In the span of just 20 minutes on a Thursday afternoon, cybercriminals made off with more than $6.3 billion from Binance, the world’s largest cryptocurrency exchange — making it the single biggest cyber heist ever recorded. The attack has rattled the crypto industry and reignited a long-running debate about whether digital asset markets are too loosely regulated to protect everyday investors.
Binance operates similarly to traditional stock exchanges like the NYSE or Nasdaq, except that instead of trading company shares, users buy and sell digital assets like Bitcoin. The exchange serves a wide range of customers — from large financial institutions to ordinary Americans hoping to grow their savings. At 4:05 p.m. Eastern on Thursday, hackers gained access to investor trading accounts and drained just over $6.3 billion in cryptocurrency before being detected.
Ari Redbord, the global head of policy at TRM Labs — a crypto research firm that has helped Binance trace and recover portions of the stolen funds — described the scale of what happened in stark terms.
“Imagine a world where someone could walk into a bank and walk out with $6.36 billion in stolen funds and then move those funds at the speed of the internet,” he says. “This is bank robbery in the age of technology.”
Redbord calls it
“the largest bank robbery in human history.”
Binance, working with partner exchanges, has managed to freeze approximately $3 billion of the stolen funds, limiting how much the hackers can actually access. The exchange has also pledged to reimburse affected customers, though the precise mechanism for doing so has not been fully explained.
This heist comes amid growing turbulence across the technology and crypto sectors, including a recent wave of hacking attempts tied to widespread software vulnerabilities and an ongoing FBI investigation into hackers who stole sensitive federal employee data.
North Korea’s Fingerprints
Cybersecurity experts are pointing to a North Korean military hacking unit known as TraderTraitor as the likely culprit. The group was previously held responsible by the FBI for the $1.5 billion theft from crypto exchange Bybit — which had been the largest crypto hack on record before this week’s attack on Binance.
Redbord at TRM Labs explained why North Korea is considered a uniquely dangerous actor in this space.
“North Korea has built the most sophisticated cyber capabilities in the world. They have a cadre of teams of professional hackers who are part of their military,”
he said. He added that the money won’t simply line criminals’ pockets:
“This isn’t just a commercial hacker who’s looking to make some money. This is going to be used for weapons proliferation and other destabilizing activity.”
The national security implications of state-sponsored crypto theft have drawn increasing attention in Washington. The Trump administration has separately explored aggressive countermeasures, including a proposal that would allow American companies to hack back against foreign cybercriminals.
A Regulatory Gap at the Heart of Crypto
While investigators work to understand exactly how the breach occurred, the incident has focused new attention on the structural differences between crypto exchanges and traditional financial institutions. Unlike stock brokerages, crypto exchanges often hold customer funds directly — making them far more attractive targets for hackers.
Amanda Fischer, policy director and chief operating officer at the financial consumer advocacy group Better Markets, explained why this matters for investors.
“You may trade on the New York Stock Exchange, but you don’t keep your funds with the New York Stock Exchange. You keep it with your broker — and your broker is audited and regulated by the SEC (Securities and Exchange Commission),”
she said.
“And your broker has to pay for insurance that will make customers whole in the event that there’s a cyber attack.”
Fischer added:
“So the regulatory framework for crypto is much weaker than what investors in the US enjoy in other markets.”
Under current rules, Binance is not necessarily required by law to compensate customers who lost funds — it has simply chosen to do so. Critics warn that smaller exchanges might not have the financial resources to make that same commitment, leaving investors with no safety net.
The regulatory debate has also played out in Congress. A Trump-backed crypto bill recently failed in the Senate, reflecting the ongoing struggle to establish a coherent legal framework for digital assets.
The FTX Collapse, Revisited
The Binance breach has brought renewed scrutiny to an earlier disaster in the crypto world. In 2022, FTX — then the dominant crypto exchange globally — imploded after a period of extreme market volatility. As the company hemorrhaged money, executives secretly dipped into customer funds in a desperate attempt to stay afloat. The company ultimately collapsed, and founder Sam Bankman-Fried was sentenced to 25 years in prison on fraud and related charges.
Fischer warned that the incentive structure within crypto can push executives toward catastrophic decisions.
“If a trade goes bad, it can become almost irresistible to dip into those client funds. Just this one time is what they say, to cover their losses,”
she said.
“But we know that that can cascade into catastrophe for investors.”
The Binance hack, experts say, is the latest reminder that without stronger oversight, both criminal actors and bad internal decisions pose serious risks to anyone holding money on a crypto platform.
Comments are closed.