Skip to main content
Uruguay Can

News from across crypto

Binance says hot-wallet breach caused estimated $6.3 billion loss

Binance says unauthorized hot-wallet withdrawals caused an estimated $6.3 billion loss, with roughly $3 billion frozen and users’ losses to be covered.

Uruguay Can Editorial

Binance says hot-wallet breach caused estimated $6.3 billion loss

Binance said unauthorized withdrawals from its hot wallets on Oct. 29 caused an estimated $6.3 billion loss, and that it would cover the impact rather than pass it to users. The exchange’s Oct. 30 incident update said the withdrawals began around 20:05 UTC; the attack sequence is still under investigation.

Before Binance released its estimate, the scale of the incident was unclear. The Associated Press reported that the company had said it was investigating a “potential security issue”; Binance later described unauthorized withdrawals from compromised hot wallets as a loss of token assets. The initial estimate is about $6.3 billion, not a final accounting.

How did attackers get access to the hot wallets?

Binance’s initial investigation suggested that a DevOps engineer’s laptop may have been compromised, allowing an attacker to access a service container and submit unauthorized withdrawal transactions. In its follow-up, the company said investigators had found additional points of breach. Binance said it had found no evidence that wallet private keys were leaked, but has not yet published the full attack sequence.

How much has Binance frozen and set aside?

Binance said about $3 billion in affected assets had been frozen on-chain with help from law enforcement, blockchain intelligence firms, issuers and industry partners. It also said it had set aside more than $6.34 billion in company funds, including $5 billion in the impacted tokens, and was buying the remaining assets through market and over-the-counter channels. The company said it would cover the stolen funds through its Secure Asset Fund for Users and corporate treasury.

What should users expect while the exchange responds?

As of Binance’s Oct. 30 update, withdrawals were temporarily suspended during security reviews, while deposits and other unaffected services remained operational. The exchange listed these next steps:

  1. Complete security checks and resume withdrawals in phases.
  2. Publish a Proof of Reserves snapshot for users to review.
  3. Continue tracing and recovering frozen assets with partners.
  4. Release a technical post-mortem after verifying the findings.

Sources