Binance: Security Incident May Involve Compromised Laptop of a DevOps Engineer, No Private Key Leak Found, Total Losses Estimated at About $6.3 Billion

October 30: Binance released an update on the security incident. Its preliminary investigation shows the incident may involve the compromise of a DevOps engineer's laptop, which allowed attackers to access a service container and submit unauthorized withdrawal transactions. Binance said it has found no evidence of any wallet private key leakage and will publish a detailed technical post-mortem once the investigation is complete and the facts are fully verified.

Binance estimates total losses at about $6.3 billion and has worked with blockchain partners to freeze affected assets, with roughly $3 billion frozen on-chain so far. Binance will cover all losses through the SAFU fund and corporate funds, user funds are safe, and it will publish an updated proof of reserves once remediation is complete. As immediate precautions, Binance has temporarily suspended deposits and withdrawals, revoked authorizations for affected addresses, and is working with law enforcement and blockchain intelligence partners to trace and recover funds. Binance said it is working around the clock and cooperating closely with law enforcement partners to identify the attackers.