Binance: Security incident may involve DevOps engineer's laptop being compromised, estimated impact around $6.3 billion
October 30: Binance released a security incident update stating that preliminary investigations suggest the incident may involve the compromise of a DevOps engineer's laptop, through which attackers gained access to service containers and submitted unauthorized withdrawal transactions. No evidence of any wallet private key leakage has been found so far. The estimated total impact is approximately $6.3 billion, and relevant assets have been frozen in cooperation with blockchain partners, with about $3 billion frozen on-chain. Binance will cover all losses with the SAFU fund and company funds. User funds are safe, and an updated proof of reserves will be published after remediation is complete.
As an immediate measure, Binance has temporarily suspended deposits and withdrawals to complete security checks, revoked authorizations for affected addresses, and is working with law enforcement and blockchain intelligence partners to track and recover funds. A full technical post-mortem will be published after the investigation concludes and facts are verified. Please obtain the latest updates only through official channels.