Binance's billion-dollar hack may have been caused by an engineer's laptop being compromised
Executive Briefing
Synthesized and verified with gemini-2.0-flash-thinking-exp
“# Binance's billion-dollar hack may have been caused by an engineer's laptop being compromised Bina”
Key Takeaways
- 1.# Binance's billion-dollar hack may have been caused by an engineer's laptop being compromised Binance confirmed that the attack, which affected $6.3 billion of the exchange, may have come from a compromised DevOps engineer's laptop.
- 2.On the morning of October 30, Binance digital currency exchange said that the initial investigation showed that the laptop of an engineer in charge of developing and operating the system was likely controlled by hackers.
- 3.From that device, the attacker accessed a component in the software system of the world's largest digital currency exchange, then made illegal withdrawal orders.
Binance confirmed that the attack, which affected $6.3 billion of the exchange, may have come from a compromised DevOps engineer's laptop.
On the morning of October 30, Binance digital currency exchange said that the initial investigation showed that the laptop of an engineer in charge of developing and operating the system was likely controlled by hackers. From that device, the attacker accessed a component in the software system of the world's largest digital currency exchange, then made illegal withdrawal orders.
The exchange representative also added that there is currently no evidence that the private keys of digital currency wallets have been leaked, and this is only a preliminary investigation result and a detailed technical report will be announced after completing verification.
"Binance will compensate all losses from the Secure Asset Fund for Users (SAFU) and the company's funds. User funds are still safe," the exchange announced. SAFU was established by Binance in 2018, to protect users in emergency situations. The fund currently holds one billion USD worth of Bitcoin.
Binance has not announced the final amount of damage, but confirmed that the amount "affected" to date is 6.3 billion USD. They have coordinated with partners to block about 3 billion USD on the blockchain. In addition, to handle the problem, Binance temporarily stopped deposits and withdrawals during the security check period, revoked the authorization of the affected wallet address, and coordinated with law enforcement agencies and blockchain analysis units to trace and recover assets.
The incident emerged in the early morning of October 30 (Hanoi time), when Binance's hot wallet was discovered to have transferred digital currencies worth about 5.78 billion USD. This may be the largest attack on a digital currency exchange in history. Previously, Bybit exchange was stolen by hackers of 1.5 billion USD in digital currency in February 2025.
Binance founder Changpeng Zhao (CZ) also shared information from the DefiLlama founder's X account with the nickname 0xngmi, stating that Binance holds 144 billion USD in assets. This person estimates that the actual loss amount may be less than $1 billion because most of the affected funds have been frozen and the exchange can "easily compensate".
Liu Quy
