Binance Loses $6.3B, Locks Out Users, Calls It Safe

Binance froze customer withdrawals after a record $6.3 billion theft, and the people who couldn't touch their own money were told, in essence, to trust the people who'd just lost it. That's the sequence at the heart of the biggest crypto heist on record. The FBI says North Korea's state-sponsored TraderTraitor unit did it. The exchange says everything's fine.

Who Has the Power

Binance runs the world's largest crypto exchange. When its systems failed, the company stopped allowing customers to withdraw their funds. No vote, no appeal, no say. Just a locked door and a statement posted on X.

Binance co-CEO Richard Teng called the breach a "complex attack" involving a compromised laptop and malicious software designed to delete evidence of its activity. One laptop. Billions gone. Crypto prices fell on Friday as the company sought to reassure customers their funds were safe, and the market did what markets do when a private gatekeeper stumbles: it flinched.

The FBI, meanwhile, announced on Saturday that it had linked the theft to TraderTraitor, the same unit blamed for a $1.5 billion theft from the Bybit platform in February last year. Two record-setting heists, one named culprit, and the apparatus's answer is the same as ever: call on private companies to police the flow. The agency asked virtual asset service providers to block transactions tied to the laundering, handing over suspected digital addresses to watch for. It also said it expects "further laundering" of the stolen assets in stages.

Who Gets Covered, and With What

Teng promised, "Our users will not bear the financial impact of this incident." The company said it has replenished 90 percent of the stolen assets and set aside around $6.34 billion of company funds to cover the losses.

Look at where the money came from. Binance said it drew on part of its $1 billion Secure Asset Fund for Users, a Bitcoin reserve it holds for security breaches, plus some of its Futures Insurance Fund and its own corporate treasury. The remaining 10 percent is in less liquid tokens, which may take longer to buy. "Binance will absorb the financial impact of these stolen funds, not our users," the company said.

That's the pitch: a private firm, sitting on a private pile, deciding who's made whole and when. Customers don't own the process. They wait for the statement.

What They're Calling "Proof"

Binance announced a new proof-of-reserves snapshot of assets held on its platform as of 0000 GMT Saturday. Users holding any of 10 listed tokens (BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC) would be able to verify that their assets were backed at a minimum ratio of 1:1 once the full proof was available, the company said. Once it's available. Not yet.

Withdrawals, Binance said Saturday, were still on track to reopen Sunday. Until then, the people who put their savings in the exchange's hands have had nothing to do but refresh a page.

The FBI says North Korean operatives were observed converting the stolen assets primarily into Ethereum. Law enforcement watched it happen and still expects more laundering to come. The state sees the theft in motion and responds with a list of addresses and a request to the industry.

It's a tidy picture of how centralized custody works. A handful of executives hold the keys. When someone steals them, the executives decide who eats the loss and who waits, and a government agency issues a bulletin.