Binance security incident history
Hacking, data breaches and other security incidents involving Binance, with related coverage.
Binance denies claim that 335 million user records were leaked
An actor using the ShinyHunters name on a new underground cybercrime forum claimed to have leaked 335 million Binance user records. Binance denied that a new security breach had occurred and suggested that the sale listing could be a scam. The claims remain under investigation, and an actual leak has not been confirmed.
Related reports: 5 · last report →Binance hack steals $6.3 billion in crypto assets
Impact: $6.3 billion in crypto assets stolen
Around October 29, 2026, $6.3 billion in crypto assets was stolen from Binance. A subsequent investigation revealed how North Korean attackers tricked an employee through a fake job interview into installing malware and compromised wallet infrastructure. Binance resumed withdrawals and completed full reimbursement of affected customer assets, while the US government pursued freezing and seizure proceedings for some of the stolen assets.
Related reports: 303 · last report →Binance CEO's WeChat account hacked to promote memecoin
The WeChat account of Binance's chief executive was hacked and used to promote the MUBARA memecoin. The specific intrusion method, extent of the damage, date of the incident and response have not been confirmed.
Read on CoinDesk ↗Binance users suffer financial losses from account hacks
Impact: User financial losses in the millions; currency unknown
Binance users suffered financial losses from account hacks. The losses were put in the millions, but the currency, the exact amount, the date of the losses and the response have not been confirmed.
Read on Binance ↗Binance denies its systems were source of alleged data and code leak
Allegations emerged that Binance's data and code had been leaked. Binance denied that the information had been leaked from its systems.
Related reports: 2 →Access to Binance law enforcement portal sold
A hacker sold access to Binance's law enforcement portal. Whether access was actually obtained, the scale of damage and response have not been confirmed.
Read on InfoStealers ↗