The Block reported on October 30, 2026 that Binance suffered a $6.3 billion hack, described as the largest crypto hack in history, with North Korea attribution leads and the breach centered on hot wallet signing infrastructure. Key details remain undisclosed.
According to The Block on October 30, 2026, Binance suffered a hack amounting to $6.3 billion, a case described in related reports as "the largest crypto hack in history." The report also mentioned leads attributing the attack to North Korean hackers and focused risk on the compromise of hot wallet signing infrastructure. The scale of the loss, the platform involved, and the attribution leads together make the case a high-profile matter, with market impact, regulatory attention, and user attention all at extremely high levels.
Based on publicly available information, the case directly involves the Binance platform, and the core security issue centers on hot wallet signing infrastructure. The phrase "hot wallet signing infrastructure was compromised" indicates that the problem points to transaction signing and authorization, rather than asset storage alone. This framing concentrates risk on the signing and authorization chain, suggesting the security gap may not be limited to asset storage itself. As of publication, the technical attack path, the scope of affected accounts, whether affected assets have been transferred or frozen, the platform's remediation timetable, and whether user withdrawals and asset withdrawals will be affected have not been disclosed.
Regarding the North Korea hacker attribution, the report only mentions it and does not disclose attribution evidence or conclusions. The attribution lead appears alongside Binance and the $6.3 billion figure, heightening both the security and compliance dimensions of the incident. Due to the lack of verifiable attribution basis, this lead still awaits further verification. At the market and regulatory levels, the report noted that the case has extremely high market impact, regulatory attention, and user attention, but did not further disclose the specifics of regulatory and user attention. From the composition of the incident, the $6.3 billion figure, the Binance platform, the North Korea hacker attribution lead, and the compromise of signing infrastructure are already enough to amplify market attention and may affect users' judgment of exchange asset security. Specific handling plans and regulatory actions have not yet been announced.
At the industry level, hot wallet signing infrastructure is typically tied to exchanges' transaction signing and authorization processes and is a key part of operational security. Related security capabilities may involve permission tiering, call auditing, anomaly interception, and key usage controls. The compromise of signing infrastructure this time directly puts the security effectiveness of these processes under scrutiny. The specific affected modules, permission scope, and degree of risk spread in this case remain to be disclosed. What can be confirmed is that the compromise of signing infrastructure has made this case an important sample for observing exchanges' signing authorization security systems.
Subsequently, The Block's market report showed that spot Bitcoin ETFs recorded a single-day net outflow of $643 million, a four-month high; Bitmine added another 8,573 ETH, raising its total holdings to 6.06 million. These data can serve as background information for observing changes in market risk appetite after the hack, but they are independent of the factual details of the Binance hack case itself. The above market data does not change the core facts and focus of the case.
Going forward, attention should focus on three areas: first, Binance's further explanation of the compromise of hot wallet signing infrastructure, including scope of impact and remediation progress; second, whether more verifiable information emerges regarding the North Korea hacker attribution; third, whether regulators and the industry upgrade review requirements for exchange signing authorization security. Based on currently disclosed information, the core facts of the case are the $6.3 billion scale, Binance's involvement, the compromise of hot wallet signing infrastructure, and the North Korea hacker attribution lead. Other details still await fuller disclosure. The completeness of subsequent disclosures will directly affect outside judgment of the nature and scope of the incident.
