As $6 billion stolen from Binance, record hack rattles crypto market
30.10.2026
The world's largest cryptocurrency exchange, Binance, has been hit by a cyberattack involving an estimated $6.3 billion in digital assets.
Deposits and withdrawals have been temporarily suspended following what is believed to be the largest theft from a cryptocurrency exchange to date.
Users' funds remained "safe" and that it would cover all losses from the "security incident," Binance says.
Working with blockchain partners, the exchange had so far frozen affected cryptocurrency assets worth around $3 billion, it adds.
The stolen assets include Bitcoin, Ethereum and stablecoins such as Tether and USD Coin, whose values are pegged to traditional currencies.
Blockchain analysis firm TRM Labs attributed the attack to North Korean hackers belonging to the TraderTraitor group. The attackers moved most of the $6.3 billion within 20 minutes, apparently in an attempt to prevent the assets from being frozen, TRM says.
The attackers tried to move the stolen assets through a series of transactions to evade restrictions. They still controlled cryptocurrencies worth around $2.4 billion that could not be frozen by their issuers, TRM says.
Preliminary internal investigations by Binance suggest the attack may have originated from a compromised laptop belonging to one of the company's software engineers.
The attackers may have used the device to gain access to a service computer and initiate unauthorized withdrawals.
Binance said there was currently no evidence that private wallet keys had been compromised. Investigators were instead examining whether the infrastructure used to authorize transactions had been manipulated.
"Our teams are working around the clock to resolve this issue safely and thoroughly," Binance says. "We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice."
How can you protect yourself?
The Swiss financial regulator offers investors a series of tips to protect themselves from illegal or fraudulent providers including:
- Take time to consider your investment decisions. Don't allow yourself to be put under pressure. Diversify your investments; don't put all your eggs in one basket.
- Innovative technologies and products such as virtual currencies can be attractive, but they can also be risky. "In reality, major breakthroughs are few and far between. Find out as much as you can, and only invest when you are sure you understand what is being offered."
- Always remember the fundamental rule of investing, that high returns always mean high risks. The risk of loss is often much more real than the chance of turning a profit.
Markets upset
The news of the hack rattled cryptocurrency markets, with Bitcoin briefly falling below $77,000 to its lowest level in around six weeks.
Other major cryptocurrencies, including Binance's own BNB token, also declined, while the sharp sell-off triggered millions of dollars in liquidations of leveraged trading positions.
The attack dwarfs the previous record theft of around $1.5 billion in digital assets from cryptocurrency exchange Bybit in early 2025, which was also attributed to the North Korean hacking group.
The incident has also renewed scrutiny of Binance, which operates without a fixed headquarters and has faced regulatory criticism in Europe, where it lacks a licence under the European Union's Markets in Crypto-Assets (MiCA) framework.
.jpg)
October 31, 2026
By Burak Oktenli
Key Takeaways:
The episode underscores that a valid blockchain signature does not prove genuine authorization, and it coincides with the payments industry’s early pilots of AI agents that can execute pre-approved transactions.
The article concludes that institutions must enforce narrow, independently checked transaction mandates for AI agents, because a technically accepted instruction can move money before the responsible party fully understands what occurred.
The Binance breach is not evidence of a rogue AI theft. It exposes a more immediate financial-security problem: a technically valid transaction can still be one nobody had the authority to make.
An attacker does not have to break a blockchain to move billions of dollars. It may be enough to make a financial system accept an instruction that should never have been authorized.
On October 30, Binance disclosed an estimated $6.3 billion impact from a security incident and said about $3 billion in affected assets had been frozen. Its preliminary investigation pointed to a potentially compromised DevOps engineer’s laptop, access to a service container and unauthorized withdrawal transactions. The exchange said it had found no evidence of leaked wallet private keys, suspended deposits and withdrawals during checks, and promised to cover customer losses. Its technical post-mortem is still pending.
Blockchain investigators at TRM Labs and Chainalysis have linked the attack to North Korean operators. Their assessments are consequential, but an independent official attribution and a complete account of the intrusion have not yet been established. Most important for this debate, there is no verified evidence that an autonomous AI agent executed the attack.
The financial effects are real regardless of the attribution. Crypto markets and related shares fell as the industry scrambled to locate assets, suspend access and restore confidence. The amount affected, the amount frozen, the final loss and what customers eventually recover are different numbers. Treating them as interchangeable obscures what a recovery has actually achieved.
The episode matters for a second reason. Just as digital finance confronts another extraordinary failure of access control, the payments industry is beginning to let artificial intelligence execute transactions on behalf of customers and businesses. Those are different developments. Their collision creates the next security question: what happens when the software making a request also has the credentials to make the request financially binding?
The signature is not the permission
A blockchain can faithfully record a transaction authorized by a valid signing process while telling us very little about whether the real owner wanted it. A stolen credential, compromised interface, misconfigured delegation or breached approval service can all turn a prohibited payment into an apparently legitimate instruction.
The danger is not confined to one exchange. On October 29, Polymarket temporarily halted trading after a third-party provider was compromised, then restored service and promised to reimburse affected users. That was a separate incident, with no demonstrated common attacker or AI involvement. It nevertheless showed how financial services inherit operational risks from software and suppliers outside their immediate control.
There is also a clear national-security precedent. In February 2025, the FBI attributed roughly $1.5 billion stolen from Bybit to North Korea. That was a state-linked financial crime, not a rogue-AI episode. It demonstrated how the compromise of digital-asset custody can reach beyond exchange customers into sanctions enforcement and strategic competition.
Now consider how payment automation changes the exposure. An agent that can purchase cloud services, data access or other digital resources can extend the consequences of a mistake or compromise beyond its own application. A criminal can use AI to assist an intrusion. An authorized agent can be redirected by malicious material it reads. A correctly functioning agent can also spend beyond its owner’s intention if its mandate is too broad. These mechanisms differ, but all converge at the point where an instruction becomes a financial commitment.
This is not a speculative technical category. NIST reported in March that malicious instructions embedded in webpages, repositories or other external content can hijack AI agents into unintended actions. That testing does not show an AI stealing money from Binance. It shows why a model’s ability to interpret instructions is an inadequate place to enforce payment authority.
AI payments are arriving, with important limits
The commercial transition is already visible. On October 20, Visa, BILL and Billtrust announced a live pilot in which registered AI agents execute approved supplier-invoice payments through business portals. Crucially, the pilot does not let the agent independently decide what to buy: the buyer approves the payment first. Visa’s design uses authenticated agents, tokenized credentials and transaction controls.
Mastercard’s Agent Pay for Machines initiative likewise explores permissioned machine-to-machine payments for digital services. The company presents controls and budgets as part of the design; its broader machine-payments program remains a developing offering. These distinctions matter. Responsible systems are not simply handing unrestricted wallets to models. They are trying to make payment execution automatic without making permission unlimited.
The challenge is keeping that discipline when agents work across suppliers, service accounts, payment processors and jurisdictions. A finance officer may authorize an invoice, but a sub-agent should not inherit a general license to pay a new counterparty. A legitimate credential proves who is presenting it; it does not, by itself, prove that the amount, purpose and recipient remain inside the buyer’s mandate.
Build the control at the transaction boundary
On October 27, NIST published proposed design tenets for agent identity systems. They call for distinct agent identities, traceable delegation, least privilege, short-lived permissions, signed mandates and human-review triggers for consequential actions. These are design proposals, not binding financial regulations. They are nevertheless a practical starting point for a more internationally consistent approach.
The institution granting an agent financial authority should define the principal, permitted purpose, eligible counterparties, transaction ceiling, cumulative budget and expiry. The payment service, rather than the model’s own explanation, should independently enforce those conditions. Delegation to another agent should narrow permissions, never silently enlarge them.
An unusual recipient, a larger payment or a sensitive service should require a separate approval based on trustworthy transaction details. A human shown only the agent’s summary is not a meaningful independent reviewer. The check must expose what will actually be signed or settled, including the destination and the effect of the transaction.
Emergency response must extend beyond closing a chat window. Revocation should disable credentials and payment tools, flag commitments already accepted by suppliers, and preserve records that distinguish what was requested, approved, attempted, completed, frozen or recovered. The ability to stop new transactions is valuable. It is not the ability to undo every settled one.
The Binance freezes offer a limited but important example. Issuers and other intermediaries can sometimes immobilize assets or block further movement, as roughly $3 billion in identified assets had been frozen by October 30. But intervention varies by token, platform and jurisdiction. Freezing an asset is not the same as returning it, and the capacity to freeze should carry clear legal procedures and accountability rather than become an arbitrary financial veto.
There is a second technical horizon to manage. Also on October 27, NIST finalized a transition roadmap for quantum-vulnerable cryptography. That future-facing work is unrelated to the Binance intrusion. It reminds financial operators that digital signatures and trust infrastructure must remain upgradeable. Even a stronger, quantum-resistant signature, however, cannot decide whether the person or software using it was entitled to move the money.
The geopolitical stakes are not simply that AI might make cybercrime faster. They are that international finance is creating more pathways for software to purchase services and move value while states, custodians and vendors still disagree about where approval ends and responsibility begins. Cross-border incident cooperation and narrow, enforceable transaction mandates will matter as much as raw model capability.
The most alarming AI-finance headline would announce that a machine has stolen billions. This week’s evidence does not support that story. It supports a more urgent one: money can move through instructions that are technically accepted before the institution responsible for them understands what happened.
A valid signature can move money. It cannot prove the money should have moved.
About Burak Oktenli
Burak Oktenli holds an MBA and a Master of Professional Studies in Applied Intelligence from Georgetown University. His research addresses the governance of authority in autonomous and AI-enabled systems, and his writing has appeared at the Modern War Institute at West Point, RUSI, RealClearDefense, RealClearMarkets, and Geopolitical Monitor. He is the author of Authority Architectures for Autonomous Systems, a ten-volume series on how authority in autonomous systems is delegated, monitored and recovered, at authority-architecture.me.
View all posts by Burak Oktenli →
No comments:
Post a Comment