Binance says suspected security breach hit about $6.3 billion, bitcoin falls

Binance, described by Israeli outlet Ynet as the largest cryptocurrency exchange in the world, is dealing with a suspected security breach that the company now estimates had a total impact of about $6.3 billion. Ynet reported that Binance put the impact of the breach at $6.3 billion and said it would cover all of the losses. The Jerusalem Post carried the same figure, running the phrase "biggest hack in history" in its headline.

Early reports described a fast-moving situation. The Israeli news outlet N12 reported that Binance was investigating a suspected large-scale intrusion, that digital assets worth more than $2.5 billion had been frozen, and that all deposits and withdrawals on the exchange had been temporarily suspended. The founder of the company, according to N12, called the incident a "potential security issue." News of the possible breach weighed on the wider market: N12 reported that the price of bitcoin dropped 3.2% and fell under the $79,000 mark.

What Binance has said

The company's public message, as relayed by several Israeli outlets, has focused on reassuring customers. N12 reported that Binance moved quickly to state that user funds were completely safe and that users were guaranteed full coverage. News.co.il reported that Binance announced it would cover all losses and repeated that customer money was secure.

The Times of Israel, in a live blog entry, reported that Binance had confirmed a major hack and that more than $2.5 billion had been frozen. Later reports raised the frozen amount: Ynet and N12 both put it at about $3 billion.

How the breach may have started

According to preliminary findings of the investigation, as reported by N12 and News.co.il, the incident may have begun with the compromise of a laptop belonging to an engineer at the company. That compromise, the reports said, may have given the attacker access to Binance's systems and allowed unauthorised withdrawals of funds. Both outlets presented this as an initial finding, using language that signals it has not been established.

Why freezing assets matters

On a cryptocurrency exchange, users hold digital assets in accounts managed by the platform, much as customers hold money at a bank. When an exchange suspects that funds have been moved without authorisation, freezing assets and pausing deposits and withdrawals is a way to limit further movement while the incident is examined. The reports indicate that Binance took both steps: a portion of the affected assets, about $3 billion according to the later reports, was frozen, and activity on the exchange was paused.

The difference between the two headline figures is worth noting for readers trying to follow the numbers. The roughly $6.3 billion figure is Binance's estimate of the overall impact of the breach. The $2.5 billion and later $3 billion figures refer to assets that were frozen. The reports do not set out how the frozen amount relates to the total impact.

Who reported it

The story was reported by Ynet, the website of the Israeli daily Yedioth Ahronoth, through its alerts channel; by N12 through its foreign news desk; by News.co.il; and by two English-language Israeli publications, The Times of Israel and The Jerusalem Post. Most of the Hebrew-language reports were short news flashes published over several hours, and their details changed as the night went on. A photograph accompanying the News.co.il and N12 items was credited to Reuters.

Where the reports differ

The accounts diverge in two places. First, on the frozen amount: earlier reports from The Times of Israel and N12 said more than $2.5 billion, while later reports from Ynet, N12 and News.co.il said about $3 billion. Second, on how firmly the event has been characterised: The Times of Israel reported that Binance confirmed a major hack, while N12 described the exchange as investigating a suspected breach and quoted the founder calling it a potential security issue. Ynet's first alert also spoke of a suspicion rather than a confirmed hack.

What the reports do not say

The reports do not identify who was behind the breach, or whether the attacker has been identified at all. They do not say which digital assets or which users were affected, or how many accounts were involved. They do not explain how Binance plans to cover the losses, or on what timetable. None of the reports says when deposits and withdrawals will resume. The laptop explanation is described only as a preliminary finding. The reports also do not say who described the event as the biggest hack in history, and no outlet in this material reported any comment from regulators or law enforcement.