MyTechDailyNews General Guide: Binance Halts Deposits and Withdrawals After a Suspected Crypto Hack

By Sarah Chen, Tech Daily

Binance, which The Wall Street Journal and Axios described as the world's largest cryptocurrency exchange, has stopped both deposits and withdrawals while investigating a suspected hacker attack. Early estimates from blockchain security groups suggest the value of the stolen assets could exceed US$6 billion. If that figure is confirmed, the incident would become the largest known cryptocurrency theft to date, moving a security question that often feels distant into a practical issue for users, market observers, and smaller platforms watching how confidence behaves during an unresolved cyber incident.

The basic facts: what was paused and what has been confirmed

The suspension is not presented as proof of a completed criminal transfer. It is presented as a temporary security response while Binance checks what happened and tries to contain possible exposure. The Wall Street Journal and Axios reported that preliminary theft estimates may top US$6 billion, while the exact final figure has not been made public.

On X, Binance co-founder He Yi said that, after the exchange encountered a hacker attack, it had paused deposits and withdrawals. She also said user funds were safe and that Binance would bear the full losses caused by the attack.

Founder Changpeng Zhao also spoke on X, saying Binance appeared to have been attacked but that user funds were safe. At the time of reporting, Changpeng Zhao was no longer serving as a Binance executive, while remaining the company's largest shareholder.

Binance said its team was conducting security checks, freezing funds, and cooperating with law-enforcement authorities. The company's spokesperson said the security team was urgently reviewing all relevant information. As reported by Axios, the identity of the attacker had not been confirmed, and the final amount of stolen assets had not been announced.

How the loss estimates were put together

The numbers differ because tracking stolen cryptocurrency is an estimation problem as much as it is a counting problem: assets can move, swap, fragment, or become mixed before investigators settle on a final value. The table below summarizes the figures attributed to different participants in the reporting.

Source or participant	Estimate described in reports
Tether and Circle	Initially froze about US$1.7 billion of the stolen assets, according to Changpeng Zhao's first account.
Binance update	Said the amount frozen had risen to about US$3 billion and involved multiple types of assets.
SEAL 911 and Taylor Monahan	The value taken was far above US$2 billion and could be as high as US$5.5 billion.
Chainalysis	Gave an estimate of about US$5.9 billion.
TRM Labs	Investigators assessed losses of more than US$6 billion.
The Wall Street Journal, citing security analysts	Reported that hackers may have taken still more funds than the initially described frozen amount suggested.

Broadly, the public picture is that a very large sum was targeted, a portion was frozen quickly, and other portions may still be moving or unaccounted for. This is why reports emphasize both the size and the uncertainty.

What stablecoin issuers can do when assets move through blockchains

Stablecoin issuers such as Tether and Circle can freeze certain tokens when theft or other suspicious activity is detected. That can stop an attacker from transferring or redeeming those stablecoins. Such actions are commonly linked to placing wallet addresses on a blacklist, which locks the tokens inside the affected wallets and prevents them from moving out through ordinary transfers.

For readers outside the technical layer, a practical way to think about it is that stablecoins can behave like tokens with an issuer that still controls some access rules. That control gives investigators and exchanges a partial way to block movement, but it does not automatically solve a theft involving many assets or many routes.

Where this ranks in the industry's theft history

Reports described earlier cases as the largest before this one, and the comparison matters because it shows how repeated the problem has been. The previous largest theft occurred in 2025, when hackers with links to North Korea took about US$1.5 billion in virtual assets from cryptocurrency exchange Bybit. The Federal Bureau of Investigation (FBI) in the United States had previously concluded that North Korea was responsible for that theft.

What the incident can mean for ordinary users and the broader market

Cryptocurrency exchanges often become attack targets because they may hold assets on behalf of customers. If attackers enter an exchange's operational or wallet environment, they can try to move assets out before defenses respond. The human effect can be just as fast as the technical one: reports note that large attacks may trigger panic withdrawals from users, and smaller exchanges may face a serious risk of going out of business if confidence collapses.

Kevin March, co-founder of crypto trading firm JPEG Trading, said the loss size was very large in absolute dollar terms, but Binance's scale made it more able to absorb a shock because it could use insurance funds and its own balance sheet to cover potential losses. The Wall Street Journal reported that Binance has an insurance fund worth about US$1.2 billion. March also said the incident could still have a broader impact on cryptocurrency markets and prices.

Binance's U.S. arm, Binance.US, said it was not affected by this security incident.

A second platform came under fire just before the Binance story

Hours before the Binance incident became public, prediction-market platform Polymarket also reported a cyberattack and temporarily paused trading. Security company Hudson Rock said it discovered malicious code, inside a script related to third-party website monitoring tool DebugBear, that tried to move assets. The same report said Polymarket's original intrusion method and total loss remained undetermined.

Common misconceptions that often circulate during this kind of event

“The halt is proof that all customer funds are already gone.” The public statements from Binance leadership said user funds were safe and that the company would bear the attack-related losses. The halt is described as a security step while the company investigates and contains risk.
“A frozen amount means the damage is fully solved.” A portion of assets was reported as frozen, but Binance later updated the frozen figure, and other estimates described theft far beyond the first numbers. A freeze can slow movement without completing recovery.
“One large exchange can always protect customers.” Reports suggest Binance has size, an insurance fund, and a balance sheet that help it absorb shocks. Smaller exchanges may not have the same buffer, which is why panic withdrawals can create survival pressure on them.
“This is only a crypto-industry story.” The coverage treats it as a mainstream technology and finance event, not just a specialist issue. The public reaction, the withdrawal pause, and the market implications are all part of the story.

Action checklist for readers following the story

Separate confirmed actions from estimates. Track what the exchange says it has done, including security checks, fund freezing, law-enforcement cooperation, and any official announcements.
Check the final reported loss figures. Early totals, frozen totals, and later analyst estimates can differ, so follow updates rather than locking onto one number.
Watch whether withdrawals resume. The suspension of deposits and withdrawals is the key practical signal for users trying to move assets.
Compare smaller platforms separately. Reports say panic withdrawals can threaten smaller exchanges, so the industry impact is not evenly distributed.
Keep the timeline in order. The Polymarket attack and temporary trading pause occurred hours before the Binance story became public, a detail that matters when assessing whether one incident triggers another.

FAQ: the most practical questions about the Binance report

Did Binance officially confirm a hacker attack in detail?

The public statements said Binance had encountered a hacker attack and appeared to have been attacked, while the platform paused deposits and withdrawals during investigation. At the time Axios reported, the attacker's identity had not been confirmed and the final stolen amount had not been published.

What exactly was stopped?

The platform stopped both deposits and withdrawals. That is what makes the story practical for ordinary users: normal account movement is temporarily unavailable while the company performs security checks.

Are user funds safe?

He Yi and Changpeng Zhao both said user funds were safe. He Yi also said Binance would cover the full losses caused by the hacker attack.

Why do loss estimates range so widely?

Multiple parties are tracking different slices of a fast-moving incident. Chainalysis reported about US$5.9 billion, TRM Labs described more than US$6 billion, Taylor Monahan of SEAL 911 said the amount was far above US$2 billion and could be as high as US$5.5 billion, and the earlier frozen figures were about US$1.7 billion then about US$3 billion. The exact final amount has not been confirmed.

What did Tether and Circle do?

Reports said Tether and Circle froze roughly US$1.7 billion of the stolen assets. Stablecoin issuers can freeze certain tokens and blacklist wallet addresses to prevent the attacker from moving or redeeming them.

Was any related crypto platform affected?

Binance.US said it was not affected by this incident. In a separate but temporally close event, Polymarket was attacked and paused trading hours before the Binance story became public; Hudson Rock linked malicious code to a script related to DebugBear, and the initial intrusion method and total loss were not determined.

What can this story tell readers who are not exchange operators?

It shows how quickly a security problem can turn into a liquidity problem. When users fear that an exchange cannot protect assets, withdrawals can accelerate, and confidence can become the decisive factor, especially for smaller platforms.

Conclusion: why this report is worth watching beyond the headline number

The Binance case is not simply a story about a possible record theft. It connects several moving parts: an unresolved investigation, a pause that affects deposits and withdrawals, statements from co-founder He Yi and founder Changpeng Zhao, asset-freezing actions by Tether and Circle, competing estimates from SEAL 911, Taylor Monahan, Chainalysis, and TRM Labs, industry history that includes the 2025 Bybit theft linked to North Korea, and the FBI's position in the United States. It also connects to adjacent pressure on Polymarket and DebugBear-related monitoring concerns. For general readers, the value of following this event is not just the headline number; it is the sequence: what happened, what was stopped, what was frozen, what remains unconfirmed, and how confidence in a large platform can ripple through the wider cryptocurrency ecosystem.