Binance Traces a $6.3 Billion Hack to a DevOps Engineer’s Laptop

"The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far." The exchange adds: "Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete."

The Three Precautions and the Post-Mortem

"As an immediate precaution, Binance has: temporarily suspended deposits and withdrawals while security checks are completed; revoked the affected address authorisation; engaged law enforcement and blockchain intelligence partners to trace and recover funds."

"Our teams are working around the clock to resolve this issue safely and thoroughly," the statement says, and closes on the hunt: "We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice."

Two Issuers, $1.79 Billion, About 60% of the Total

"User funds are safe! It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don’t manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered." — CZ (@cz_binance), 29 October 2026, 21:15 UTC.

Those two add to $1.794B, about 60% of the frozen total, a 15M calculation.

What It Means

Operators: requiring no court order, blacklisted addresses at stablecoin issuers lock up $1.79 billion in just minutes. An operator could have all its money tied up on one platform, not knowing how long withdrawal freezes could last.

Affiliates: payouts through Binance are halted in the same suspension, and any USDT from an address that later turns up in a trace could be frozen retroactively.