Circle has frozen over $800 million in USDC tied to the October 29 breach as law enforcement chases approximately $6.3 billion in stolen assets
The US Secret Service is working with Circle to claw back funds stolen from Binance. The agency confirmed the partnership on October 30, 2026, one day after a breach that drained approximately $6.3 billion in assets from the world’s largest crypto exchange.
That figure places the incident among the largest crypto thefts on record.
What happened at Binance
The breach hit Binance on October 29, 2026. The attack reportedly unfolded within 20 minutes.
Stolen assets moved across ten blockchains. That spread matters because each chain has its own tooling, its own exchanges and its own escape routes for laundered funds.
Binance temporarily suspended withdrawals after the breach. The exchange has also pledged to tap its Secure Asset Fund for Users, better known as SAFU, to cover user losses.
Binance has set aside over $6.34 billion to cover losses tied to the hack.
The exchange says it plans to repay users in the same tokens they lost. Customers who held Bitcoin should get Bitcoin back, not a cash equivalent pegged to some arbitrary moment in time.
Stablecoins become the recovery workhorse
Circle froze over $800 million in USDC linked to the incident, acting in coordination with law enforcement. Tether took similar action, freezing around $1.57 billion in USDT.
Combined, total frozen assets now approach approximately $3 billion. Most of that sum sits in stablecoins.
The reason is structural. Circle and Tether issue their tokens centrally and keep the ability to blacklist addresses holding them.
Bitcoin and Ether have no such off switch. No company issues them, so no company can freeze them.
The FBI is also involved in the recovery effort alongside the Secret Service and Binance. Private-sector partners like Circle round out a response that looks less like a single investigation and more like a coordinated dragnet.
Who is behind it
Some blockchain analysis firms have tied the theft to North Korean-linked actors. Analysts have suggested a group known as TraderTraitor may be responsible.
That attribution has not been confirmed by the agencies leading the case.
Why the Secret Service is in the room
Most people associate the Secret Service with sunglasses and presidential motorcades. The agency also has a long-standing financial crimes mandate, dating back to its origins chasing counterfeit currency.
Its public announcement of cooperation with private partners signals that law enforcement now treats stablecoin issuers as frontline allies in recovery efforts.
For Circle, the episode doubles as a high-profile demonstration of what its compliance tools can do. The company has spent years positioning USDC as the regulated, cooperative option in the stablecoin market.
What this means for exchanges, users and regulators
For Binance users, the immediate question is whether SAFU holds up. The exchange’s over $6.34 billion reserve slightly exceeds the approximately $6.3 billion reportedly stolen, which suggests full coverage is at least on paper possible.
The pledge to repay in kind matters too. It shields users from being forced into a taxable or price-locked cash settlement they never asked for.
The figure to watch is the eventual recovery rate. Roughly half the stolen value has been frozen so far, and much of the remainder sits in assets with no central issuer able to step in.
Recovering Bitcoin, Ether and similar tokens will be a complicated legal endeavor. It may require cooperation from other exchanges where funds surface, plus court actions across several jurisdictions.
