Binance has released Security Incident Update #2 following a major hot-wallet compromise on October 29 at 20:05 UTC.
Here's the complete breakdown đ
đ´ WHAT HAPPENED?
⢠Approximately $6.3B worth of token assets stolen through unauthorized withdrawals.
⢠Affected assets include BTC, ETH, BNB, USDT, USDC and others.
⢠Binance says it will absorb the entire financial impact, NOT its users.
đ° FUND PROTECTION
⢠Over $6.34B in company funds set aside.
⢠$5B held in the exact affected token assets.
⢠Approximately 80% of the impacted amount already covered.
⢠Remaining 20% being purchased through market and OTC channels.
⢠Coverage through SAFU and corporate treasury.
đ SECURITY RESPONSE
⢠Compromised infrastructure contained.
⢠Affected authorizations revoked.
⢠Additional security controls implemented.
⢠Approximately $3B in stolen assets frozen on-chain.
⢠Working with law enforcement, blockchain intelligence firms, token issuers and industry partners.
⢠Security checks strengthened across affected infrastructure.
đ WHAT THE INVESTIGATION FOUND
⢠Initial investigation suggested a potentially compromised laptop.
⢠Further investigation uncovered additional breach points.
⢠No evidence of wallet private keys being leaked so far.
⢠Full attack sequence and contributing factors remain under investigation.
â ď¸ PLATFORM STATUS
⢠Withdrawals temporarily suspended for security reviews.
⢠Deposits and unaffected platform services remain operational.
⢠Withdrawal restoration targeted within approximately 34 hours, subject to security checks.
⢠Restoration will happen in phases.
đ WHAT'S NEXT?
1ď¸âŁ Initial Proof of Reserves snapshot within 12 hours.
2ď¸âŁ PoR report targeted for November 2, 2026, showing platform asset holdings and backing of user balances.
3ď¸âŁ Further technical findings expected within approximately 48 hours, subject to verification.
4ď¸âŁ Continued efforts to trace, freeze and recover stolen funds.
5ď¸âŁ A detailed incident post-mortem report covering what happened, lessons learned and additional safeguards.
Binance also committed to pursuing those responsible and holding them accountable.
THE BIG TAKEAWAY:
Binance says users will not bear the $6.3B loss. However, this incident raises serious questions about centralized exchange security, infrastructure vulnerabilities and the importance of transparency.
Stay alert. Follow official Binance channels only and beware of fake recovery links.