Binance has linked a massive security incident affecting its cryptocurrency wallets to a potentially compromised laptop belonging to a DevOps engineer, with the exchange estimating the total impact at approximately $6.3 billion.
In a security update published on October 30, the world’s largest cryptocurrency exchange said its initial investigation suggests the attacker gained access to a service container through the compromised laptop and used it to submit unauthorized cryptocurrency withdrawal transactions.
Binance said it has found no evidence that any wallet private keys were leaked. The company is continuing its investigation and promised to publish a detailed technical post-mortem once all findings have been verified.
Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified. The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far. Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete. As an immediate precaution, Binance has: – temporarily suspended deposits and withdrawals while security checks are completed; – revoked the affected address authorisation; – engaged law enforcement and blockchain intelligence partners to trace and recover funds. Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice. Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions. https://t.co/ywB2mKFy0p
— Binance (@binance) October 30, 2026
The exchange estimates the total impact of the incident at around $6.3 billion. Binance said it has worked with blockchain partners to freeze approximately $3 billion in affected assets so far, with additional efforts underway to trace and recover the remaining funds.
Tether and Circle have played a major role in blocking assets associated with the incident. Tether reportedly froze more than $1.567 billion in USDT, while Circle blocked over $800 million in USDC. Ripple also froze approximately $200 million in associated assets, alongside additional freezes involving other cryptocurrency issuers.
Binance has promised to cover all losses through its Secure Asset Fund for Users (SAFU) and company funds. The exchange maintains that customer funds are safe and says it will publish an updated Proof of Reserves report once the remediation process is complete.
As an immediate precaution, Binance temporarily suspended deposits and withdrawals while conducting security checks. It also revoked authorization for the affected address and engaged law enforcement agencies, blockchain intelligence firms and other industry partners to trace the stolen assets and identify those responsible.
The incident has also triggered significant volatility across cryptocurrency markets. Bitcoin dropped to a six-week low of approximately $77,646, while Ethereum reached a two-month low of around $2,238.76. Binance’s native BNB token also fell more than 8% over a 24-hour period, trading near $694, according to market data reported by Reuters.
However, questions remain about the impact on Binance’s asset reserves. A CoinDesk analysis of the exchange’s October 1 Proof of Reserves data found that the affected hot wallet was included among the wallets backing customer balances. The analysis estimated that the stolen Ethereum could leave Binance’s ETH reserve coverage at approximately 94% until the missing assets are replaced.
Binance says its security and recovery teams are working around the clock and cooperating with law enforcement to resolve the incident. The exchange has also urged customers to rely exclusively on official Binance channels for updates and remain cautious of phishing messages and fraudulent support requests.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
