Zero Radar
← feed
CriticalData breachupdated 30 Oct 2026, 09:20 UTC

Binance crypto exchange suffers multi-billion dollar theft via compromised laptop

Hackers stole a huge amount of cryptocurrency from Binance, one of the world's largest crypto exchanges, after breaking into an employee's work laptop. Some of the stolen funds have been frozen, but most of the damage is still being assesse

Attacks reported (The Hacker News, SecurityWeek)3 independent sources
SeverityCriticalData breach
Being exploited?ReportedBy The Hacker News, SecurityWeek, BleepingComputer, not officially confirmed yet
What to doCheck exposureVerify any Binance communication through official channels only and monitor your account for unusual activity.
How sure is this?3 independent sourcesSeveral independent publishers agree

How the attack works simplified

  1. 1Attacker targets engineerAttack began with a DevOps engineer's laptop
  2. 2Laptop compromisedEngineer's laptop was breached
  3. 3Internal access gainedAttacker moves into Binance systems
  4. 4Assets moved outFunds transferred to attacker wallets
  5. 5Funds partly frozenTether, Circle, and others froze some assets
  6. ResultAbout $6.3 billion in assets stolen

What happened

Binance reports a security incident affecting about $6.3 billion in assets, which it links to a compromised laptop used by a DevOps engineer. Blockchain analysts suggest the attack resembles activity by North Korea's TraderTraitor group, though this is not confirmed.

Why it is dangerous: Customers holding assets on Binance may lose funds or face delays in access while the incident is investigated, and the scale makes it one of the largest crypto thefts reported.

Are you affected?

You are affected if you hold or trade assets on the Binance exchange.

Binance platform assets (approximately $6.3 billion reported, per Binance); the compromised DevOps engineer laptop was the initial access point.

What to do

  1. Check the official Binance announcements and status page for updates on affected accounts and withdrawals
  2. Do not click links about the breach in emails or social media; use only verified Binance channels
  3. Enable two-factor authentication and review recent account activity on your Binance account

Timeline

  1. 29 Oct 2026, 22:45 UTC
    Publicly disclosed
  2. 29 Oct 2026, 22:45 UTC
    Reported by BleepingComputer · BleepingComputer
  3. 29 Oct 2026, 22:45 UTC
    Picked up by Zero Radar
  4. 30 Oct 2026, 05:15 UTC
    The Hacker News reported on it · The Hacker News
  5. 30 Oct 2026, 05:15 UTC
    Reported by The Hacker News
  6. 30 Oct 2026, 05:15 UTC
    Severity raised to critical
  7. 30 Oct 2026, 08:23 UTC
    SecurityWeek reported on it · SecurityWeek
  8. 30 Oct 2026, 09:18 UTC
    Reported by BleepingComputer · BleepingComputer

Sources 4 reports, oldest first

Security press established security newsrooms

Technical details

ID
ZR-7d9fa054
Disclosed
29 Oct 2026, 22:45 UTC
On Zero Radar
29 Oct 2026, 22:45 UTC (0 min after disclosure)
Last change
30 Oct 2026, 09:20 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Binance crypto exchange suffers multi-billion dollar theft via compromised laptop · Zero Radar