Binance says $6.3 billion affected in security breach

Crypto exchanges rely on controls that authorize withdrawals from wallets holding digital assets. Binance said Friday that attackers stole more than $6 billion in a security incident, after initially reporting a potential issue and estimating the total impact at about $6.3 billion, according to the Associated Press report on Binance’s incident.

The scale of the theft puts the exchange’s withdrawal controls and its ability to recover assets at the center of the investigation.

Binance’s initial investigation suggested that an attacker may have compromised a DevOps engineer’s laptop, gained access to a service container and submitted unauthorized withdrawal transactions. The exchange said it had found no evidence that wallet private keys were leaked. It has said it will provide more technical details after the investigation is complete and the facts are verified.

How did Binance say the attacker gained access?

Binance’s preliminary account pointed to a compromised laptop as the route into a service container used to submit withdrawals. The company has not described the precise controls the attacker bypassed or confirmed the full chain of access. It initially suspended deposits and withdrawals while it conducted security checks and worked with law enforcement, according to the AP.

The suspected laptop compromise is distinct from a private-key leak: Binance said it had found no evidence that wallet private keys were exposed. The exchange has not yet published the full technical account, so the role of the service container and the withdrawal authorization process remain subject to its investigation.

How much has been frozen or recovered?

Binance said about $3 billion in affected assets had been frozen on-chain through work with blockchain partners. That is roughly half of the estimated $6.3 billion impact, though the company’s statements distinguish frozen assets from recovered funds. A freeze can restrict movement of assets held at participating services or on networks with relevant controls; it does not by itself establish that the assets have been returned to users.

In its subsequent account, Binance said it had reserved more than $6.34 billion in company funds to cover the stolen assets and was beginning to recover assets for users, the AP reported. Those steps address the immediate question of coverage, while leaving the investigation into the breach and the tracing of remaining assets ongoing.

The initial estimate described the incident’s total impact; Binance later said hackers had stolen more than $6 billion. The distinction matters as the exchange and its partners continue to account for frozen, recoverable and unrecovered assets. Binance has said it is working with law enforcement, issuers and blockchain intelligence firms to trace and freeze additional funds.

Sources

• Associated Press report on Binance’s incident — apnews.com