- Binance breach involving estimated $6.3B in property might turn into the biggest cryptocurrency theft on report
- Bybit, Poly Community, Ronin Community and Coincheck amongst platforms beforehand focused in main assaults
- Hackers have exploited weaknesses in digital wallets, transaction approval techniques and blockchain networks
A cyberattack on Binance, the world’s largest cryptocurrency trade, on Thursday has drawn contemporary consideration to cryptocurrency theft, with blockchain intelligence agency TRM Labs estimating that about $6.36 billion was transferred out of its wallets throughout 10 blockchains.
Most transfers occurred inside about 20 minutes. TRM Labs attributed the operation, with excessive confidence, to TraderTraitor, a North Korean hacking group.
Binance stated its preliminary investigation pointed to a probably compromised laptop computer belonging to a DevOps engineer. In an announcement on Friday, it estimated the influence at round $6.3 billion and stated about $3 billion in affected property had been frozen.
The trade stated person funds have been protected, pledged to cowl losses via its Safe Asset Fund for Customers and firm funds, and reported no proof that pockets personal keys had been leaked. The investigation stays ongoing.
The incident ranks among the many largest reported cryptocurrency thefts. Listed here are a few of the biggest circumstances, primarily based on the estimated worth of property on the time.
Bybit, Feb. 2025 – $1.5 billion
Dubai-based cryptocurrency trade Bybit suffered one of many largest digital asset thefts on Feb. 21, 2025, when hackers stole roughly $1.5 billion in cryptocurrency from an Ethereum chilly pockets.
The attackers compromised the transaction approval course of, tricking approved signers into approving a malicious transaction.
The US Federal Bureau of Investigation (FBI) attributed the assault to North Korea, figuring out the operation as a part of a hacking marketing campaign generally known as TraderTraitor.
The FBI stated the attackers quickly transformed a few of the stolen property into bitcoin and different cryptocurrencies, distributing them throughout hundreds of addresses on a number of blockchains.
Ronin Community, March 2022 – $620 million
The Ronin Community, a blockchain platform related to the net recreation Axie Infinity, misplaced cryptocurrency price nearly $620 million after attackers compromised its transaction-validation system.
Hackers gained management of personal keys belonging to validators, enabling them to approve unauthorized withdrawals.
The US Treasury Division attributed the March 2022 assault to Lazarus Group, a North Korean state-sponsored hacking group.
The division stated the group had stolen nearly $620 million from the blockchain venture.
Poly Community, Aug. 2021 – $611 million
A hacker exploited a vulnerability in Poly Community, a decentralized finance platform that allows transfers between completely different blockchains, stealing digital property price greater than $610 million.
The platform stated the attacker started returning the property inside days of the incident.
By Aug. 23, nearly all of the funds had been returned, aside from some stablecoins frozen by their issuer, media reported.
The hacker claimed the assault was supposed to expose a safety weak point within the platform. Poly Community supplied a $500,000 reward for details about the vulnerability and the return of the funds.
BNB Chain, Oct. 2022 – $586 million
An attacker exploited a vulnerability within the BSC Token Hub, a cross-chain bridge connecting two BNB blockchain networks, and withdrew round 2 million BNB tokens price roughly $586 million.
BNB Chain stated the attacker had exploited a flaw within the verification of cross-chain messages.
The community coordinated with validators to droop operations and restrict the motion of the affected property.
Coinbase’s menace intelligence crew later revealed a technical evaluation explaining how the attacker solid safety proofs to exploit the bridge.
The preliminary quantity concerned didn’t translate into an equal monetary loss, as a lot of the cryptocurrency remained on the community or was frozen.
Coincheck, Jan. 2018 – $530 million
Japanese cryptocurrency trade Coincheck suffered a serious assault in January 2018, when hackers stole roughly 526.3 million NEM tokens from an internet-connected pockets.
The stolen property have been valued at round $530 million on the time, in accordance to media stories.
The incident prompted Japan’s Monetary Providers Company to order enhancements to Coincheck’s operations and study safety preparations at different cryptocurrency exchanges.
Coincheck later stated it had compensated affected prospects for the stolen funds, in accordance to firm filings.
Mt. Gox, 2011–2014 – $480 million
Tokyo-based bitcoin trade Mt. Gox collapsed in 2014 after disclosing that a whole bunch of hundreds of bitcoins had gone lacking via thefts spanning a number of years.
The lacking cryptocurrency was valued at shut to $500 million on the time, in accordance to stories.
Mt. Gox, which as soon as dealt with a big share of worldwide bitcoin buying and selling, filed for chapter in 2014, leaving hundreds of consumers unable to entry their funds.
Wormhole, Feb. 2022 – $325 million
Wormhole, a platform connecting completely different blockchain networks, was exploited in February 2022, ensuing within the theft of roughly $320 million in cryptocurrency.
Hackers exploited a vulnerability within the platform’s verification course of to create tokens with out offering the required backing.
Media reported that Soar Crypto, whose mum or dad firm had acquired Wormhole’s developer, changed the stolen funds.
Liquid Community, Sept. 2026 – $319 million
Attackers drained about $319 million in bitcoin from Liquid Community, a Bitcoin sidechain operated by Blockstream, on Sept. 6, 2026.
TRM Labs stated the attackers exploited a software program vulnerability to create unbacked artificial bitcoin tokens and trade them for actual bitcoin.
About 85% of the funds, price roughly $272 million, have been later returned after Blockstream patched the vulnerability. Round $47 million remained with the attackers, in accordance to the agency.
