Bitcoin Stolen From Binance Now Exceeds Tesla’s Holdings and Is More Than Double El Salvador’s Reserve

A haul of 18,270 bitcoin reportedly stolen from Binance would rank among the most significant cryptocurrency thefts by value, with the coins estimated to be worth approximately $1.4 billion. The amount is larger than Tesla’s disclosed bitcoin holdings and more than twice the reserve associated with El Salvador, underscoring the scale of the loss in both corporate and national terms.

Blockchain investigators have linked the attack to North Korea, although the attribution remains an assessment by investigators rather than a publicly established finding by a court or government agency. The identification of a suspected state-backed actor is likely to draw renewed attention to the security of major cryptocurrency exchanges and to the methods used to trace digital assets after they are taken.

The 18,270-bitcoin figure also places the stolen assets close to the holdings disclosed by SpaceX. The haul is said to be just 442 coins below SpaceX’s reported position, making the comparison notable even though the two figures have different origins: one represents assets allegedly taken in an attack, while the other reflects a company’s disclosed holdings.

At a value of roughly $1.4 billion, the stolen bitcoin works out to an average of about $76,600 per coin based on the estimate cited. That valuation is necessarily fluid. Bitcoin trades continuously, and a movement of even a few percentage points can change the dollar value of a holding by tens of millions of dollars. The underlying number of coins, however, remains fixed unless investigators recover some of the assets or the alleged thieves move them to other addresses.

The comparison with El Salvador is particularly significant because the country has made bitcoin part of its national financial strategy. A holding of 18,270 coins would amount to more than twice the reserve identified in the comparison, placing the stolen cache above the level associated with a sovereign government’s publicly discussed bitcoin position. The contrast illustrates how a single exchange compromise can involve more cryptocurrency than an entire national treasury is known to hold.

Tesla provides a different point of reference. The electric-vehicle manufacturer became one of the most prominent publicly listed companies to disclose bitcoin exposure, making its holdings a familiar benchmark for measuring the size of major cryptocurrency positions. A theft that exceeds Tesla’s reported balance shows that the incident is not merely a large loss by exchange standards; it is also comparable to the digital-asset positions held by globally recognized corporations.

The potential North Korean connection adds a further layer of concern. Investigators studying cryptocurrency activity linked to North Korean operations have frequently focused on the movement of stolen coins across numerous blockchain addresses, the use of intermediaries and attempts to convert digital assets into spendable funds. Bitcoin’s ledger is public, allowing analysts to follow transactions, but the identities behind wallet addresses are not automatically visible. Establishing who controls an address usually requires combining transaction patterns with information from exchanges, service providers and other investigative sources.

That transparency can assist investigators while also giving attackers opportunities to fragment and obscure funds. Stolen assets can be divided into smaller transfers, routed through multiple wallets or exchanged for other digital tokens. Such movements do not erase the transaction history, but they can make recovery and attribution more difficult. The value of the coins can also fluctuate sharply while they are being tracked, complicating estimates of the eventual financial damage.

For Binance, the reported theft would represent a major test of its security systems and response procedures. Large exchanges hold substantial quantities of customer assets and operate as gateways between blockchain networks and traditional financial markets. Any breach involving thousands of bitcoin can affect more than the immediate value of the missing coins, potentially prompting questions about custody controls, internal safeguards and the speed with which suspicious addresses can be identified and blocked by counterparties.

The available account does not specify how the bitcoin was taken, when the attack occurred or whether any portion has been recovered. It also does not establish whether the full amount remains under the alleged attackers’ control. Those details would be central to determining the final scale of the incident and assessing the likelihood of recovery.

For now, the 18,270-bitcoin figure offers the clearest measure of the alleged theft. At current estimated values, it represents approximately $1.4 billion in digital assets, exceeds Tesla’s disclosed holdings, stands at more than twice El Salvador’s reserve and falls only 442 coins short of SpaceX’s reported position. The comparisons place the incident among the most consequential cryptocurrency losses described by blockchain investigators, while the North Korean attribution ensures that the case will also be viewed through the broader lens of cybercrime and state-linked digital operations.