Binance Hack: What Executives and Blockchain Researchers Are Saying

Start with the core event: hackers stole more than $6 billion in cryptocurrency from Binance, prompting executives and blockchain researchers to assess what happened. Binance initially said one engineer’s compromised laptop was the gateway, then revised that assessment and said the attack was broader in scope.

Crypto stocks tumbled after the breach, underscoring how quickly a major exchange incident can ripple across the sector. Binance said it is working with law enforcement and plans to share a detailed technical postmortem once its investigation is complete.

Richard Teng, Binance’s co-CEO, said in a video posted to X that the attacker used a “self-destruct mechanism” to hide their tracks, making the investigation harder. Binance later said it had stockpiled about 80% of the total stolen funds.

The company also said it was actively buying remaining relevant token assets through market and OTC channels. The key takeaway for readers: the immediate story is not just the size of the theft, but whether investigators and industry partners can trace, freeze, or recover assets fast enough.

Tom Robinson, cofounder and chief scientist at Elliptic, called the plunder “almost certainly the single largest known theft of any kind.” He said Elliptic identified signs pointing to a North Korean-affiliated group and noted that few actors could coordinate an attack across 11 blockchains in around three hours.

Jony Levin, CEO of Chainalysis, also said the attack carried hallmarks of North Korean hacker groups. Chainalysis said it linked the Binance breach to TraderTraitor after observing stolen Binance funds commingling with funds from an earlier attack.

Coinbase CEO Brian Armstrong said Coinbase reached out to Binance to offer assistance, including blocking sends to compromised wallets. He framed the moment as one that calls for cooperation among rival crypto platforms.

Changpeng Zhao, Binance’s founder and former CEO, said “token recovery has already begun” and thanked partners around the world. Anthony Scaramucci praised Binance’s response, while Ari Redbord of TRM Labs warned that funds tied to North Korean hacks can support weapons proliferation and said TRM was tracking funds and alerting partners through the Beacon Network.