Binance says $2.54 billion has been frozen after suspected record crypto hack

Binance is investigating a suspected security breach after more than $5.5 billion in digital assets reportedly moved from wallets linked to the exchange. For high-risk PSPs and crypto payment providers, the important part is not the drama around the number: it is how fast stablecoin issuers and industry partners moved to freeze funds, and how much of the flow is still being traced.

1. Binance said the incident appears to be a hack, while Changpeng Zhao, known as CZ, stressed that user funds remain safe. Binance separately said its security teams were investigating reports of a potential security issue and would share more once details had been verified.
2. If the highest estimates are confirmed as stolen funds, the incident would become the largest cryptocurrency hack on record, overtaking the roughly $1.5 billion Bybit exploit of February 2025. At the time of publication, the exact scale of the loss was still uncertain, with investigators tracing funds across multiple blockchains.
3. Preliminary on-chain estimates put the value held across wallets associated with the suspected attacker at around $5.6 billion. The circulating breakdown included Bitcoin (BTC) at $1.45 billion, Ethereum (ETH) at $875 million, TRON (TRX) at $234 million, Tether Gold (XAUT) at $50 million, Tether (USDT) at $1.57 billion, USD Coin (USDC) at $823 million, Wrapped Beacon ETH (WBETH) at $75 million, Ripple USD (RLUSD) at $88.5 million, and other cryptocurrencies of approximately $447.5 million.
4. Binance later clarified that the current verified total frozen stands at $2.54 billion. The exchange said differing figures had been circulating publicly, including references to $1.8 billion, and added that the total may continue to increase as its teams work with law enforcement and industry partners.
5. CZ said on X that he appreciated the quick freeze from Tether, at around $971 million, and Circle, at around $823 million. That matters operationally: in a fast-moving incident, stablecoin issuers can become the difference between funds being parked in place and funds being moved beyond reach.

The practical takeaway for PSPs and acquiring teams is straightforward: when a suspected breach touches a major venue like Binance, the freeze mechanics across stablecoin issuers, exchanges, and investigators become part of the risk picture almost immediately. The headline number can still move, but the real question is how quickly linked assets can be identified and immobilized.