Binance Puts the Damage at $6.3 Billion, Blames a Compromised Engineer's Laptop and Promises to Cover Every Loss
The exchange says about $3 billion is frozen on-chain and no private key leaked, but its SAFU fund covers only a fraction of what is unrecovered, and bitcoin sits near $78,500.
Friday, October 30, 2026/2 min read

Binance has now put a number on it: about $6.3 billion in assets affected, roughly $3 billion of that frozen on-chain, and every dollar of user losses to be covered by the exchange. If the estimate holds, it dwarfs every earlier crypto theft.
The figure came in an official statement on X at about 02:25 UTC on Friday, hours after we first reported more than $3 billion leaving its hot wallets, according to FinanceFeeds. That is more than four times the roughly $1.5 billion Bybit hack of February 2025, and FinanceFeeds calls it the largest crypto theft on record.
How did the attacker get in?
Binance says its initial investigation suggests the breach may involve a compromised laptop belonging to a DevOps engineer. The laptop, it said, let an attacker reach a service container and submit unauthorized withdrawal transactions. It adds that it has found no evidence that any wallet private key was exposed, as Crypto Briefing reported. Binance has suspended deposits and withdrawals while it investigates.
The first statement was edited twice within 13 minutes, FinanceFeeds noted, and no government agency or regulator has commented publicly. Attribution to any group remains unconfirmed.
Who pays for the loss?
Binance says it will cover all losses from its SAFU emergency fund and company resources. That promise is the one that matters to customers, and the arithmetic is awkward. FinanceFeeds calculated that SAFU, which Binance topped up with $1 billion in bitcoin earlier this year, covers less than a third of the roughly $3.3 billion not yet frozen, implying at least $2.3 billion would have to come from corporate funds. That is the publication's estimate, not a Binance figure.
Freezes have helped. Tether blocked more than $1.567 billion of USDT and Circle more than $800 million of USDC on Thursday night. The rest sits largely in assets such as ether and bitcoin that no issuer can freeze, and Crypto Briefing cited Nansen data suggesting the attacker still held about $3 billion across several blockchains.
What did the market do?
Less than the numbers suggest. Bitcoin was trading around $78,500 on Friday morning, down about 2 percent on 24 hours and 4.4 percent on the week, according to Analytics Insight, which put total liquidations near $1.5 billion over the day, mostly long positions. Sources differ on bitcoin's exact low, from about $77,000 to $77,650. BNB, Binance's own token, was down about 5 percent.
What to watch next: an updated proof of reserves, a date for reopening withdrawals and a fuller account of how one laptop led to a service container that could submit withdrawals. Until then, the exchange is asking customers to take its word that they will be made whole.
Published in The Outspoken Digest
Newsletter
The Digest, in your inbox
One edition, sent when it is ready. No noise, and your address is never passed on.
Read Next
More Crypto →

Bitcoin Slips Below $80,000 as Samsung and Alphabet Sell-Offs and a Hawkish Fed Hit Crypto
Oct 29, 2026/2 min read

Bitcoin ETFs Take In $286 Million in Two Days While Ether Funds Bleed Ahead of the Fed
Oct 28, 2026/2 min read

Bitcoin Falls Below $80,000 Over the Weekend as $810 Million in Positions Are Liquidated Before the Fed
Oct 26, 2026/2 min read