5 of 5 regions · 155 articles · 82 outlets
Hackers steal about $6.3 billion from Binance, largest crypto exchange
Hackers stole about $6.3 billion in digital assets from Binance, the world's largest cryptocurrency exchange, in what analysts describe as the largest crypto hack on record. Binance said it would cover the losses and had frozen about $3 billion in related funds.
Coverage over time
| Bucket start | United States | Europe | India | China | Russia |
|---|---|---|---|---|---|
| 29 Oct, 00:00 | 1 | 0 | 0 | 0 | 0 |
| 29 Oct, 18:00 | 4 | 4 | 1 | 0 | 26 |
| 30 Oct, 00:00 | 2 | 21 | 13 | 7 | 19 |
| 30 Oct, 06:00 | 5 | 18 | 2 | 1 | 10 |
| 30 Oct, 12:00 | 3 | 4 | 1 | 0 | 3 |
| 30 Oct, 18:00 | 5 | 3 | 0 | 0 | 0 |
| 31 Oct, 06:00 | 0 | 0 | 1 | 0 | 0 |
| 1 Nov, 00:00 | 1 | 0 | 0 | 0 | 0 |
First reported by Just the NewsPrivate: Commercially owned
What each region is saying
- United States21
Sampled US coverage is mostly short headline-and-lead pieces relying on Binance statements. It stresses freezes by stablecoin issuers and, in one full article, the North Korea attribution by intelligence firms. Some pieces note Binance had not explicitly confirmed theft.
Tone · alarmed, measuredRead: The New York Times - Europe50
EU coverage, in German, English and French, reports the $6.3 billion estimate and frees-up details with attribution to Binance, Tether and analysts. It includes market reaction and the North Korea attribution in some reports. One outlet describes Binance's messages as sometimes contradictory.
Tone · alarmed, factualRead: Der Spiegel - India18
Indian coverage is mostly private domestic outlets reporting the $6.3 billion estimate and Binance's laptop finding. One article carries detail from TRM Labs and the co-CEO's reassurance. Another gives background on Binance's US history.
Tone · alarmedRead: The Hindu - China8
Chinese coverage, mostly in Chinese, foregrounds the roughly $3 billion freeze and Binance's pledge to bear all losses. It relays Binance, Bloomberg and analytics firms. One state outlet reports alleged DPRK ties, and one private piece looks at users moving to non-custodial wallets.
Tone · alarmed, matter-of-factRead: The Paper - Russia58
Russian coverage is largely matter-of-fact and relies on Binance statements, Zhao, and in some cases TASS or RIA Novosti. It repeats the $6.3 billion estimate, the $3 billion freeze and the loss-cover pledge. It does not name North Korea.
Tone · matter-of-factRead: Meduza
Framing comparison
Where they agree
12 shared facts- 01
Reports from several blocs say Binance estimated the impact of the incident at about $6.3 billion.
- 02
Binance said it would cover the losses.
- 03
Binance suspended deposits and withdrawals while it carried out security checks.
- 04
Tether said it froze roughly $1.57 billion linked to the incident.
- 05
Binance's initial investigation pointed to a compromised laptop of an employee or engineer.
- 06
Binance said it found no evidence of leaked wallet private keys.
- 07
TRM Labs, and in some reports Chainalysis, linked the attack to North Korea.
- 08
Binance said about $3 billion in assets had been frozen.
- 09
Changpeng Zhao said the incident looked like a hack.
- 10
Bitcoin fell by more than 3% after the news.
- 11
Chainalysis estimated about $5.912 billion stolen at the time of theft.
- 12
Attackers moved most funds in about 20 minutes, according to TRM Labs or a Russian report.
Where they differ
3 questionsSize of the loss
- United States
One outlet says hackers took around $6 billion, while another says Binance had not explicitly confirmed funds were stolen.
- Europe
One outlet reports Zhao estimated total losses could be a bit higher than $1 billion, while Chainalysis put it near $5.912 billion.
- India
One outlet says the scope of the heist was not immediately known, while its headline cites $5.9 billion.
- China
One outlet says estimated losses range from $1.7 billion to $5.7 billion.
- Russia
One outlet says damage may reach $5.7 billion, according to Arkham data.
Whether the attacker is identified
- United States
One outlet reports blockchain intelligence firms say a North Korean unit was likely behind the hack.
- Europe
One outlet reports North Korean hackers are reportedly behind it, according to TRM Labs.
- India
One outlet reports Binance's investigation has not attributed responsibility to any individual, alongside the firms' North Korea attribution.
- China
One outlet reports alleged DPRK ties according to TRM Labs and Chainalysis.
- Russia
The sampled Russian-language reports describe attackers or hackers without naming North Korea.
Amount frozen
- United States
One outlet says Circle and Tether froze over $2.38 billion, while another says Binance and partners froze roughly $3 billion.
- Europe
Some reports give more than $2.5bn frozen, and one says Zhao put Tether and Circle at around $1.7bn.
- India
Not addressed
- China
Reports say Binance had frozen about $3 billion.
- Russia
Reports quote Binance as saying about $3 billion was frozen.
In depth, region by regionemphasis · omissions · who is quoted
United Statesalarmed, measured
Sampled US coverage is mostly short headline-and-lead pieces relying on Binance statements. It stresses freezes by stablecoin issuers and, in one full article, the North Korea attribution by intelligence firms. Some pieces note Binance had not explicitly confirmed theft.
What it emphasises
Freezes by Tether and Circle are highlighted.
One article foregrounds North Korea attribution by TRM and Chainalysis.
One outlet notes Binance had not explicitly confirmed funds were stolen.
What it leaves out
Reported by other regions, but not here.
The 20-minute window and 10-blockchain detail reported by IN, CN and RU is not found in this sample.
The no-private-key-leak statement reported by EU, CN and RU is not found in this sample.
How it portrays the people involved
- BinanceVictim
- TraderTraitor / North KoreaAntagonistas attributed by TRM and Chainalysis
- Changpeng ZhaoNeutral
Who gets quoted
- Binance
- Changpeng Zhao
- TRM
- Chainalysis
- Circle's Jeremy Allaire
Based on 8 articles.
Europealarmed, factual
EU coverage, in German, English and French, reports the $6.3 billion estimate and frees-up details with attribution to Binance, Tether and analysts. It includes market reaction and the North Korea attribution in some reports. One outlet describes Binance's messages as sometimes contradictory.
What it emphasises
Record scale is attributed to analysts or experts.
Market reaction is included.
One outlet says Binance posted sometimes contradictory messages.
What it leaves out
Reported by other regions, but not here.
The 20-minute window and 10-blockchain detail reported by IN, CN and RU is not found in this sample.
The SAFU fund as a loss-cover source reported by CN and RU is not found in this sample.
How it portrays the people involved
- BinanceVictim
- North Korean hackersAntagonistper TRM Labs
- Tether and CircleNeutral
Who gets quoted
- Binance
- Yi He
- Changpeng Zhao
- Tether's Paolo Ardoino
- Chainalysis
- TRM Labs
Based on 8 articles.
Indiaalarmed
Indian coverage is mostly private domestic outlets reporting the $6.3 billion estimate and Binance's laptop finding. One article carries detail from TRM Labs and the co-CEO's reassurance. Another gives background on Binance's US history.
What it emphasises
TRM and Chainalysis attribution to North Korea and attack mechanics are given.
Co-CEO Richard Teng's reassurance is quoted.
Binance's US exit and guilty plea are recalled.
What it leaves out
Reported by other regions, but not here.
Tether's roughly $1.57 billion freeze, reported by US, EU and CN, is not found in this sample.
Bitcoin's price fall reported by EU and RU is not found in this sample.
How it portrays the people involved
- BinanceVictim
- North Korean-sponsored hackersAntagonistper TRM Labs and Chainalysis
- Richard TengProtagonist
Who gets quoted
- Richard Teng
- TRM Labs
- Chainalysis
- Changpeng Zhao
Do its outlets agree?
One state-aligned outlet says the scope was not immediately known and no explanation of the attack was offered, while private outlets report a laptop finding and North Korea attribution.
Based on 8 articles.
Chinaalarmed, matter-of-fact
Chinese coverage, mostly in Chinese, foregrounds the roughly $3 billion freeze and Binance's pledge to bear all losses. It relays Binance, Bloomberg and analytics firms. One state outlet reports alleged DPRK ties, and one private piece looks at users moving to non-custodial wallets.
What it emphasises
Binance's pledge to bear all losses is repeated.
The SAFU fund is named as a source for covering losses.
One report says some industry insiders estimate losses are controllable.
One private outlet reports users moving assets to non-custodial wallets.
ce6b9b…
What it leaves out
Reported by other regions, but not here.
The North Korea attribution is not found in the Chinese-language articles of this sample, though US, EU and IN report it.
Bitcoin's price fall reported by EU and RU is not found in this sample.
How it portrays the people involved
- BinanceVictim
- DPRKAntagonistalleged ties per TRM Labs and Chainalysis, in one English-language state outlet
Who gets quoted
- Binance
- Changpeng Zhao
- Arkham CEO Miguel Morel
- TRM Labs
- Chainalysis
- Bloomberg
Do its outlets agree?
English-language state outlets mention the DPRK link and analysts, while Chinese-language articles in the sample do not.
Based on 8 articles.
Russiamatter-of-fact
Russian coverage is largely matter-of-fact and relies on Binance statements, Zhao, and in some cases TASS or RIA Novosti. It repeats the $6.3 billion estimate, the $3 billion freeze and the loss-cover pledge. It does not name North Korea.
What it emphasises
Binance's own damage estimate is repeated.
Loss coverage from SAFU and company funds is mentioned.
f2fbee…The 2025 Bybit hack is cited as the previous record.
What it leaves out
Reported by other regions, but not here.
The North Korea attribution by TRM Labs or Chainalysis is not found in this sample.
The laptop finding reported by US, EU, IN and CN is not found in this sample.
How it portrays the people involved
- BinanceVictim
- HackersAntagonistunnamed
- Richard TengProtagonist
Who gets quoted
- Binance statements
- Changpeng Zhao
- Richard Teng
- Arkham
- RIA Novosti
- TASS
Based on 8 articles.
Confidence and methodMedium confidence
- Claims checked
- 137 of 137
- Articles analysed
- 40
- Model
- claude-sonnet-5-5
- Cost
- $0.14
Every point above rests on a quote found verbatim in the stored article text; claims whose quote could not be found were dropped. This describes framing — it is evidence to examine, not a verdict on who is right. .
- Many articles are headline-plus-lead only, so omissions may reflect truncated text.
- Samples are small and uneven across blocs.
- Non-English claims were translated.
- Figures differ partly because of different times and sources.
- Some claims restate headlines.
- 22 of 40 articles were analysed from headline and lead only.