Thomas Reid Dr

Fellow Binancians,
To thank you for your continued trust and support, Binance is launching another community appreciation Earn campaign. Eligible users are able to enjoy up to 10% APR on U, and share in a 40,000 USDC prize pool and in $500K worth of SXT rewards.
Activity 1: Enjoy Up to 10% APR on U Flexible Products
Promotion Period: 2026-11-05 08:00:00 (UTC) to 2026-11-24 23:59:59 (UTC)Subscription Format: Complete subscription, and rewards are available to eligible participants on a first-come, first-served basis until the reward pool is exhausted in accordance with the terms below.
ProductsEligible UserTotal APR = Real-Time / Base APR + Bonus Tiered APRU FlexibleRegular UsersReal-Time APR (Subject to change, currently around 1%)+ 7% Bonus Tiered APR(Tier 0 - 10,000 U)VIP 1 - VIP 3 Users+ 8% Bonus Tiered APR(Tier 0 - 300,000 U)VIP 4 - VIP 9 Users+ 9% Bonus Tiered APR(Tier 0 - 500,000 U)
Activity 2: VIP Exclusive 40,000 USDC Prize Pool with Dual Investment
Promotion Period: 2026-11-05 08:00:00 (UTC) to 2026-12-04 23:59:59 (UTC)VIP 1 - VIP 9 users who confirm their participation can receive rewards calculated based on their average Dual Investment subscription amount. The subscription period must last at least 3 days to qualify for this promotion.
Reward Structure:
Eligible Users’ Rankings Based on Their Average Dual Investment Subscription Amount During the Promotion Period*Shared Reward PoolReward per Eligible User limit (in a Dual Investment Subscription)5,000,000 ≤ Average Dual Investment Subscription Amount < 10,000,00010,000 USDC888 USDC10,000,000 ≤ Average Dual Investment Subscription Amount < 20,000,00018,000 USDC2,888 USDC20,000,000 ≤ Average Dual Investment Subscription Amount < 30,000,00012,000 USDC5,888 USDC
Notes:
Average Dual Investment Subscription Amount (Including All Pairs on Dual Investment and Dual Investment RFQ) = Total Eligible Subscription Amount During the Promotion Period * (Duration / 30 Days) If your Average Dual Investment Subscription Amount is 30,000,000 or higher, please contact your account manager.
Activity 3: Subscribe to SXT Locked Products to Share $200,000 Worth of SXT APR Rewards
Promotion Period: 2026-11-05 00:00:00 (UTC) to 2027-02-02 23:59:59 (UTC)Subscription Format: rewards are distributed on a first-come, first-served basis until the reward pool is exhausted.
Digital AssetDurationAPR During the Promotion PeriodMin. Subscription Limit per UserMax. Subscription Limit per UserSubscription Cut-off TimeSXT14 days12.9%1 SXT3,000,000 SXT2027-01-19 23:59:59 (UTC)30 days25.9%1 SXT5,000,000 SXT2027-01-03 23:59:59 (UTC)
Activity 4: Rank on the Simple Earn Leaderboard to Share $300,000 Worth of SXT Rewards
Promotion Period: 2026-11-05 00:00:00 (UTC) to 2026-12-04 23:59:59 (UTC)How to Participate:Click [Register Now] on the activity page.Make new subscriptions of 0.02 ETH to Flexible Products or 10,000 SXT to Flexible or Locked Products to earn points and rank on the leaderboard.For more campaign details, please refer to the campaign page.
Reward Structure:
Eligible users will be ranked by their Total Campaign Points on the leaderboard for a chance to share rewards as per the table below:
Eligible Users’ Rankings by Total Campaign PointsRewards per Eligible User1st Place4,500,000 SXT2nd Place2,500,000 SXT3rd Place1,000,000 SXT4th to 10th Places250,000 SXT11th to 50th Places100,000 SXT51st to 100th Places60,000 SXT101st to 300th Places25,000 SXT301st to 500th Places15,000 SXT501st to 1,000th Places10,000 SXT1,001st to 1,500th Places6,000 SXTAll Remaining Eligible UsersEqually share 3,500,000 SXT (Capped at 1,000 SXT per user)
Join the Promotion Now!
About SXT
Space and Time is the data blockchain securing on-chain finance. Backed by Microsoft’s Venture Fund M12, Space and Time connects real-world data to on-chain systems to power tokenized assets, stablecoins, institutional markets, DeFi, and enterprise use cases.
Terms & Conditions:
Activity 1, U Flexible Products Activity: Only master accounts are eligible for the Bonus Tiered APR. Sub-accounts will not be included in the bonus reward calculation. Reward Distribution:Real-Time APR: Rewards are accrued and directly accumulated in users’ Earn Accounts every minute. Real-Time APR is subject to change every minute, please refer to the respective product page(s) for full information.Bonus Tiered APR: Rewards will be distributed to users’ Spot Accounts every day. The first reward will be given the day after accrual starts (two days after subscription). For more calculation details, please refer to this FAQ.It may take up to 2 hours for newly upgraded VIP users to be able to view the Bonus Tiered APR.Rewards are limited. Once the rewards pool is exhausted, Bonus Tiered APR will no longer be available to participants.VIP users can activate the special offer by making at least one new subscription of any amount (including Auto-Subscribe) after the Activity Period starts. Users who participated in the October U Campaign and remain eligible will have the special offer automatically activated.During the Activity 1 Promotion Period, users who borrow stablecoins via Binance Loans or Margin and subscribe to the promotion products for arbitrage will not be eligible for Bonus Tiered APR rewards. Any Bonus Tiered APR rewards already distributed will be deducted.Simple Earn Products are subject to subscription limits. Please refer to the respective product pages for details.Activity 2, Dual Investment Activity:Sub-accounts are not treated as independent accounts. Their subscription amounts will be combined with the master account's.Once subscribed to Dual Investment, users cannot cancel the subscription or redeem their assets early.Rewards will be distributed in the form of a Dual Investment subscription with a duration of 14 days for eligible users within 14 days after the end of the Activity 2 Promotion Period (by 2026-12-18).Activity 3, SXT Locked Products:Reward Calculation Period: From 00:00 (UTC) on the day after an eligible subscription to Locked Products is completed, until the end of the subscription period.Reward Distribution: Distributed to Spot Account on a daily basis. The first reward will be given the day after accrual starts (two days after subscription).About early redemption for Simple Earn Locked Products: Any distributed rewards will be deducted from the refunded principal. It may take up to 72 hours to receive the digital assets back into the Spot Account.Activity 4, Simple Earn Leaderboard Rewards:Sub-accounts are not treated as independent accounts. Their subscription amounts will be combined with the master account's.SXT token rewards will be distributed to eligible users by 2026-12-18 23:59 (UTC), unless otherwise advised by Binance. Users may find their rewards via Profile > Assets > Spot Account. The rewards transaction can be checked in Assets > Transaction History > Spot > Distribution. Binance uses the exchange rate of SXT/USD at ~$0.00829 based on the average closing price of the past 7 days from 2026-10-28 to calculate the total rewards in USD.These terms and conditions (“Activity Terms”) govern users’ participation in the activities above (“Activities”, each an “Activity”). By participating in these Activities, users agree to these Activity Terms, and the following additional terms: (a) Binance Terms and Conditions for Prize Promotions; (b) Binance Terms of Use; and (c) Binance Privacy Notice; all of which are incorporated by reference into these terms and conditions. In the case of any inconsistency or conflict between these Activity Terms, and any other incorporated terms, the provisions of these Activity Terms shall prevail, followed by the  following in this order of precedence, and to the extent of such conflict: (a) Binance Terms and Conditions for Prize Promotions; (b) Binance Terms of Use; and (c) Binance Privacy Notice.Only users who complete identity verification during or before the Promotion Period can qualify for rewards in the Activities. The products or features referred to in one or more of the Activities above may not be available in your region. Users are responsible for informing themselves about and observing any restrictions and/or requirements imposed with respect to the access to and use of Binance services in each country from which the services are accessed.Changes to the Simple Earn Rewards Rate will be published on the Platform from time to time. Please refer to Binance Simple Earn Terms & Conditions, Dual Investment Terms & Conditions and Risk Warning for more information prior to subscribing to Earn Products. These Activities may be participated in through one or more Binance products or services, each of which is governed by its own product-specific terms and conditions (the "Product Terms"). Where you use a particular product or service to participate in any activity under this Campaign, the Product Terms applicable to that product or service apply to your use of it, in addition to these Activity Terms. You should read the relevant Product Terms before participating. If a product or service is not available to you, or you do not meet the eligibility requirements in its Product Terms, you will not be able to participate in the corresponding activity.A large amount of redemption requests might delay redemption temporarily. Redemptions may resume upon return of liquidity. Binance is not responsible for any actual or claimed losses as a result of any such delay. Users can view their Simple Earn Products assets by going to Assets > Earn > Simple Earn.Binance reserves the right to disqualify a user’s reward eligibility if the account is involved in any dishonest behavior (e.g., wash trading, illegally bulk account registrations/logins, self dealing, or market manipulation). Binance further reserves the right to disqualify any participants who tamper with Binance program code, or interfere with the operation of Binance program code with other software.Binance reserves the right at any time in its sole and absolute discretion to determine and/or amend or vary these terms and conditions without prior notice, including but not limited to canceling, extending, terminating or suspending this Activity, the eligibility terms and criteria, the selection and number of winners, and the timing of any act to be done, and all Participants shall be bound by these amendments. There may be discrepancies between this original content in English and any translated versions. Please refer to the original English version for the most accurate information, in case any discrepancies arise.
Thank you for your support!
Binance Team
2026-11-05

Fellow Binancians,
We continue to make progress restoring the withdrawal services and will reopen withdrawals for the assets listed below, beginning at 2026-11-05 04:00 (UTC).
Not all listed assets will become available at once. Reopening will roll out progressively across the assets as security and readiness checks are completed. Deposit services remain open.
Assets Planned to Resume Withdrawal
NetworkAsset(s)ETHUNI, AAVE, PAXG, VIRTUAL, MORPHO, ZAMA, YFI, WLFI, COMP, LPT, NMR, SAHARA, EIGEN, LDO, EPIC, SAND, HYPER, EUL, OPEN, ENS, ANKR, ID, APE, AUCTION, RED, ARKM, MANA, BIGTIME, G, ZKP, CYBER, F, AXL, FLOKI, GRT, SYNBSCASTER, PROM, UNI, 1MBABYDOGE, FIL, IOTA, GENIUS, BANK, MARSCOIN, ZIL, TUT, TWT, DEXE, MUBARAK, FLOKI, INJ, NIGHT, HOME, HYPER, AAVE, AVAX, AT, BREV, SANDBASEAERO, VIRTUAL, MORPHO, AVNTTRXJST, SUN, BTTCMATICGNSSUIMMT
We are prioritizing tokens based on user demand over the past week, restoring each network-asset pair carefully after completing rigorous security checks. Additional assets will be added as they become ready.
Please check the withdrawal page for your selected asset and network, or visit our network status page, to confirm availability. During rollout, users may see temporary delays or longer processing times due to traffic volume. If a withdrawal doesn't go through, please try again after a short while. We will share updates via our official X channel.
We continue to work towards reopening withdrawals in phases and strengthening our safeguards. We will share updates as progress continues.
Thank you for your support!
Binance Team
2026-11-05

Fellow Binancians,
As committed, Binance will cover the cost of these stolen funds from the recent security incident, not our users. We have already set aside more than 100% of the funds needed to cover these losses from Binance's own resources. And now we have new progress. We have now replenished approximately 98% of the impacted amount, and we continue to buy the remaining token assets through market and OTC channels. Purchases for the remaining 2% are expected to be slower because these tokens are less liquid. We will continue to provide further updates.
We have also taken a new Proof of Reserve (PoR) snapshot at 2026-11-04 00:00 (UTC). It now covers 44 tokens, up from 10 in the previous snapshot, and is available on our PoR website.
The snapshot provides an updated view of assets that are fully accounted for, reflecting our ongoing commitment to transparency. Generating the full zero-knowledge proof is expected to take approximately 50 to 60 hours due to the computational workload. Once the proof is generated, users holding any of the covered tokens will be able to independently verify that their balances are at least 1:1 backed.
We continue to acquire the remaining assets, reopen withdrawals in phases, and strengthen our safeguards. We will share updates as progress continues.
Thank you for your support!
Binance Team
2026-11-04

On 29 October 2026, Binance experienced a serious and highly sophisticated security incident. This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry.Our first responsibility is to protect users. Binance will absorb the financial impact of the stolen funds, not our users. We have already set aside more than 100% of the funds required to cover the loss. As of 31 October 2026, 98% of the impacted token assets have been replenished and are verifiable on our Proof of Reserves page. We are in the process of purchasing the outstanding, more illiquid assets.Approximately USD 6.34 billion in digital assets were impacted by the incident. As of this update, approximately USD 2.85 billion in digital assets have been frozen or intercepted, subject to reconciliation and market price volatility.We have taken immediate action to contain the incident and strengthen the systems involved. The entry points identified as having been used in the attack have been closed. Systems touched in the attack path have been rebuilt or replaced. We have also implemented tighter device controls, enhanced wallet-service risk controls and expanded AI-based behavioural anomaly detection.This is our initial report. It covers what we know today and what we have already improved. The investigation remains ongoing and our findings will be subject to further independent review. Some technical details will remain confidential to prevent malicious actors from using them to plan attacks. We are engaging independent security firms for further review. The latest information released by the Federal Bureau of Investigation indicates that the Democratic People’s Republic of Korea is responsible for this incident.We are sharing this initial report because security improves when the industry learns together.What happened on 29 OctoberThe attack unfolded quickly across several networks.The attacker exploited unauthorized access to an internal wallet signing service to initiate transactions outside the normal withdrawal process.Between 20:05 UTC and 20:09 UTC, five Binance hot wallets sent 233.46 million XRP to an attacker-controlled address.Binance hot wallets on Solana and Optimism sent approximately 970,500 SOL and 44.2 million OP to attacker-controlled addresses.Binance then received an internal alert regarding large-volume transfers and immediately began investigating.Binance hot wallet sent 18,270 BTC to an attacker-controlled address. The attacker then used the signing service to exploit Ethereum’s EIP-7702 authorization mechanism. EIP-7702 allows an account to delegate certain execution rights to a smart contract without exposing the private key. In this case, the attacker used that mechanism to give an attacker-controlled smart contract partial execution rights over a Binance hot wallet. Binance immediately initiated multiple containment measures, including suspending withdrawals to restrict further outflows, coordinating with partners to freeze affected tokens, and taking steps to revoke unauthorized permissions. These efforts froze a total of $2.85 billion in assets.However, suspending withdrawals alone could not stop all unauthorized asset movements. The malicious EIP-7702 authorizations existed on-chain and operated independently of Binance’s normal withdrawal infrastructure.The attackers submitted 50 signing transactions to manipulate the account nonce and establish malicious delegation authorizations. Once established, these authorizations enabled the attackers to continue moving assets independently of Binance's normal withdrawal infrastructure. Binance needed additional transactions to revoke these on-chain authorizations.The containment process involved additional technical complexities. Because the hot wallet used Multi-Party Computation (MPC), there was no single private key that could be used to immediately revoke the malicious EIP-7702 authorizations. The team therefore developed and executed a specialized procedure to revoke these authorizations, which required additional time. Furthermore, suspending withdrawals and shutting down hot wallet services did not automatically invalidate existing on-chain authorizations.These challenges extended the time required to fully contain the unauthorized asset movements. We are reviewing the incident response process, signing policy coverage, hot wallet controls and identifying opportunities to further strengthen our ability to respond rapidly to threats in the future.The final unauthorized transfer of 2,961.9 ETH finalised on-chain at 23:56 UTC. The transaction had previously been broadcast and remained pending before subsequently finalising. No further unauthorised transfers were observed after.At 00:10 UTC on 30 October 2026, Binance executed a new authorization from the Binance14 hot wallet to the zero address, clearing the EIP-7702 delegation code.Attack Preparation Our current investigation indicates that this was a sophisticated, multi-stage campaign. It was not a single isolated breach or a simple phishing incident. The attackers combined a range of techniques, including social engineering by fake recruitment interviews, malicious software downloads, compromised internal AI tooling, endpoint compromise, and an advanced transaction-authorisation method.June 2026 — Supply chain attack. Engineer A from Wallet DevOps downloaded a tampered Homebrew installation in order to install a popular AI coding tool after searching for it on a search engine. Our security team detected the anomaly, replaced the device, and rotated all related credentials as a proactive security action. However, Engineer A’s role and his related colleagues on our wallet infrastructure team was exposed to the hacker. Throughout 2026, Binance's security team detected and prevented 57 suspected North Korea-linked cyber threat cases. These attempts reflect the persistent threat posed by state-sponsored actors targeting the cryptocurrency industry. The techniques include fraudulent job interviews, malicious software disguised as popular developer tools, compromised software packages and browser extensions, fake video conferencing applications, and social engineering campaigns designed to steal credentials or deploy remote access malware.September 2026 — social engineering. Software Engineer B was contacted through a legitimate job-hunting platform by an individual posing as a Project Director. Software Engineer B had a profile on the platform that referenced his experience at Binance. The purported Project Director arranged a first-round interview with a HR representative, followed by a second-round interview with an individual claiming to be the CEO of a fictitious company.In the first round, the purported HR representative conducted a live video interview with Software Engineer B. The interviewer shared a social media account with him, including personal photos and videos posted on the platform, in order to build trust. This was more advanced and deceptive than previously seen social engineering approaches. The second interview was conducted in a popular social chat app, near the end of the interview, Engineer B was instructed to download an “assignment” containing a malicious code repository onto his work computer. The repository contained malicious code that executed during the setup process, initiating a series of unauthorized activities.The malware employed sophisticated obfuscation and evasion techniques, including replacing a legitimate development tool component with a malicious version to execute commands and establish communication with an attacker-controlled external server. The 0-day malware was not detected by the endpoint security protection tools at the time. The attacker also took steps to conceal the malicious activity and remove traces of the compromise, making detection and subsequent investigation more challenging.The script executed the below steps by applying obfuscation techniques to evade security detection.CREATE  /opt/homebrew/Cellar/pyenv/2.8.0/libexec/pyenv_  MODIFY  pyenv_ → 3,414 B  DELETE  .../libexec/pyenv  (3,344 B)      ← remove the valid pyenvRENAME  pyenv_ → pyenv  (3,414 B)  ← replace it with a malicious version DELETE  /opt/homebrew/bin/pyenv  (3,414 B)ln  (create a new symlink)  +  spawn zsh20 October, 2026 — use of an internal AI tool as a springboard. The attacker leveraged the compromised computer of engineer B and used an internal AI tool to gain control over the Wallet DevOps Engineer A and another Wallet Software Engineer C. The attacker soon discovered Wallet DevOps Engineer A had a container deployment permission token on his computer.29 October, 2026 — reach into wallet signing operations. On 29 October between 17:15 and 19:56, the attacker logged onto Software Engineer C’s computer, used the credentials stolen from Wallet DevOps Engineer A, deployed a container, and triggered a malicious script to launch the attack.What we have doneAs of Nov 3, 2026, we have taken the following actions:Rebuilt the affected wallet system in a new environment.Rebuilt the affected internal AI tool and access controls.Replaced affected devices.Decommissioned credentials and tokens related to affected engineers.Completed enhanced security scans across all employee devices.Enhanced AI-based behavioural anomaly detection.Strengthened wallet-service risk controls.Worked with law enforcement, blockchain intelligence firms and industry partners to trace and freeze affected assets.We will continue to strengthen our measures as the investigation progresses. There are a number of security measures we have implemented and are implementing that will remain private to prevent malicious actors from compromising our security.Further actionsWe are taking the following steps immediately.1. Independent cybersecurity reviewWe are engaging independent third-party cybersecurity experts to conduct a comprehensive review of the incident, validate our findings and recommend additional measures. The scope and findings of that review will inform our continuing remediation work.2. Expanded investment in AI security and preventionWe are increasing investment in AI-enabled detection, endpoint protection, developer-environment security and behavioural anomaly monitoring.3. Security research fund and industry initiativesWe are working on establishing a security research fund and targeted initiatives with leading AI companies, industry participants and security firms focused on AI security in blockchain environments.We will continue to proactively share information as and when we have it.