Hackers hit Binance for $6.3 billion in record digital asset breach

Record breach hits major offshore exchange

Two major security breaches struck the digital asset sector this week, exposing serious risks in exchange-hosted wallets. In the largest digital asset theft ever recorded, a security incident at Binance compromised about $6.3 billion in client assets on Thursday. Binance later shared in social media updates that the attack may have involved a compromised laptop belonging to a DevOps engineer. An internal probe also uncovered other points of breach, though the exchange did not describe what those additional points were.

Earlier on the same day, prediction market platform Polymarket briefly paused trading on its international platform after an attack on a third-party data provider. That breach led to at least $2.7 million being drained from user wallets. Polymarket runs its international venue on the Polygon blockchain.

Guarantees versus missing safety nets

Both Binance and Polymarket told users they plan to cover the losses and make affected investors whole. Some security specialists see these pledges as a reason for traders to remain confident in big exchanges. Ido Ben-Natan, the chief executive of blockchain security firm Blockaid, said that exchange users will likely not lose any money because large firms have the financial reserves to absorb the damage. Ben-Natan argued that holding capital on well-funded platforms might actually be safer for traders than using self-custody wallets, where an individual has no central company to refund stolen assets.

Other cybersecurity and finance researchers offer a much starker view. Tyler Moore, a cybersecurity professor at the University of Tulsa, warned that keeping large sums on an exchange remains very dangerous because standard financial safety nets do not exist here. Traditional banking customers in the United States rely on the Federal Deposit Insurance Corporation to cover deposits up to $250,000 per depositor if an institution fails. Exchange accounts lack any comparable federal insurance program. Ryan Kirkley, chief executive of Global Settlement Network, noted that without broker-dealer asset insurance, users face unresolved risks across the entire market ecosystem.

The regulatory line and artificial intelligence risks

The incidents also highlight the divide between domestic and international platforms. The breaches took place on the offshore venues of both Binance and Polymarket. Regulated domestic operations in the United States avoided the security problems entirely. Shares of publicly traded American platforms Coinbase and Robinhood dropped on Friday following the news, even though neither firm suffered a security failure.

Michael Selig, chairman of the Commodity Futures Trading Commission, pointed out that offshore platforms lack the safeguards required in regulated markets. He noted that the CFTC wants to provide a registration pathway so international exchanges can adopt established cybersecurity protections. However, Brett Falk, director of the Crypto and Society Lab at the University of Pennsylvania, suggested that standard regulations might not have stopped the Binance breach, as legal frameworks rarely mandate the exact software stack required to authenticate internal staff.

Specialists noted that attacks are increasing as cyber threats evolve, partly fueled by modern artificial intelligence tools. Digital asset systems remain prime targets for intruders because successful attacks grant access to instant, massive liquidity. For market builders and institutional investors, the path forward will require hardening internal developer infrastructure, rethinking employee machine access, and building formal insurance protections before digital wallets can be considered truly safe.