Binance says its initial investigation points to a compromised DevOps engineer's laptop that let an attacker reach a service container and submit unauthorized withdrawal transactions, with no evidence of any wallet private key leak, per Binance via CoinMarketCap.

Binance says its initial investigation points to a compromised DevOps engineer's laptop that let an attacker reach a service container and submit unauthorized withdrawal transactions, with no evidence of any wallet private key leak, per Binance via CoinMarketCap.

The estimated total impact is around $6.3B, with about $3B in affected assets frozen on-chain with help from blockchain partners, as reported by WuBlockchain.

As a precaution Binance temporarily suspended deposits and withdrawals, revoked the affected address authorization, and engaged law enforcement and blockchain intelligence partners to trace and recover funds.

Binance says it will cover all losses from its SAFU fund and company funds, that user funds are safe, and that a detailed technical post-mortem and updated Proof of Reserves will follow.