Binance says the Oct 29 hot-wallet drain of about $6.3B likely started from a compromised DevOps engineer's laptop that reached a service container to submit unauthorized withdrawals, with no private key leak found, then updated to additional points of breach in a complex attack.

Binance says the Oct 29 hot-wallet drain of about $6.3B likely started from a compromised DevOps engineer's laptop that reached a service container to submit unauthorized withdrawals, with no private key leak found, then updated to additional points of breach in a complex attack.

About $3B is frozen on chain so far in place with issuers and partners, not recovered, leaving about $3B still liquid mostly in BTC and ETH. The claim in reposts tying the attack to North Korea's TraderTraitor is not confirmed by Binance in the sources read.

Binance says user funds are safe and it will cover all losses from SAFU and company funds, with over $6.34B reserved and $5B already held in the impacted assets, buying the rest via market and OTC to be verified in Proof of Reserves. Withdrawals stay paused for a security revamp while deposits work, on track to resume in about 45 hours from its Oct 30 update.

The three posts you sent, from Cointelegraph, bash_shar and pete_rizzo_, repeat only that first laptop version and the $6.3B estimate.