Binance halts trading after DevOps engineer's laptop compromise enables $6.3B in unauthorized transactions
Binance paused all trading, deposits and withdrawals after attackers compromised a DevOps engineer's laptop and used the access to submit unauthorized withdrawal transactions. The exchange initially froze $2.5 billion in assets and later raised its at-risk estimate to $6.3 billion, saying the figure could grow as it works with law enforcement, token issuers and blockchain intelligence firms to trace and freeze more funds. Binance says user funds are safe, that it found no evidence of any wallet private key leak, and that it will cover any customer losses. The initial access method is not yet disclosed; phishing or a supply chain compromise of a developer package cannot be ruled out. Binance also warned users to beware of scam links and messages exploiting the incident.
Detalhes técnicos
Per Binance's own update, the compromised engineer laptop allowed the attacker to reach a service container, from which unauthorized withdrawal transactions were submitted. No private key leakage has been identified. Trading remained suspended at the time of reporting.
Remediação
Binance halted trading, deposits and withdrawals, froze assets with partners, and pledged full reimbursement. Users should ignore unofficial links or requests for account information circulating around the incident.
Linha do tempo
-
Binance halts trading after DevOps engineer's laptop compromise enables $6.3B in unauthorized transactions
ler a análise desta fonte ocultar
Binance paused all trading, deposits and withdrawals after attackers compromised a DevOps engineer's laptop and used the access to submit unauthorized withdrawal transactions. The exchange initially froze $2.5 billion in assets and later raised its at-risk estimate to $6.3 billion, saying the figure could grow as it works with law enforcement, token issuers and blockchain intelligence firms to trace and freeze more funds. Binance says user funds are safe, that it found no evidence of any wallet private key leak, and that it will cover any customer losses. The initial access method is not yet disclosed; phishing or a supply chain compromise of a developer package cannot be ruled out. Binance also warned users to beware of scam links and messages exploiting the incident.
Technical Details
Per Binance's own update, the compromised engineer laptop allowed the attacker to reach a service container, from which unauthorized withdrawal transactions were submitted. No private key leakage has been identified. Trading remained suspended at the time of reporting.
Remediation
Binance halted trading, deposits and withdrawals, froze assets with partners, and pledged full reimbursement. Users should ignore unofficial links or requests for account information circulating around the incident.