Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions.
Binance said in its first 30 October update that its initial investigation suggested a compromised DevOps engineer's laptop may have let an attacker reach a service container and submit unauthorized withdrawals.
This line is our short summary of the quote below. The quote is the evidence.
Flagged as conflicting
- Binance's first 30 October update pointed to a compromised DevOps engineer's laptop. Its second update the same day said later investigation had uncovered additional points of breach. Compare with Binance said in its second 30 October update that its later investigation had uncovered additional points of breach beyond a compromised laptop. (Binance). Side by side
Other statements from the same source
Binance said in its Security Incident Update dated 2026-10-30 that it will also publish an updated Proof of Reserves once the remediation is complete.
We will also publish an updated Proof of Reserves once the remediation is complete.
Binance added a note to its Security Incident Update dated 2026-10-30 saying the announcement was updated on 2026-10-30 to clarify that deposits remain unaffected.
Note: This announcement was updated on 2026-10-30 to clarify deposits remain unaffected and continue to operate as normal.
Binance said in its Security Incident Update dated 2026-10-30 that as an immediate precaution it had temporarily suspended withdrawals, revoked the affected address authorisation, and engaged law enforcement and blockchain intelligence partners.
As an immediate precaution, Binance has: - temporarily suspended withdrawals while security checks are completed; - revoked the affected address authorisation; - engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Binance said in its Security Incident Update dated 2026-10-30 that it will cover all losses from the SAFU fund and the company's funds, and that user funds are safe.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe.
Binance said in its Security Incident Update dated 2026-10-30 that it had worked with blockchain partners to freeze affected assets, with about $3 billion frozen on-chain so far.
We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.