World’s largest cryptocurrency exchange Binance has revealed that a major security incident—which reportedly put $6.3 billion in crypto assets at risk—was a highly complex attack involving multiple breach points, moving beyond initial assessments that blamed a single compromised DevOps engineer’s laptop.
In an updated statement, the company noted that while early investigations pointed to a single compromised device granting unauthorised access to a service container, subsequent findings uncovered a broader compromise.
Binance is actively coordinating with global law enforcement agencies and security partners to investigate the full scope of the intrusion.
To mitigate damages, Binance temporarily paused its withdrawal services, successfully halting unauthorised outflows.
The exchange has already worked with blockchain partners to freeze approximately $3 billion of the impacted assets on-chain. Deposits remain fully functional, and withdrawals are on track to resume within a 45-hour timeframe.
Reassuring its global user base, Binance emphasised that all losses will be fully covered through its Secure Asset Fund for Users (SAFU) alongside corporate reserves, confirming that user funds remain safe.
The exchange pledged to release an updated Proof of Reserves once remediation efforts are complete, with further updates delivered through official channels as verified information emerges.