Binance disclosed a $6.3 billion security incident involving unauthorized withdrawal transactions, with the exchange's investigation pointing to a compromised DevOps engineer's laptop as the attack vector.
The attacker gained access to a service container through the compromised laptop, allowing submission of unauthorized withdrawal transactions that bypassed Binance's authorization systems. Binance immediately froze approximately $3 billion in affected assets on-chain and revoked authorization for the compromised address to halt further fund movement.
The exchange confirmed no private keys were leaked during the incident, indicating core wallet infrastructure remained secure. Binance suspended all deposits and withdrawals platform-wide to contain the breach and complete its investigation.
Binance will cover all user losses through its SAFU fund and company reserves. The SAFU fund, established in 2018 as an emergency insurance reserve, is regularly replenished to maintain coverage capacity.
The exchange plans to release a detailed technical post-mortem report after completing its full investigation, outlining the attack sequence and remediation measures.
