaborate further.

Subsequent investigations revealed that the hackers, believed to be North Korean state-sponsored actors, used sophisticated social engineering techniques. They posed as recruiters to lure a Binance wallet engineer into downloading malware disguised as a coding assignment. This gave the attackers access to internal tools and allowed them to expand their control across multiple engineers’ workstations, ultimately enabling the theft of billions of dollars in crypto assets. Despite extensive warnings over the years about such tactics, Binance’s defenses failed to detect the malicious activity before the breach.

The fallout from the hack has led to coordination with major crypto players; Circle froze about $800 million in tether transactions linked to the stolen funds, while Tether froze $1.56 billion connected to the attack. The FBI and blockchain forensics firms have attributed the breach to North Korean hackers, underscoring the escalating threat of nation-state cybercrime targeting the cryptocurrency ecosystem. Binance has promised enhanced security measures and engagement with external cybersecurity experts to prevent future incidents.