Binance confirms $6.3 billion theft after security breach

What happened at Binance? The exchange says attackers stole about $6.3 billion through unauthorized withdrawals, after a potential security issue that it first said it was investigating. The Associated Press reported Binance’s initial estimate and its account of a possible compromised employee laptop. The scale makes the incident one of the largest crypto thefts reported.

How did the attacker get access?

Binance’s initial investigation suggested a DevOps engineer’s laptop may have been compromised, giving an attacker access to a service container and the ability to submit unauthorized withdrawal transactions. The company said it had found no evidence that wallet private keys were leaked. It had not yet shared a full technical account, and said it would publish more details once its investigation was complete and the facts verified.

That distinction matters: the suspected route into the service container is not the same as a confirmed explanation of how the attacker bypassed withdrawal controls. Binance later said its investigation had uncovered additional “points of breach,” according to the Associated Press’s follow-up report. The precise sequence and control failures remain under investigation.

How much has been recovered or frozen?

Binance said it had worked with blockchain partners to freeze roughly $3 billion in affected assets, according to the AP. That is a substantial amount, but still less than half of the estimated $6.3 billion impact. The exchange said it had reserved more than $6.34 billion of company funds to cover the stolen assets and was beginning to recover assets for users.

Binance also said deposits were unaffected, while withdrawals were suspended during its response. The company has promised to cover all losses, but the available reports do not give a final accounting of how much can be recovered on-chain or how long that process will take. For you, the next thing to watch is Binance’s completed technical investigation: it should clarify how the unauthorized withdrawals were approved and what remains unrecovered.

References

• Associated Press’s follow-up report — apnews.com