Separate Security Incidents Disrupt Binance and Polymarket
Binance estimates the impact of a security incident at $6.3 billion, and Polymarket was forced to suspend trading after a third-party provider was compromised.
Alissa Bergman
Two major security incidents hit the crypto industry on 29 October. The Binance breach, the largest cryptocurrency theft on record, involved approximately $6.36 billion in assets transferred from the exchange’s wallets. Separately, Polymarket halted trading following a breach involving one of its external providers.
The initial investigation suggested that attackers on the world’s largest crypto exchange may have compromised a Binance’s DevOps engineer’s laptop, gaining access to a service container and submitting multiple unauthorized withdrawal transactions.
Binance said it had found no evidence that wallet private keys were leaked. It worked with blockchain partners to freeze around $3 billion in affected assets and temporarily suspended deposits and withdrawals while carrying out security checks.
The company pledged to cover all losses through its Secure Asset Fund for Users (SAFU) and corporate funds, assuring customers that their assets were safe. It is also working with law enforcement and plans to publish a technical post-mortem once the investigation is complete, according to its official security update.
Blockchain intelligence firm TRM Labs attributed the attack to TraderTraitor, North Korea’s hacking unit associated with the government, based on similarities in attack methods and money-laundering patterns to those seen in previous North Korea-linked cyberattacks.
Meanwhile, Polymarket, one of the largest event-trading platforms by volume, temporarily halted trading on its international platform after discovering a breach involving one of its third-party providers. The platform said it had identified and fixed the issue, referred the incident to law enforcement and would fully reimburse affected users. Trading resumed approximately one hour after the suspension.
There is no evidence that the two incidents are linked, but both underscore the security gaps that big digital companies face and point to the need for stronger protections across their tech and partner networks. For platforms operating at scale, a vulnerability in a single employee device or external provider still can lead to significant financial losses, trading disruptions and reputational damage.
