Dear Binance users,
Binance’s preliminary investigation indicates that the security incident may have been caused by the compromise of a DevOps engineer’s laptop, which allowed the attacker to access a service container and submit unauthorized withdrawal transactions. We have found no evidence that the private key for any wallet was leaked. We will publish a detailed technical report on the incident once the investigation is complete and all facts have been fully verified.
The total impact is estimated at approximately $6.3 billion. We have worked with our blockchain partners to freeze the affected assets, and approximately $3 billion has been frozen on-chain so far.
Binance will cover all losses using the SAFU Fund and company funds. User funds are safe. We will also publish an updated version of our Proof of Reserves once remediation is complete.
As an immediate precautionary measure, Binance has:
Temporarily suspended deposits and withdrawals while security checks are completed;
Revoked authorization for the affected address;
Worked with law enforcement agencies and blockchain intelligence partners to trace and recover the funds.
Our teams are working around the clock to address this issue securely and comprehensively. We are cooperating closely with our law enforcement partners to identify those responsible and bring them to justice.
Please rely only on official Binance channels for updates. If you have any further questions, please feel free to contact Binance Customer Support.