Key Highlights

● Binance blamed a compromised DevOps engineer's laptop.

● About $6.3 billion was stolen.

● The exchange disclosed the breach on Thursday evening.

● DevOps machines can be a gateway to sensitive infrastructure.

Binance blamed a compromised laptop belonging to a DevOps engineer for the reported breach in which about $6.3 billion was stolen, according to market data. The exchange disclosed the breach on Thursday evening and on Friday, October 30, 2026, confirmed the scale of the theft, according to reports.

If the figure holds, it is the largest crypto heist on record. DevOps engineers typically build and maintain the systems that keep a platform running, so their machines can be a gateway to sensitive infrastructure. Binance has not publicly detailed exactly how the attackers moved from the laptop to the funds, based on available reports.

Blockchain analytics firms TRM Labs and Elliptic tied the theft to North Korea, according to market data. The firms follow the movement of stolen Assets across public blockchains.

Containment

Binance and its partners moved quickly to limit losses. About $3 billion of the stolen funds has been frozen, according to market data. Circle Internet Group (NYSE:CRCL), which issues the USDC stablecoin, froze $800 million in USDC in coordination with law enforcement, according to market data

The exchange pledged to make customers whole, and withdrawals are to resume by Sunday. "We are committed to covering all hacked losses through our company funds," co-CEO Richard Teng said.

Fallout across crypto

The news hit prices across the sector. Bitcoin fell to roughly $76,700 to $77,600, a six-week low, after trading near $86,000 earlier in October. Ether slid to about $2,237.

Crypto-linked stocks tumbled. Coinbase Global (NASDAQ:COIN) fell sharply, Strategy and Robinhood Markets (NASDAQ:HOOD) slid, and bitcoin miners moved lower. A digital-assets research head said: "I suspect the negative price action still has some way to go."

Binance co-founder Changpeng Zhao also weighed in on social media, telling Elon Musk, according to market data: "Elon, have a lot of respect for you, but bad time to troll. Please stop."

The hack arrived on a day of heavy selling across markets. The S&P 500 fell 140.32 points to 7,580.07, the Dow Jones Industrial Average lost 572.25 points to 51,770.31, and the Nasdaq Composite dropped 747.73 points to 25,437.00, its worst day since June 5. Intel (NASDAQ:INTC)'s cash-burn warning set off a chip selloff and Amazon (NASDAQ:AMZN)'s results deepened doubts about AI spending.

Other pressures piled on. Oil traded above $100 a barrel on tensions around Iran, and markets priced a December rate hike from the Federal Reserve. Gold fell to $3,898.90, a 52-week low, so there was little shelter in traditional havens either.

Why the method matters

The laptop explanation shifts attention to in-house security practices at crypto exchanges. Large platforms hold vast sums in digital form, and a single compromised device with the right access can open a path to those assets. Investors and customers are likely to look for more detail on security practices as Binance reopens.

What to watch

The most immediate milestone is whether withdrawals resume by Sunday as planned. Further detail on the breach, including how the attackers escalated from the engineer's laptop, would help customers judge the risk of a repeat.

Investors will also follow updates on the roughly $3 billion that has been frozen and on any recovery of the rest. For broader markets, Apple (NASDAQ:AAPL)'s report on Monday, the midterms on Tuesday and the October jobs report on Friday, November 6, are next.