Binance Finds 'Additional Points of Breach' in $6.3B Hack

In brief

• Binance has estimated the total impact of Thursday's security incident at around $6.3 billion, and said about $3 billion of it has been frozen onchain.
• The firm initially pointed to a compromised DevOps engineer's laptop, but now says its investigation has uncovered "additional points of breach."
• The exchange said it will cover all losses from its SAFU fund and company funds, and has reopened deposits while withdrawals remain suspended.

Binance has uncovered "additional points of breach" in Thursday's security incident, which it estimates cost around $6.3 billion, the exchange said on Friday, after initially pointing to a compromised engineer's laptop.

In an announcement late Thursday, Binance said a compromised DevOps engineer's laptop may have allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. "We have found no evidence of any wallet private key leak," the exchange said.

Binance CEO Richard Teng said on Friday that the attacker "did not simply use one engineer's permissions, and this was not a single 'one-click' action," describing "a more complex attack process." "Our investigation has not attributed responsibility to any individual," he wrote.