Binance and its founder, Changpeng Zhao, have become the targets of an alleged cryptocurrency theft estimated at US$6.3 billion, in a sharp reversal for a company long criticized over the use of its platform by criminal networks.
The attack was reported Thursday and is believed to have involved a hacking group that may be connected to North Korea. The available information describes the incident as possibly the largest cryptocurrency heist on record, although the full scope of the operation and the identities of those responsible have not been established.
Digital assets were allegedly taken from Binance customers, rather than from the exchange alone. The incident places renewed attention on the vulnerabilities of online financial platforms whose services operate across jurisdictions and allow users to transfer value without relying on conventional banks.
A global marketplace with limited physical presence
Binance was founded by Zhao in 2017 and grew into the world’s largest cryptocurrency exchange by trading volume. Its business model is based on an online marketplace where users buy and sell bitcoin, stablecoins, ether and other digital currencies. Those assets are held and transferred through digital wallets.
The company’s structure has made it a major international player while also complicating public understanding of where it operates. Binance does not have a traditional headquarters, according to the source material, and the ultimate ownership of many digital wallets is not generally visible to the public. The company and its founder have moved between jurisdictions as they pursued growth and responded to regulatory pressure.
Zhao, who had moved to Canada with his family from China and initially established Binance there, later relocated the company’s operations to Japan after a cryptocurrency crackdown. The business subsequently explored expansion in Jersey and Malta. It also acquired a major cryptocurrency wallet, supported a stablecoin and partnered with an Israeli payments processor.
| Reported detail | What is known |
|---|---|
| Estimated value of assets taken | US$6.3 billion |
| Reported victims | Binance customers |
| Possible perpetrators | A hacking group possibly linked to North Korea |
| Company founded | 2017 |
Criminal scrutiny surrounding the exchange
The alleged theft comes after years of criticism directed at Binance and Zhao. The exchange has been accused of profiting from, or failing to prevent, the use of its services by drug traffickers, child abusers, terrorists and money launderers. The source also says Zhao went to jail over charges connected to that scrutiny, without providing further legal details.
That history gives the reported hack a broader significance than a conventional corporate data breach. Binance has been portrayed both as a marketplace that helped expand access to digital finance and as a service that criminals could use to move funds internationally. The same reach that helped it surpass competitors such as Coinbase and FTX has also made the platform an attractive target for sophisticated cybercriminals.
The source identifies terrorist organizations as users of cryptocurrency transfers, underscoring the law-enforcement concern surrounding platforms that can move money quickly across borders. It does not establish that Binance or Zhao knowingly facilitated any particular transaction, nor does it provide details about whether the alleged theft has been recovered or whether arrests have been made.
Questions for customers and investigators
The reported loss is likely to intensify questions about digital-asset custody, the responsibility of exchanges and the ability of investigators to trace stolen cryptocurrency. Unlike cash taken from a physical institution, digital assets can be moved through a series of wallets and exchanges, potentially obscuring the route of the funds while leaving a record on the relevant blockchain.
- The reported target was Binance’s customer base.
- The alleged haul is valued at billions of U.S. dollars.
- The identity and location of the hackers remain unconfirmed.
- The incident could renew scrutiny of international cryptocurrency regulation and security controls.
Binance’s rise has been marked by rapid expansion, international movement and persistent legal controversy. The alleged attack now adds a major victimization claim to that record. Until investigators determine how the compromise occurred, confirm the value of the assets involved and identify those responsible, the reported figure and the suspected North Korean connection remain allegations rather than established findings.
