Binance traces $6.3B breach to compromised engineer’s laptop

Binance breach — Binance has traced a massive security breach, which it estimates impacted around $6.3 billion, to a compromised DevOps engineer’s laptop, according to the exchange’s preliminary investigation published on October 30, 2026.

The exchange stated that the laptop compromise may have allowed an attacker to access a service container and submit unauthorized withdrawal transactions. Binance emphasized it found no evidence of a wallet private-key leak, with its investigation still ongoing. Security firm Blockaid’s preliminary assessment pointed to “key misuse,” where attackers trick a signing system into authorizing malicious transactions without extracting the underlying private key.

Binance reported it has worked with blockchain partners to freeze approximately $3 billion in affected assets onchain. The exchange said it would cover all losses using its Secure Asset Fund for Users (SAFU) and company funds, assuring users their funds are safe. It also pledged to publish an updated Proof of Reserves.

The exchange temporarily suspended deposits and withdrawals while conducting security checks and revoked the affected address authorization. Binance is working with law enforcement and blockchain intelligence partners to trace and recover funds, promising a detailed technical post-mortem once the investigation is complete.