Cryptocurrency's largest security breaches demonstrate how the metric used to measure theft dramatically changes the picture. Binance's reported $6.3 billion loss on October 29, 2026, represents the largest cryptocurrency theft by dollar value ever recorded. Yet when measured by bitcoin quantities stolen, earlier incidents dwarf this figure in ways that reshape industry comparisons.
Dollar Value Rankings: Binance Leads by a Vast Margin
Binance's $6.3 billion to $6.4 billion loss is more than four times larger than Bybit's February 2025 breach, which previously held the record at $1.46 billion to $1.5 billion. Blockchain investigators identified 18,270 BTC among Binance's stolen assets transferred across nearly a dozen blockchains, including Ethereum, Bitcoin, Tron, and Solana. The operation was attributed to North Korea's Tradertraitor group. Binance pledged to cover customer balances through emergency reserves, while partners froze approximately $3 billion in affected assets.
The Bybit incident involved a compromise of the transaction approval process during an ether cold-wallet transfer. Attackers stole approximately 400,000 ETH and related assets. The FBI attributed the attack to North Korean operatives.
Other major breaches by dollar value included Ronin Network's March 2022 attack, which involved 173,600 ETH and 25.5 million USDC valued at approximately $540 million to $625 million, and Poly Network's August 2021 incident involving $610 million in unauthorized transfers. Unlike most large thefts, the Poly Network attacker returned nearly all stolen assets.
Bitcoin Quantities Paint a Different Picture
Mt. Gox's historical importance becomes apparent when measured in bitcoin rather than dollars. The exchange disclosed approximately 850,000 missing BTC in 2014 before locating roughly 200,000 BTC in an old wallet. The remaining loss of approximately 650,000 BTC represents 5 percent or more of total bitcoin supply. When valued at contemporary prices, this loss far exceeds Binance's incident in bitcoin terms.
Lubian Mining's alleged loss of 127,426 BTC in December 2020 due to private-key generation weaknesses would be worth approximately $9.94 billion at $78,000 per coin, though questions about ownership and the mechanism remain unresolved.
Early cryptocurrency history includes other substantial bitcoin losses measured in thousands: the Linode-linked thefts in 2012, 25,000 BTC from the Allinvain wallet in 2011, and incidents involving Cryptsy, Bitstamp, and Mintpal. These cases involved smaller dollar values at contemporary bitcoin prices but enormous BTC quantities compared with many modern exploits.
Recovery, Reimbursement, and Ultimate Impact
The amount stolen does not necessarily represent permanent financial damage. Coincheck lost approximately 523 million NEM tokens valued at $530 million in January 2018 but compensated affected customers using company funds. Wormhole suffered a $320 million to $326 million loss in February 2022 when attackers exploited a signature-validation vulnerability, but Jump Crypto replenished the missing collateral.
DMM Bitcoin's loss of 4,502.9 BTC in May 2024, valued at approximately $305 million to $308 million, resulted from social engineering targeting a wallet-management provider. The exchange arranged customer compensation but ultimately wound down operations.
The Measure of True Damage
Binance founder Changpeng Zhao highlighted that gross theft figures do not reveal how much customers ultimately lose or whether affected companies remain solvent. Key considerations include the percentage of total bitcoin supply affected, the number of users impacted, the percentage of user assets compromised, and whether the platform covers losses.
Mt. Gox affected nearly 100 percent of its users and their assets, while FTX similarly impacted users comprehensively. By contrast, recent exchange breaches have been offset by company reserves and reimbursement commitments. The ultimate measure of a security failure extends beyond headline dollar amounts to encompass recovery rates, user protection, and market impact.
