Skip to main content
Aeterna Sol

Crypto markets, protocols and policy

Binance puts security incident impact at $6.3 billion

Binance says a suspected security breach caused about $6.3 billion in impact, with $3 billion frozen on-chain as it suspends deposits and withdrawals.

The Aeterna Sol Editors

Binance puts security incident impact at $6.3 billion

About $6.3 billion is the estimated impact of a security incident Binance says may have enabled unauthorized withdrawals, raising questions about the breach’s scale and recovery. The exchange says it has frozen roughly $3 billion on-chain so far; The Associated Press reported that Binance was investigating the incident on Thursday.

Binance’s initial investigation suggests an attacker may have used a compromised laptop belonging to a DevOps engineer to access a service container and submit unauthorized withdrawal transactions. The company has not shared a final accounting or a technical explanation of how the access occurred.

How does Binance say the attacker got in?

Binance says the suspected route began with a DevOps engineer’s compromised laptop. DevOps staff maintain and operate software systems; in this case, the attacker may have used access from that laptop to reach a service container, then submit withdrawal transactions without authorization.

The exchange says it has found no evidence that wallet private keys were leaked. That distinction matters because private keys control crypto wallets, while the described attack may have used access to a system that processes withdrawals.

Binance has not released a completed post-mortem, a detailed technical account of the incident. ABC News reported that Binance plans to publish one after the investigation is complete and its facts are verified.

Does the $6.3 billion figure mean users lost that amount?

Binance calls $6.3 billion the estimated total impact, but the figure does not establish how much remains unrecovered or whether customers have lost funds. The company says affected assets worth about $3 billion have been frozen on-chain, where crypto transfers can be tracked across public blockchains.

Binance says it will cover all losses with money from its Secure Asset Fund for Users, known as SAFU, and company funds. It has also said user funds are safe and plans to publish an updated proof of reserves after remediation is complete. A proof of reserves is a report intended to show the assets an exchange holds against customer balances.

What has Binance done while it investigates?

The exchange says it temporarily suspended deposits and withdrawals while it carried out security checks. That pause can prevent customers from moving assets through the platform during the response, but it also means you may be unable to deposit or withdraw until Binance restores those services.

Binance says it revoked the affected address authorization and is working with law enforcement, blockchain intelligence firms and industry partners to trace and freeze additional assets. It has not confirmed who carried out the attack.

For now, the key figures are Binance’s estimates: about $6.3 billion in total impact and about $3 billion frozen on-chain. The exchange says it will provide further updates through official channels as it verifies the facts, and the amount recovered may change as tracing continues.

Sources