Binance puts security incident impact at about $6.3 billion

Binance said on Oct. 30 that a security incident may have enabled unauthorized withdrawals with an estimated impact of about $6.3 billion, and that roughly $3 billion had been frozen on-chain. The exchange said it was investigating; the Binance security incident update said the figure was an estimate and that the company would publish a technical post-mortem after verifying the facts.

How did the incident happen?

Binance’s initial investigation suggested that a compromised DevOps engineer’s laptop may have let an attacker access a service container and submit unauthorized withdrawal transactions. The exchange said it had found no evidence that wallet private keys had leaked.

The company did not present that possible route as a confirmed cause. The Associated Press report said Binance was investigating reports of a potential security issue and had not explicitly confirmed funds were stolen at the time of its report.

What has Binance done to limit the losses?

Binance said blockchain partners had helped freeze about $3 billion in affected assets. It said it had temporarily suspended withdrawals while it carried out security checks, revoked the affected address authorization and contacted law enforcement and blockchain intelligence partners to trace and recover funds.

The exchange said deposits remained available after an update to its announcement. Binance also said it would cover losses from its Secure Asset Fund for Users and company funds, and that user funds were safe.

What remains unconfirmed?

Binance said it would release a detailed technical post-mortem once its investigation was complete and the facts verified. Its $6.3 billion figure was an estimated total impact, and the company did not identify the attacker in the update.

Sources

• Binance security incident update — binance.com
• Associated Press report — apnews.com