On October 30, Binance announced a major hot wallet security incident. The total impact is estimated at approximately $6.3 billion, potentially making it the largest security incident in the history of the crypto industry. According to the platform’s preliminary investigation, the attack most likely began with an intruder compromising a laptop belonging to a DevOps engineer. The attacker used it to move laterally into internal service containers and submit unauthorized withdrawal transactions. A subsequent investigation found multiple points of intrusion. Binance also stressed that there is currently no evidence that the underlying wallet private keys were directly exposed.
Following the incident, Binance immediately coordinated with stablecoin issuers including Tether and Circle, as well as on-chain intelligence providers, to freeze assets on traceable stolen addresses. As of the announcement, approximately $3 billion in assets had been successfully frozen. The company clearly outlined its compensation plan: losses will be covered jointly by the SAFU user protection fund and Binance’s own funds, with a commitment that users’ principal will not be affected by this hack.
As a preventive risk-control measure, the platform temporarily suspended withdrawals, while deposits remained unaffected. Binance provided an estimated timeframe of 45 hours to complete its security checks and resume withdrawal services. The team has also begun coordinating with law enforcement agencies in multiple countries and on-chain tracing partners to track the remaining stolen funds that have yet to be frozen. Binance said it will publish a full technical postmortem once the investigation is complete and the facts have been verified, and will update its proof of reserves after the remediation is finished.
Following the incident, Binance immediately coordinated with stablecoin issuers including Tether and Circle, as well as on-chain intelligence providers, to freeze assets on traceable stolen addresses. As of the announcement, approximately $3 billion in assets had been successfully frozen. The company clearly outlined its compensation plan: losses will be covered jointly by the SAFU user protection fund and Binance’s own funds, with a commitment that users’ principal will not be affected by this hack.
As a preventive risk-control measure, the platform temporarily suspended withdrawals, while deposits remained unaffected. Binance provided an estimated timeframe of 45 hours to complete its security checks and resume withdrawal services. The team has also begun coordinating with law enforcement agencies in multiple countries and on-chain tracing partners to track the remaining stolen funds that have yet to be frozen. Binance said it will publish a full technical postmortem once the investigation is complete and the facts have been verified, and will update its proof of reserves after the remediation is finished.
