Binance probes potential $5.7B hack, Tether and Circle freeze funds

Suspected breach and frozen funds

Binance is investigating a potential security breach after reports emerged of funds being drained from its wallets. Estimates of the loss vary widely, with figures ranging from $1.7 billion to $5.7 billion, though crypto reporter Molly White suggested the higher estimate may be inflated.

In response, stablecoin issuers Tether and Circle froze $1.56 billion and $800 million, respectively, in funds linked to the incident. Tether CEO Paolo Ardoino and Circle have not commented on the specifics of their actions, but the moves were confirmed by Binance spokesperson Ross O’Leary.

Market reaction and user assurances

The news triggered a sell-off in major cryptocurrencies, with Bitcoin, Ether, and Binance’s native token BNB dropping 2.5%, 3.5%, and 6.7%, respectively, within hours of the reports.

Binance founder Changpeng Zhao stated that user funds would be fully covered, though he did not provide details on how this would be achieved. Binance temporarily suspended withdrawals across multiple networks while its investigation continues. The company has not received any communication from the alleged hackers.

Broader context of crypto breaches

If confirmed, the Binance incident could rank among the largest crypto breaches in history. The current record is held by exchange Bybit, which lost $1.4 billion in a 2025 hack attributed to North Korean actors.

The incident follows a separate attack on Polymarket, a prediction market platform, where hackers stole $2 million in user funds after compromising a third-party software provider, DebugBear. Polymarket briefly halted trading to contain the breach.

Developing: what is not yet confirmed

The following is reported but has not been independently confirmed.

Claims about the scale of the breach remain unconfirmed. While blockchain analytics firm Arkham reported tracking over $5 billion in suspicious outflows, Binance has not verified the exact amount stolen or the method of the attack. No evidence has emerged to attribute the breach to a specific group or individual.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

For founders and operators in the crypto and fintech space, this incident underscores the vulnerabilities even the largest platforms face. The rapid freezing of funds by Tether and Circle demonstrates how stablecoin issuers can act as a failsafe during breaches, but it also highlights the risks of centralization in decentralized ecosystems. The market’s sharp reaction to the news—with major tokens losing value—shows how sensitive investor confidence remains to security lapses, even when user funds are guaranteed.

For Binance, the challenge will be restoring trust without disclosing security weaknesses. The lack of transparency around the breach’s scale or the recovery process could fuel speculation, particularly as competitors and regulators watch closely. Operators should note the regulatory scrutiny already faced by platforms like Polymarket, which was recently blocked in India and probed by the CFTC, as similar attention may now turn to Binance.

Related on Lazyfounder

• Tether
• Polymarket
• CFTC launches new probe into Polymarket over offshore user access
• Polymarket blocked in India after website and X account restrictions