Binance security incident history
Hacking, data breaches and other security incidents involving Binance, with related coverage.
Binance denies alleged leak of 335 million user records
An actor using the ShinyHunters name on a new underground cybercrime forum claimed to have leaked 335 million Binance user records. Binance denied that a new security breach had occurred and suggested that the sale advert could be a scam. The claims remain under investigation, and an actual leak has not been confirmed.
Related reports: 5 · last report →Binance hack sees $6.3 billion in cryptoassets stolen
Impact: $6.3 billion in cryptoassets stolen
Around 29 October 2026, $6.3 billion in cryptoassets was stolen from Binance. A subsequent investigation revealed how North Korean attackers deceived an employee through a fake recruitment interview into installing malware and compromised wallet infrastructure. Binance resumed withdrawals and completed full reimbursement of affected customer assets, while the US government pursued freezing and seizure proceedings for some of the stolen assets.
Related reports: 303 · last report →Binance CEO's WeChat account hacked to promote memecoin
The WeChat account of Binance's chief executive was hacked and used to promote the MUBARA memecoin. The specific intrusion method, extent of the damage, date of the incident and response have not been confirmed.
Read on CoinDesk ↗Binance users suffer financial losses from account hacks
Impact: User financial losses in the millions; currency unknown
Binance users suffered financial losses from account hacks. The losses were put in the millions, but the currency, the exact amount, the date of the losses and the response have not been confirmed.
Read on Binance ↗Binance denies its systems were source of alleged data and code leak
Allegations emerged that Binance's data and code had been leaked. Binance denied that the information had been leaked from its systems.
Related reports: 2 →Access to Binance law enforcement portal sold
A hacker sold access to Binance's law enforcement portal. Whether access was actually obtained, the scale of damage and response have not been confirmed.
Read on InfoStealers ↗