The largest crypto heist in history happened last night. 

 You should hear about it now, so we’re sending Altucher Confidential early. 

$6.3 billion worth of crypto and stablecoins was reportedly stolen from Binance – the world’s largest crypto exchange. 

To put this number into perspective, the previous record belonged to the $1.5 billion Bybit hack in 2025.

This one was four times larger.

Bitcoin is now trading around $77,000, while tech stocks are also in freefall following a string of weak earnings reports.

Here’s what we know so far. 

How Did Hackers Steal $6.3 Billion?

So far, the company believes the attack started with a compromised laptop belonging to one of its engineers.

That compromised laptop allowed the attacker to access Binance’s internal systems where they submitted unauthorized withdrawal transactions.

Binance says it has found no evidence that the private keys protecting its crypto wallets were leaked.

Instead, they appear to have compromised the infrastructure Binance uses to operate them and found a way to make unauthorized withdrawals look legitimate to the system.

Cybersecurity researchers at TRM Labs and Pangolin Intelligence believe North Korea's TraderTraitor hacking group was responsible.

The group has previously been linked to some of the largest crypto thefts in history, including the $1.5 billion Bybit hack.

Binance says it plans to release a full technical report once it has verified the details and is working with law enforcement to identify the attackers.

Stealing the Crypto Is Only Half the Battle

Moving $6.3 billion into North Korean wallets is one thing. 

Actually being able to use those funds is a different story. 

Within hours, some of the biggest companies in crypto began freezing assets linked to the attack.

• Tether froze more than $1.5 billion worth of USDT.
• Circle froze more than $800 million worth of USDC.
• Ripple helped stop roughly $200 million more.

Altogether, Binance says approximately $3 billion of the affected assets have already been frozen.

That was possible because stablecoins such as USDT and USDC don't work exactly like Bitcoin.

Bitcoin has no company sitting in the middle with the ability to freeze someone's coins.

USDT and USDC do.

Tether and Circle can blacklist wallet addresses holding stolen tokens, preventing those tokens from being transferred or redeemed.

The hacker may still control the wallet, but the frozen stablecoins inside it can't simply be moved to another exchange and cashed out.

That's why the final loss could end up being substantially smaller than the $6.3 billion headline.

What Does This Mean for Crypto?

There's no way to sugarcoat a $6.3 billion security breach at the world's largest crypto exchange.

And history shows that incidents of theft and fraud involving crypto giants like Mt. Gox and FTX were followed by prolonged bear markets.

But it's important to separate what happened to Binance from what happened to the underlying cryptocurrencies. 

Bitcoin itself wasn't hacked. Neither was Ethereum, Solana, or the underlying blockchains.

The vulnerability was inside Binance, a centralized company that holds and moves crypto on behalf of its customers.

When you keep crypto on an exchange, you're trusting that company to protect it. That's fundamentally different from holding crypto yourself, where you control the private keys. (No method is foolproof: If you go the hardware wallet route, always buy straight from the company. No third parties.) 

For more actionable steps on protecting your data and crypto, check out last week’s Altucher Confidential on the coming “cyberpandemic.” Cyberattacks are ramping up. Crypto is one vector of attack, but far from the only one. 

For Binance customers, the company says their funds are safe and has promised to cover any losses. So the biggest question now is how much of the stolen crypto can actually be recovered.

Roughly $3 billion has already been frozen, and investigators will continue tracking the remaining assets as the hackers attempt to move, swap, or cash them out.

Binance also needs to confirm exactly how the attackers gained access and whether the vulnerability has been completely eliminated.

The company says it will release a full technical report along with an updated Proof of Reserves once that process is complete.

Those are the two things I'll be watching from here: how much of the money is ultimately recovered and what Binance's investigation reveals about the breach.

For now, this looks much more like a failure of a centralized exchange than a failure of crypto itself.