How does a single exchange lose $6.3bn in about 20 minutes? That's the question hanging over Binance after an October 29, 2026 security incident that has become the largest crypto theft on record. TRM Labs traced roughly $6.36bn moving out of Binance wallets across 10 blockchain networks, most of it within a 20-minute window. The exchange itself put the impact at $6.3bn, though the final unrecovered loss is still unclear.
TRM Labs traced roughly $6.36bn leaving Binance wallets across 10 blockchains, most of it within a 20-minute window.
The figure dwarfs the previous record holder: the $1.5bn Bybit hack from February 2025. Binance's incident is more than four times that size. It also surpasses older landmark thefts like the $625m Ronin Network breach in 2022 and the $611m Poly Network hack in 2021.
But calling Binance “the biggest” needs context. The term refers to the size of a specific theft, not the size of the exchange or its trading volume. Before this incident, Bybit held the record. Binance only claimed the top spot once October's withdrawals were traced and valued. This is a new record, not proof that Binance has always been the industry's weakest link.
Early findings point to a possibly compromised DevOps engineer's laptop as the entry point, according to co-CEO Richard Teng. That access reportedly led to a service container and unauthorized withdrawals. Binance later said the attack was more complex than first described, with investigators still mapping the full path. The company says it found no evidence of a leaked wallet private key. TRM Labs and Chainalysis have linked the attack to North Korea's TraderTraitor group, though Binance hasn't confirmed this.
Roughly $3bn of the affected assets has already been frozen—about half the total estimate. Binance has pledged to cover losses through its SAFU fund and company reserves, and it temporarily halted withdrawals while reviewing security. Some observers have drawn comparisons to last look practices in forex markets, where final-moment checks before execution have long raised questions about fairness and transparency, a tension that echoes the scrutiny now facing crypto exchanges.
For markets, the incident is a reminder that crypto infrastructure remains vulnerable, even at the largest exchanges. African traders using crypto for remittances or hedging against currency pressure, from the naira to the cedi, will likely watch how exchanges respond and whether regulators tighten oversight following the breach.
