The global cryptocurrency powerhouse Binance has disclosed that it has been the target of the largest cyber heist ever recorded, leading to the theft of $6.3 billion in digital assets.
Founded in China and currently based in Dubai, with registration in Delaware, the company reported that it has managed to freeze $3 billion of the misappropriated funds. Binance stated it will absorb all losses through its Secure Asset Fund for Users (SAFU) as well as other company resources.
In a statement released on October 30, Binance indicated that early investigations pointed to a compromised laptop belonging to a DevOps engineer as a possible entry point for the attacker.
This breach was said to have enabled unauthorized withdrawal transactions through access to a service container.
Following its initial assessment, Binance has updated its findings, revealing the discovery of additional vulnerabilities exploited in the breach.
“This was an intricate assault,” the company mentioned, noting that it is collaborating with law enforcement, blockchain intelligence organizations, token issuers, and various industry stakeholders to fully understand the incident and locate the affected assets.
Binance has not yet released a complete overview of the incident, stating it is still in the process of gathering detailed information and intends to provide an extensive technical report once the investigation concludes.
The exchange has also indicated that there is no evidence suggesting any private keys for wallets were compromised.
In multiple social media updates, Binance has consistently reassured its customers that their funds are secure despite the scale of the breach. Additionally, the company has committed to share an updated proof of reserves after completing remediation efforts to give users a clearer picture of assets in relation to their balances.
Three leading cryptocurrency analysis companies—TRM Labs, Elliptic, and Chainalysis—have high confidence that the attack was carried out by TraderTraitor, a North Korean hacking collective.
Binance Halts Withdrawals During Ongoing Investigation
As the investigation advanced, Binance implemented several precautionary steps.
These measures included the temporary halt of all deposits and withdrawals, as well as certain Binance Alpha trading functions, particularly concerning CEX Buy Token, Alpha Instant, and CEX purchase prediction marketing involving users’ spot wallet funds.
However, in a recent update, Binance clarified that deposits are back to normal and have not been impacted.
At the time of this report, withdrawals are still paused while the company undertakes a comprehensive security overhaul of its withdrawal process and associated addresses, with a resumption anticipated within 45 hours.
The firm has also confirmed that unauthorized withdrawals stopped after the suspension of the withdrawal option. It has revoked access for the affected addresses and continues to collaborate with law enforcement and blockchain partners to trace and secure impacted assets.
Binance has advised its users to be vigilant against possible scams taking advantage of the situation. The exchange specifically cautioned against believing unofficial messages, links, or requests for account information.
Customers are encouraged to rely solely on official communication channels for updates and to reach out to Binance Customer Support with any inquiries.
Image credits: miss.cabul / K.unshu / Shutterstock.com