On screen mobile have logo of the binance trading website. And there are bnb coins and dollars laying nearby.

Binance Confirms Massive $6.3 Billion Hot Wallet Breach

Attackers drained $6.3B through a compromised laptop and infrastructure breach, prompting frozen assets and halted withdrawals.

Cybersecurity teams are tracking the fallout of an unauthorized breach against cryptocurrency exchange Binance, which resulted in the theft of an estimated $6.3 billion in digital assets from the platform’s hot wallets.

Initial internal inquiries pointed to a compromised DevOps engineer’s laptop as the primary intrusion vector. Unauthorized actors leveraged that entry point to penetrate a service container and trigger fraudulent withdrawal transactions. Subsequent findings by Binance’s technical and security investigators revealed additional breach points across the organization's infrastructure.

The exchange stated that forensic evaluations have not uncovered any evidence of leaked wallet private keys.

Following the breach, Binance paused user withdrawals while continuing standard deposit workflows. Incident responders revoked compromised address authorizations, contained impacted systems and initiated tracing operations alongside law enforcement and blockchain intelligence firms.

Coordinated industry interventions have successfully frozen roughly $3 billion of the stolen tokens on-chain. Binance pledged to absorb all financial losses via its corporate treasury and internal insurance reserves, with plans to release a full technical post-mortem and an updated proof-of-reserves audit once remediation concludes.

About the Author

Jesse Jacobs is assistant editor of SecurityToday.com.

Featured

New Products

  • Zenitel Cloud RMM

    Zenitel Cloud Remote Monitoring & Management (RMM)

    Enhance operational uptime and slash maintenance costs across multi-site environments with secure, centralized cloud-based system diagnostics and lifecycle management.

  • DMP VK™ VMS With XV Plus Gateways

    DMP VK VMS With XV Plus Gateways

    Build flexible video monitoring systems with cloud-based video management, tiered AlarmVision analytics and gateways that need no inbound ports or separate VPN appliance.

  • ROAMEO and SARA new product image

    AITX ROAMEO™ and SARA™

    Deploy a unified, self-coordinating outdoor security presence by combining ROAMEO’s autonomous patrol capabilities with SARA’s proactive event assessment and real-time response.