Binance Confirms $6.3B Hack, Points to Possible Compromised DevOps Laptop

Binance Confirms $6.3B Hack, Points to Possible Compromised DevOps Laptop

Binance put the Oct. 29 hack at about $6.3 billion with roughly $3 billion frozen on-chain. Initial findings point to a possibly compromised DevOps laptop, no private key leak. SAFU and company funds will cover losses; withdrawals remain suspended.

Ibrahim RajabOctober 30, 20263 min read
Share

$6.3 billion. That is Binance's own estimate of the damage from the Oct. 29 hack, with roughly $3 billion frozen on-chain so far. The exchange pledged to cover every dollar of user losses. Its first findings point to a possible employee laptop compromise and report no evidence of a wallet private key leak.

That moves the story well past our earlier report, which carried a $2.5B-$3.5B range and no confirmed loss.

What Binance says happened

In its announcement on X, Binance said the initial investigation suggests the incident "may involve a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions."

Post by @binance on X: linked from cryptopotato.com
@binance on X

View the post on X

The wording is hedged. A full technical post-mortem will follow once the investigation is complete and the facts are verified. On keys, Binance was direct:

"We have found no evidence of any wallet private key leak."

Binance

Analysts tracking the outflows had earlier flagged as much as $5.8 billion in potentially compromised assets before Binance issued its own figure.

Frozen is not recovered

About $3 billion is frozen with blockchain partners. Restricted, not returned. Roughly half the estimated impact is not yet locked down. Binance said it has engaged law enforcement and blockchain intelligence partners to trace and recover funds.

Losses covered, withdrawals halted

Binance said it will cover all losses from the SAFU fund, its user protection fund, and company funds.

"Binance will cover all losses from the SAFU fund and the company's funds. User funds are safe."

Binance

Deposits and withdrawals are temporarily suspended during security checks, and authorisation for the affected addresses has been revoked. No reopening date. Yi He said: "We will enable withdrawals as soon as the security scan is complete." Binance will publish an updated Proof of Reserves once remediation is done.

Changpeng Zhao acknowledged help from industry participants, including competitors, and described an overnight response involving hundreds of employees. "It hurts, but we will survive," he said.

Market reaction

Bitcoin slid from above $81,000 to around $76,400 as the news spread. Altcoins sold off, and Coinglass data showed about $1.5 billion in total derivatives liquidations.

Bitcoin 7-day price chart
Bitcoin, 7 days to October 30, 2026. Source: CoinGecko via blockchainacademics.com

Many in the industry read the relatively modest decline, set against the size of the hack, as a reason for optimism.

What it means

At $6.3 billion, the estimate is more than double the low end of the range first reported from hot wallet outflows. Two questions stay open: the root cause and how long withdrawals stay shut. A DevOps laptop, if confirmed, would make this an operational security failure rather than a cryptographic one. The fund doing the paying is also in flux: a SAFU conversion into bitcoin began in February under a plan to shift $1 billion in stablecoin reserves.

Discussion

Loading comments...