Binance, the world's largest cryptocurrency exchange, has completed an initial investigation into a security incident involving unauthorized withdrawals of Bitcoin, Ethereum, and other digital assets.
According to an official announcement on October 30, the breach occurred after an attacker gained access to a service container through a compromised DevOps engineer's laptop, enabling unauthorized withdrawal transactions.
Scope of the Incident
The estimated total impact of the incident is approximately $6.3 billion. Of this amount, $3 billion has been frozen on-chain through blockchain partners. Binance confirmed that wallet private keys remain secure and that no evidence of private key compromise has been found.
The exchange temporarily suspended deposits and withdrawals following the incident. Deposits continue to operate normally, while the company works on enhancements to withdrawal services. Binance expected to resume withdrawal services within 48 hours of the announcement.
Recovery Efforts and Industry Response
Binance has revoked affected authorizations and is collaborating with law enforcement and blockchain intelligence partners to trace and recover stolen funds. The company confirmed it will cover all losses using its SAFU fund and company resources.
Multiple stablecoin issuers took swift action to contain the stolen assets. Tether froze approximately $1.57 billion in USDT, while Circle froze over $800 million in USDC. Additional assets were frozen by other issuers.
Company Statement
Binance stated that it will share a detailed technical post-mortem once the investigation is complete and facts are fully verified. The exchange emphasized that user funds are secure and urged customers to remain cautious of scams and avoid unofficial links, messages, or requests for account information.
Binance acknowledged the support of industry participants, including both allies and competitors, in responding to the incident.
