On 20 September 2026, Binance announced that 6.3 billion dollars of crypto had vanished from its hot wallets, triggering the largest theft ever recorded in the sector.
The breach did not stem from a direct key theft; investigators point to a compromised laptop belonging to a DevOps engineer, which allowed attackers to hijack a service container and sign withdrawal requests.
Elliptic’s Tom Robinson says the single transaction that moved 2.5 billion dollars dwarfs the 1.5 billion‑dollar Bybit heist of 2025, putting Binance’s loss four times higher.
Chainalysis specialist Phil Larratt warns that laundering the assets could take weeks or even years, as criminals funnel funds through obscure exchanges and broker services.
Binance CEO Changpeng Zhao assured users that all frozen balances are safe, and withdrawals remain halted while the company works with law‑enforcement.
Regulators in the US and EU are already drafting tighter controls on hot wallet security, with a joint review slated for early 2027.