Over $600M in Crypto Positions Wiped Out in One Hour Amid Binance Hack Fears
- Published
- Updated
- Since then
- 8 new reports
- In
- Exchanges
Binance said a security incident at its exchange may have involved a compromised DevOps engineer’s laptop, and it put the estimated impact at about $6.3 billion. Trading in the fallout turned sharp, with Bitcoin briefly dropping below US$77,000 and more than $600 million in derivatives positions liquidated within an hour.
Key claims & sources
What it means
With deposits and withdrawals paused, traders on Binance cannot move funds on or off the exchange while the review continues, and roughly $3 billion sits frozen pending Binance's accounting of what is permanently lost. The parallel wave of over $600 million in forced liquidations within one hour shows leveraged positions getting wiped out as prices swung on hack fears, independent of whether those traders held funds directly on Binance. Rival venues and self-custody wallet providers stand to gain users wary of repeat exposure.
A compromised laptop opening access to a service container used for unauthorized withdrawals is a reminder that centralized exchanges remain single points of failure no matter their size or compliance record. Holding $6.3 billion in exposure on infrastructure gated by one engineer's device access sits awkwardly with Binance's claims of institutional-grade custody. If Lazarus Group is confirmed, the theft also feeds a familiar debate about state-linked actors using exchange hacks to fund sanctioned programs, reviving pressure on exchanges' security disclosure standards.
Binance has not yet said how much of the $6.3 billion is permanently lost versus frozen and recoverable, and that figure, once published, will set the scale of the damage. Blockaid's wallet tracing and any asset freezes by issuers will determine how much stolen value gets clawed back before laundering completes. Watch also for when Binance lifts the deposit and withdrawal freeze, since that timeline will signal how contained the breach ultimately was.
Market reaction i
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 5.9 years ago | LuBian · Weak key generation incident | $3.5B |
| 5.5 years ago | Thodex · Scam incident | $2.5B |
| 5.4 years ago | Africrypt · Scam incident | $2.3B |
| 6.4 years ago | Wirecard · Scam incident | $2.1B |
| 5.2 years ago | BitConnect · Scam incident | $2B |
4280 incidents stored · 0 were as large as this one or larger ($6.4B)