Binance’s $6.3 billion hack dwarfs Bybit's $ 1.5 billion breach: Is cryptocurrency theft getting bigger? - The Economic Times

The attack significantly surpasses the previous biggest cyberattack, the theft of about $1.5 billion from Bybit in February 2025. According to Binance, the compromised digital assets are worth approximately $6.3 billion. The company initially stated that part of the assets was frozen while part remained under the attackers' control, promising to compensate for the losses.

Investigators suspect this hack could become the biggest cryptocurrency theft ever. The FBI has blamed the cyberattack on TraderTraitor, a hacking organization believed to be backed by North Korea. Blockchain analytics companies have identified similarities between the Binance attack and previous cyberattacks attributed to North Korean cybercriminals.

Growing scale of crypto thefts

The February 2025 hack of Bybit marked a milestone in cryptocurrency security breaches, with hackers stealing around $1.5 billion worth of digital currency during an Ethereum transfer. The Binance hack, however, is nearly four times larger in scale. While the Binance estimate represents assets affected by the hack, the actual financial damage might differ after further investigation.

Initially, Binance suspected the breach might have originated from an engineer's computer, though the company later identified other possible entry points. The exact vector used remains one of the key questions investigators need to answer. Security specialists note similarities between the attacks, but caution that such similarities alone aren't enough to confirm the same perpetrators.

Why exchanges remain prime targets

Major cryptocurrency exchanges represent attractive targets because they accumulate large quantities of digital assets and operate across multiple blockchain networks. The potential profit from such attacks can reach millions or even billions of dollars, making them lucrative despite their complexity.

Security experts found resemblances between the Binance hack and previous attacks conducted by North Korean-related hacker groups. The West has previously asserted that such stolen funds finance North Korea's weapon development programs, though detailed money flow tracing remains challenging.

Customer confidence and recovery challenges

Unlike regular bank transfers, cryptocurrency transactions cannot be easily cancelled. Recovery requires locating the funds, cooperation from exchanges, and sometimes intervention from digital currency issuers. Binance has collaborated with other cryptocurrency firms to freeze some of the stolen money but hasn't recovered all of it yet.

The company assured customers that losses will be covered using its resources and protection scheme. Binance briefly froze withdrawals before reopening them, and customers subsequently withdrew a net total of $4.72 billion. However, the exchange noted that outflows are beginning to level off as money flows back into its services.

The Binance and Bybit hacks reveal a major vulnerability in cryptocurrency: while larger exchanges offer deeper liquidity and more services, they also represent attractive targets due to the large amounts of assets they store. The question remains whether hacking exchanges is becoming more common or simply more expensive, but the cost of a single successful hack has clearly risen significantly.