Cryptocurrency exchange Binance has reported a massive security breach resulting in the theft of approximately $6.3 billion in assets. The incident, which stands as the largest crypto heist to date, has seen nearly $3 billion of these assets frozen on-chain by law enforcement and token issuers. Tether and Circle have specifically frozen over $1.5 billion in USDT and $800 million in USDC respectively, while the Arbitrum Security Council has intervened to freeze about $30.5 million. Initial investigations by Binance indicate that the breach may have involved a compromised DevOps engineer's laptop, allowing unauthorized access to a service container for withdrawal transactions. Despite the severity of the incident, Binance has assured users that their losses will be covered by the Secure Asset Fund for Users (SAFU) and the company's own funds. The firm is collaborating with law enforcement to identify those responsible and intends to resume withdrawals within 48 hours following a security overhaul. According to TRM Labs, the theft is attributed to North Korean-linked actors, specifically the TraderTraitor group, which was also behind a significant Bybit heist in 2025. The attackers executed the theft by submitting a single transaction with 50 authorizations, exploiting a vulnerability in Binance’s hot wallet system. Blockchain analytics firm Chainalysis has confirmed the North Korean connection, noting the use of sophisticated methods to obscure the movement of funds. Although some deviations in laundering patterns have been observed, the resemblance to previous North Korean attacks remains strong. Elliptic, another blockchain analytics company, highlights the attackers' ability to manipulate Binance's systems to sign unauthorized transactions. Despite the freezing actions, the attackers still control over $3.33 billion in assets spread across various cryptocurrencies. The incident underscores the growing challenge of preventing and responding to sophisticated cyber threats in the cryptocurrency sector.