A major security breach at Binance has resulted in the theft of approximately 18,270 BTC, an amount larger than Tesla’s reported Bitcoin holdings and more than twice El Salvador’s national reserve. At an estimated price of $78,500 per Bitcoin, the stolen assets were valued at approximately $1.4 billion. The scale of the incident highlights the growing security challenges facing major cryptocurrency exchanges and the potential consequences of compromised infrastructure.
The stolen amount exceeds Tesla’s reported 11,509 BTC holdings and is more than double the approximately 7,820 BTC held in El Salvador’s published reserve wallets. It also comes close to SpaceX’s reported 18,712 BTC position. These comparisons illustrate how significant the stolen amount is, placing the incident among the largest Bitcoin-related security events in terms of the assets involved.
In this story
2 assets
Blockchain intelligence firm TRM Labs attributed the attack with high confidence to TraderTraitor, a North Korean state-sponsored hacking group. The Bitcoin reportedly left a Binance hot wallet through multiple transactions before being distributed across 19 separate addresses. At the time of the latest reported checks, the receiving wallets had not moved their Bitcoin holdings, leaving the possibility of further tracking and intervention.
Binance has also reported progress in containing the incident. The exchange said approximately $3 billion of the stolen assets had been frozen onchain, with stablecoin issuers, exchanges, and custodians playing an important role in blocking or intercepting suspicious transfers. However, Bitcoin presents a different challenge because it does not have the same centralized freeze mechanisms available to certain stablecoins.
The investigation into the breach remains ongoing. Binance initially pointed to a potentially compromised engineer’s laptop but later acknowledged that investigators had identified additional points of compromise. The exchange stated that it had found no evidence that wallet private keys were leaked. It also announced plans to use company funds to cover the affected assets and restore the balance of the impacted cryptocurrencies.
For the broader crypto market, the incident raises concerns about exchange security, investor confidence, and the risks associated with holding large amounts of digital assets on centralized platforms. Although the theft does not directly change Bitcoin’s supply or network fundamentals, uncertainty surrounding the incident could increase volatility and encourage some investors to move toward self-custody or reduce exposure to centralized exchanges. The market may also pay close attention to Binance’s security updates, withdrawal operations, and upcoming proof-of-reserves report.
