Binance Hacked – 6.3 Billion Dollars Assets Stolen

What Happened?

Binance co-founder Changpeng Zhao confirmed on social media platform X, that the breach has happened.

• Scale: Up to $6.3 billion in assets were targeted or placed at risk.
• Immediate Freeze: Binance quickly suspended all platform deposits and withdrawals globally for its 335 million users to lock down system architecture.
• Coordinated Recovery: Working in tandem with major crypto issuers and analytics firms, roughly $3 billion in stolen assets have already been frozen on-chain (including over $1.56 billion by Tether and $800 million by Circle).

How Did the Binance hacked Occur?

According to preliminary findings released by Binance’s internal investigation and threat response teams:

[Compromised Engineer Laptop]
│
▼
[Access to Service Container]
│
▼
[Unauthorized Withdrawal Orders Issued]
│
▼
[Funds Drained from Hot Wallets]

• Initial Compromise: The breach originated from a single compromised laptop belonging to a DevOps engineer.
• Privilege Escalation: Exploiting the access levels on that machine, the attacker compromised an internal service container.
• Transaction Execution: This container access allowed the attacker to directly issue unauthorized withdrawal transactions across several exchange-managed hot wallets.
• Private Keys Intact: Binance emphasized that its preliminary analysis shows no evidence that wallet private keys were directly leaked or stolen. Instead, the attacker abused the internal transaction approval pathway.

Binance Response on X

We are working non-stop to resolve this issue. Binance will cover all losses. As a precaution, all deposits and withdrawals are temporarily suspended while our team conducts security checks, freezes funds, and works with law enforcement. We are working around the clock and will share a full post-mortem once the investigation is complete. Please rely only on official Binance channels for updates. This is an industry-wide effort, and we are grateful to partners across the ecosystem who have moved quickly to help freeze affected assets. We will continue to share verified updates through official Binance channels. User funds are safe.

Impact on Users

• Fund Balances Kept Whole: Binance explicitly reassured users that “User funds are safe”. The company pledged to cover 100% of all incurred losses using its SAFU (Secure Asset Fund for Users) reserve fund in addition to internal corporate capital.
• Withdrawal & Deposit Suspensions: All deposits and withdrawals remain temporarily halted while forensic checks finish and affected authorization parameters are replaced.
• Platform Trading Disruption: Trading was temporarily halted on specialized platforms like Binance Alpha as a precautionary measure.
• Market-Wide Contagion: Crypto markets dipped sharply on the news, with Bitcoin falling over 3% to multi-week lows as broader market sentiment reacted to liquidity freezes.

Immediate Incident Response & Remediation

• Revoked Authorizations: Binance immediately revoked permissions, credentials, and network routes tied to the compromised engineer’s machine, service container, and target addresses.
• International Law Enforcement & Chain Tracking: Binance engaged law enforcement agencies and blockchain intelligence firms (like Chainalysis) to trace the movement of un-frozen assets and identify the threat actors.
• Proof of Reserves Update: Once remediation and audits conclude, Binance promised to publish a updated Proof of Reserves snapshot verifying full 1:1 asset backing across all user balances.

Summary of Platform Safeguards