Skip to content
Skip to content

Independent e-magazine

the OUTSPOKEN digest

Binance Puts the Damage at $6.3 Billion, Blames a Compromised Engineer's Laptop and Promises to Cover Every Loss

The exchange says about $3 billion is frozen on-chain and no private key leaked, but its SAFU fund covers only a fraction of what is unrecovered, and bitcoin sits near $78,500.

Outspoken Digest Crypto Desk

Friday, October 30, 2026/2 min read

A black Binance T-shirt and a yellow Binance tote bag laid flat on a white surface, photographed on 9 July 2022, a file photograph of the exchange's own branded merchandise and not of the security incident
Photo: Bretwa via Wikimedia Commons (CC BY-SA 4.0)

Binance has now put a number on it: about $6.3 billion in assets affected, roughly $3 billion of that frozen on-chain, and every dollar of user losses to be covered by the exchange. If the estimate holds, it dwarfs every earlier crypto theft.

The figure came in an official statement on X at about 02:25 UTC on Friday, hours after we first reported more than $3 billion leaving its hot wallets, according to FinanceFeeds. That is more than four times the roughly $1.5 billion Bybit hack of February 2025, and FinanceFeeds calls it the largest crypto theft on record.

How did the attacker get in?

Binance says its initial investigation suggests the breach may involve a compromised laptop belonging to a DevOps engineer. The laptop, it said, let an attacker reach a service container and submit unauthorized withdrawal transactions. It adds that it has found no evidence that any wallet private key was exposed, as Crypto Briefing reported. Binance has suspended deposits and withdrawals while it investigates.

The first statement was edited twice within 13 minutes, FinanceFeeds noted, and no government agency or regulator has commented publicly. Attribution to any group remains unconfirmed.

Who pays for the loss?

Binance says it will cover all losses from its SAFU emergency fund and company resources. That promise is the one that matters to customers, and the arithmetic is awkward. FinanceFeeds calculated that SAFU, which Binance topped up with $1 billion in bitcoin earlier this year, covers less than a third of the roughly $3.3 billion not yet frozen, implying at least $2.3 billion would have to come from corporate funds. That is the publication's estimate, not a Binance figure.

Freezes have helped. Tether blocked more than $1.567 billion of USDT and Circle more than $800 million of USDC on Thursday night. The rest sits largely in assets such as ether and bitcoin that no issuer can freeze, and Crypto Briefing cited Nansen data suggesting the attacker still held about $3 billion across several blockchains.

What did the market do?

Less than the numbers suggest. Bitcoin was trading around $78,500 on Friday morning, down about 2 percent on 24 hours and 4.4 percent on the week, according to Analytics Insight, which put total liquidations near $1.5 billion over the day, mostly long positions. Sources differ on bitcoin's exact low, from about $77,000 to $77,650. BNB, Binance's own token, was down about 5 percent.

What to watch next: an updated proof of reserves, a date for reopening withdrawals and a fuller account of how one laptop led to a service container that could submit withdrawals. Until then, the exchange is asking customers to take its word that they will be made whole.

Published in The Outspoken Digest

Editorial desk

Outspoken Digest Crypto Desk

Reports for The Outspoken Digest across Crypto.

Newsletter

The Digest, in your inbox

One edition, sent when it is ready. No noise, and your address is never passed on.

We send a confirmation first. One click to leave, always.

Share this story

the OUTSPOKEN digest

Beyond boundaries. Independent stories on technology, culture, and the trends shaping how we live.