0x3b045aba3b04…3b045abd
Binance Hack Moves $6.3 Billion On-Chain, $3.3 Billion Still Missing
The largest crypto hack on record moved $6.3 billion from Binance on-chain. Stablecoin issuers froze $3 billion; $3.3 billion remains unrecovered and tied to North Korea's TraderTraitor.
Outputs
Over $6.3 billion in affected assets moved on-chain in the record Binance hack
Stablecoin operators froze about $3 billion; $3.3 billion remains unrecovered
TRM Labs attributes the attack to North Korea's TraderTraitor group
Stolen funds were routed through stablecoins and the Aave lending protocol
A separate Polymarket hack drained $2.7 million from user wallets
More than $6.3 billion in affected assets moved on-chain in what is now the largest crypto-related hack by dollar volume, according to Bitcoin Magazine TV's breakdown of the Binance incident. Stablecoin operators froze roughly $3 billion of the haul. That leaves $3.3 billion unrecovered.
The numbers alone reset the scale of exchange-security risk. The previous benchmark for a single-platform breach sat far below this figure, and the gap isn't incremental — it's an order of magnitude. Every prior "record" hack now reads as a warm-up.
What happened at Binance?
The affected assets moved on-chain in a multi-chain operation, and the routing tells its own story. Bitcoin Magazine TV's analysis traces how the funds flowed through stablecoins and through Aave, the lending protocol, as part of the movement path. That detail matters operationally: once stolen capital enters DeFi lego, recovery depends on freezes at the stablecoin-issuer layer and on-chain forensics, not on a single custodian's kill switch.
Binance has made public statements since the incident, and the program examines what the exchange has said — including the central question of whether the platform can absorb the losses. Solvency, not optics, is the issue. A hack of this size against an exchange's reserves forces the market to re-underwrite the custodian, whatever the official line.
The multi-chain nature of the hit also raises pointed questions about Binance's custody architecture. Bitcoin Magazine TV dedicates a full segment to what the attack reveals about how the exchange holds and moves assets across chains — the exact operational surface an attacker needs to compromise only once.
Who is behind it?
Blockchain-analytics firm TRM Labs has tied the attack to North Korea's TraderTraitor actor, according to the program's analysis. The attribution matters for what comes next: North Korean-linked groups have historically specialized in laundering stolen crypto through mixers and cross-chain bridges, which compresses the recovery window. The $3 billion freeze, executed through stablecoin operators, is the countermeasure that worked; the $3.3 billion that stayed liquid is the exposure that remains.
This is also why the program's security segment argues that "every day now feels like zero day for crypto security" — the assumption that a locked-down exchange is a safe exchange didn't survive this event.
What else happened the same week?
Polymarket, the prediction-market platform, took a separate hit: a hack drained $2.7 million from user wallets. The two incidents aren't connected, but together they illustrate the range of attack surfaces — a top-tier exchange's custody stack on one end, user-facing wallet infrastructure on the other.
Do stablecoin freezes work?
They recovered $3 billion here, which is the strongest evidence yet that issuer-level blacklisting functions as an emergency brake. The program's counterpoint is worth weighing: freezes of this kind are a concentrated power over supposedly neutral money. If a stablecoin operator can stop $3 billion in its tracks, the same mechanism can stop anyone's funds — which is why Bitcoin Magazine TV frames the freeze debate as "stablecoin freezes aren't freedom technology."
Bitcoin itself, the program notes, has stayed resilient through hacks and bear markets, and its structure — no issuer, no freeze authority — is precisely the property this incident stress-tested.
The open question now is the $3.3 billion. Every hour it stays liquid, the laundering path deepens and the recovery odds shrink.
via youtube.com (Original)
More from Daniel Okafor
Show full bio
Correspondent covering people, launches and day-to-day practice in crypto and web3 industry at Mempool Brief.
657 articles