Binance said on October 29, 2026 that it was investigating an apparent cyber heist of about $6.3 billion and suspended transactions. Its initial investigation points to a compromised engineer's laptop that let an attacker submit unauthorized withdrawals; the attacker submitted 50 signed EIP-7702 authorizations, and only the one matching Binance 14's next nonce, 18,914,809, was accepted. Tether and Circle have frozen about $3 billion in stablecoins, leaving roughly $3.3 billion with the hackers, against a $1 billion emergency reserve. TRM Labs attributes the heist to a North Korean group called Trader Trader, which carried it out in about 20 minutes. A co-founder said deposits were unaffected and withdrawals should resume in about 48 hours.