Binance Hack: $6.3B in 20 Minutes, 10 Chains [2026] - shattered.io

The numbers behind the Binance hack are now clear: approximately $6.36 billion left Binance wallets across 10 blockchains, with most of the money moving in roughly 20 minutes starting at 20:00 GMT on October 30, 2026. TRM described the incident as the largest cryptocurrency theft on record, while Binance assured customers their funds remain "safe" and the company would cover all losses.

Binance took two public steps following the breach. The company said it located and froze about $3 billion of the affected assets, equivalent to roughly 2.7 billion euros, while also suspending deposits and withdrawals during security checks. However, Binance has provided no information about the remaining $3.3 billion, creating significant uncertainty in the market.

Attack Method

Binance's initial investigation points to a compromised laptop belonging to a DevOps engineer as the entry point. From there, attackers gained access to a service container and submitted unauthorized withdrawal transactions. Importantly, Binance found no evidence that wallet private keys leaked, suggesting the attackers obtained legitimate-looking requests accepted by the system that holds signing authority.

Unprecedented Speed

The theft compressed what typically takes days into about 20 minutes, with funds moving at roughly $318 million per minute or $5.3 million every second across 10 blockchains. This speed exceeds any human response capability, highlighting the need for automated controls like hard caps on outflow or circuit breakers that pause withdrawals during volume spikes.

Attribution Dispute

TRM attributed the attack to TraderTraitor, described as an elite North Korean hacking unit. However, North Korea rejected the charge, calling U.S. claims a "grave political provocation." The attribution remains unproven, with both sides lacking conclusive public evidence. For security teams, naming the actor helps predict behavior, as state-sponsored groups typically target high-value systems with patient, well-funded approaches.

Industry Impact

The hack represents more than twice the $2.9 billion stolen across nearly 150 attacks during the previous year according to TRM data. DW framed the event as a stress test for the entire industry, with smaller exchanges now facing the same security questions as Binance. The incident forces the sector to reconsider exchange security, custody design, and risk allocation when trusted platforms fail.