Binance Preliminary Investigation: Theft Possibly Caused by Compromised Engineer's Computer, Losses Approximately $6.3 Billion

on October 30, Binance announced in a statement that preliminary investigations suggest the security incident may involve the hacking of a DevOps engineer's laptop, which allowed attackers to gain access to a service container and submit unauthorized withdrawal transactions.

Binance stated that there is currently no evidence of any wallet private key leakage, and a detailed technical post-incident report will be released after the investigation is complete and facts are fully verified.

According to Binance's estimates, the total impact of this incident amounts to approximately $6.3 billion. Binance has collaborated with blockchain partners to freeze affected assets, and approximately $3 billion has been frozen on-chain so far.

Binance stated that it will cover all losses through the SAFU fund and company treasury, ensuring user funds are secure, and will release an updated proof of reserves upon completion of the fixes.

As an emergency precaution, Binance has paused deposits and withdrawals during its security check, revoked authorizations for affected addresses, and is working with law enforcement agencies and blockchain intelligence partners to track and recover the funds, while closely cooperating with authorities to identify the attackers.