Binance Says Security Incident May Involve Compromised DevOps Laptop

According to the announcement from Binance, the exchange’s initial investigation suggests that a compromised DevOps engineer’s laptop may have enabled an attacker to access a service container and submit unauthorized withdrawal transactions. Binance said it has found no evidence that wallet private keys were leaked. The estimated total impact is around $6.3 billion, and the company said it has worked with blockchain partners to freeze affected assets, with approximately $3 billion frozen on-chain so far. Binance said it will cover all losses using funds from its SAFU fund and the company, and that user funds are safe. As an immediate precaution, the exchange temporarily suspended deposits and withdrawals while it conducts security checks and revoked authorization for the affected address. Binance has also engaged law enforcement and blockchain intelligence partners to trace and recover funds. The company said it will publish a detailed technical post-mortem after the investigation is complete and the facts are verified. It also plans to publish an updated Proof of Reserves after remediation is complete. The update was issued on 2026-10-30.