The $6.3 billion Binance hack: what happened, why Bitcoin fell and what traders can learn

On 29 October 2026, hackers drained about $6.3 billion in crypto from Binance, the world's largest crypto exchange by trading volume. News outlets including CNBC, NPR and Al Jazeera describe it as the largest crypto theft on record — roughly four times the size of the $1.5 billion Bybit hack in February 2025, which held the record until now.

Within a day, Bitcoin slid to around $76,000, its lowest level in about six weeks. If you trade crypto from India, here is what happened, why a hack at one exchange moves the whole market, and how to read a shock like this on a chart.

This is an explainer, not advice. Details of the hack are still coming out, and some reported figures may change.

What happened

Based on reporting from several outlets up to 1 November 2026:

• The theft. About $6.3 billion of customers' assets was moved out of Binance in unauthorised transactions on 29 October.
• Withdrawals paused. Binance stopped withdrawals while it investigated.
• Stablecoins frozen. Tether and Circle, the companies behind the USDT and USDC stablecoins, froze about $2.4 billion of stablecoins linked to the theft. Stablecoin issuers can block tokens at specific addresses — something that isn't possible with Bitcoin itself.
• Who did it. Blockchain intelligence firms, as reported by NPR and others, linked the attack to hackers tied to North Korea.
• Customers. Binance said it would absorb the losses itself rather than pass them to users.
• Reopening. By the weekend, Binance had started reopening withdrawals in phases, network by network.

Exact figures differ slightly between reports (for example, how much of the stolen money has been frozen or covered), so treat the numbers as approximate.

Why Bitcoin fell when Bitcoin wasn't hacked

Bitcoin's own network wasn't broken into. So why did the price fall? A few things tend to happen together after a big exchange hack:

1. Fear of selling by the hackers

Stolen coins that can't be frozen may eventually be swapped or sold. Traders worry about that supply hitting the market, and some sell first.

2. Confidence takes a hit

The biggest exchange being hacked makes people ask whether their own money is safe anywhere. Some move to cash, stablecoins or off-exchange wallets, and reduce risk across the board.

3. Leverage turns a dip into a slide

Crypto futures let traders borrow heavily. When price drops, leveraged long positions hit their liquidation prices and are closed automatically — which means more selling, which pushes price lower, which triggers more liquidations. This chain reaction is why crypto falls fast when bad news lands.

4. Other news in the same week

The hack didn't happen in a vacuum. A day earlier, on 28 October, the US Federal Reserve kept interest rates on hold but two officials voted for a rate hike, which markets read as hawkish. Bitcoin was already soft around $80,000 before the hack news added to the pressure.

How a news shock shows up on a chart

You can't predict a hack. But you can learn what a shock looks like so it doesn't surprise you the next time.

A long red candle with heavy volume. The first reaction is usually one or two large candles closing near their lows, with volume several times the normal level.

ATR jumps. The Average True Range — how much price moves per candle — expands sharply. Any tool that uses ATR, like the Magic Line, widens its distance from price. (New to ATR lines? Read What is the Magic Line?.)

Open interest drops. In futures, a fast fall with falling open interest points to long unwinding — buyers closing or being liquidated. Rising open interest during the fall would point to fresh shorts instead. Our guide to open interest patterns explains the difference.

Funding rates swing. In perpetual futures, the funding rate (a small periodic payment between longs and shorts) often drops or turns negative after a liquidation wave, showing that longs have been flushed out.

Old levels get tested. Traders watch the previous swing low and round numbers. In this case, the drop took Bitcoin to about $76,000 — a price it last traded at around mid-September — and the round $80,000 level it had been holding above turned into the number everyone watched.

None of this tells you what happens next. A shock can be the start of a longer fall, or a sharp dip that recovers once the panic passes. The chart shows you the state of the market — volatile, trending, or ranging — so you can size risk sensibly.

What Indian crypto traders can learn

This event is a good moment to check your own habits, whichever platform you use.

• Keep on an exchange only what you're actively trading. Long-term holdings are safer in a wallet you control, with the recovery phrase stored offline.
• Use FIU-IND-registered platforms. In India, crypto service providers must register with the Financial Intelligence Unit. Registration doesn't make a platform hack-proof, but it means it falls under Indian anti-money-laundering rules.
• Turn on every safety setting. App-based two-factor authentication (not SMS), a withdrawal address whitelist, and login alerts.
• Watch out for "refund" scams. After every big hack, scammers pose as support staff or recovery services and ask for your login, OTP or a "fee" to release funds. Real exchanges never ask for your password or OTP.
• Be careful with leverage in news weeks. A move of 5% that would be uncomfortable without leverage can wipe out a 10x position. Plan the size of each trade from where you would exit, not from how much margin you have.
• Keep records. If you ever need to raise a complaint or prove a loss for tax purposes, screenshots and transaction IDs help.

What to watch next

• How much is recovered or frozen. Further freezes or recoveries could ease selling fears.
• Whether withdrawals fully return to normal across all networks.
• Where the stolen funds move. Analysts track the hackers' wallets; large transfers to swap services can move prices.
• The broader backdrop. US interest-rate expectations and risk appetite will matter as much as the hack in the weeks ahead.

FAQ

How much was stolen in the Binance hack?

About $6.3 billion, according to reports from CNBC, NPR and Al Jazeera, making it the largest crypto theft on record. Around $2.4 billion in stablecoins linked to the theft was frozen by Tether and Circle.

Why did Bitcoin's price fall if the Bitcoin network wasn't hacked?

Fear that stolen coins could be sold, a loss of confidence in exchanges, and liquidations of leveraged positions all add selling pressure. The Federal Reserve's hawkish hold the same week also weighed on risk assets.

Were Binance customers' funds lost?

Binance said it would absorb the losses rather than pass them to users, and began reopening withdrawals in phases by the weekend. Check Binance's own announcements for the latest status of your account.

How can I keep my crypto safer?

Keep only trading funds on an exchange, use app-based two-factor authentication and a withdrawal whitelist, never share your password or OTP, and use FIU-IND-registered platforms in India.

Should I buy or sell crypto after a hack?

We don't give buy or sell advice. This article explains what happened and how such events show up on a chart, so you can make your own decisions and manage risk.