Binance says its initial investigation points to a compromised DevOps engineer's laptop that let an attacker reach a service container and submit unauthorized withdrawal transactions, as posted in Binance Announcements.

Binance says its initial investigation points to a compromised DevOps engineer's laptop that let an attacker reach a service container and submit unauthorized withdrawal transactions, as posted in Binance Announcements.

It says it found no evidence of any wallet private key leak, and promises a full technical post-mortem once verified.

The same update puts estimated impact at about $6.3B, with about $3B frozen onchain with partners, as summarized by The Block.

Deposits and withdrawals remain temporarily suspended while it freezes funds and works with law enforcement, and Binance says it will cover all losses with SAFU and company funds. That repeats its earlier coverage pledge.

Earlier trackers put outflows near $5.6B, including large BTC, ETH, USDT and USDC lots, per WatcherGuru. On chain researchers separately described an EIP-7702 style upgrade of hot wallet Binance 14, per Blockaid, which is consistent with Binance's claim that withdrawals were submitted via systems rather than keys, though Binance has not yet published proof.