- Binance confirmed a security incident after funds left its internet-connected wallets. Its early finding is that a DevOps engineer's laptop was compromised, giving an attacker access to a service container that could submit withdrawals. Binance says it found no sign that wallet private keys were taken, and a later review found additional breach points it hasn't described yet.
- Binance puts the total impact at about $6.3 billion and says about $3 billion was frozen on-chain with partners. Separately, Tether and Circle froze funds tied to the theft. If the losses hold, it would likely be among the largest crypto thefts on record.
- Binance started restoring withdrawals in phases on November 1, beginning with a first batch of networks for major assets. It says other assets and networks will reopen as it completes security and readiness checks. Binance says users will not bear the losses and that user funds remain safe.
- Check whether your asset has reopened only in the official Binance app or site you already use.
- Ignore anyone offering to help you withdraw, and don't click links in emails, texts or DMs about the incident.
- Never share your password, 2FA codes or recovery phrase.
- Turn on or review two-factor authentication.
Useful?