Binance Says It Will Cover $6.3 Billion Hack Losses as Investigation Uncovers More Breach Points

Binance security incident investigation, with Richard Teng addressing customer losses, frozen cryptocurrency funds and withdrawal system security.

Binance says it will cover all customer losses following a security incident estimated to have involved $6.3 billion in stolen funds, as the cryptocurrency exchange continues investigating how attackers gained access to its systems. The company has also identified additional points of breach beyond the compromised laptop initially linked to the incident.

Binance co-CEO Richard Teng said the exchange had taken steps to secure its withdrawal infrastructure, involve law enforcement and work with blockchain intelligence partners to trace and recover the stolen assets. He also reiterated that customer funds remained safe and that the company would use its Secure Asset Fund for Users (SAFU), alongside additional corporate funds, to cover the losses.

Binance Expands Security Investigation

In a post on X, Teng said initial findings indicated that an attacker may have entered Binance's systems through a DevOps engineer's compromised laptop. That access allegedly allowed the attacker to reach a service container and submit unauthorized withdrawal requests.

However, Teng cautioned that the incident was more complex than a breach involving a single employee's permissions or an isolated action.

“To be clear: the attacker did not simply use one engineer’s permissions, and this was not a single ‘one-click’ action,” Teng said. “It involved a more complex attack process. Our investigation has not attributed responsibility to any individual.”

Binance later disclosed that investigators had discovered “additional points of breach.” The exchange did not publicly detail those additional entry points, leaving questions about the full scope of the security failure unresolved.

Withdrawals Suspended as Binance Works to Recover Funds

Following the incident, Binance temporarily suspended withdrawals while carrying out a comprehensive security overhaul of its withdrawal service and associated addresses. The exchange also revoked authorizations for affected addresses as part of its response.

The company has invited law enforcement agencies and on-chain intelligence firms to assist with tracking the stolen assets and pursuing their recovery. Teng said investigators had found no evidence that private keys had been leaked.

According to Teng, approximately $3 billion of the estimated $6.3 billion in stolen funds had been frozen on-chain with help from blockchain partners. The reported recovery effort represents a substantial portion of the affected funds, although the exchange's investigation remains ongoing.

Teng maintained that Binance customers would not bear the losses. The exchange plans to use its SAFU fund and additional company resources to cover any shortfall, according to his statement.

Community Reactions Split Over Binance's Response

Reactions on X were mixed. Some users praised Teng's explanation and the exchange's response, while others remained skeptical about Binance's security practices and leadership.

The NFT account Chill Pill, which has nearly 100,000 followers, said it “wouldn’t trust Binance” at this point. Crypto watchdog MASTR also criticized the exchange's handling of the incident and suggested that selling additional assets to reimburse users could put pressure on the broader cryptocurrency market.

Former X head of product Nikita Bier separately criticized Binance co-founder Changpeng Zhao, questioning his response to the incident and the exchange's longstanding “funds are SAFU” message.

Bitcoin and Ethereum Face Liquidation Pressure

The security incident also coincided with significant pressure across cryptocurrency markets. Bitcoin briefly fell to $76,300, with nearly $479 million in positions liquidated, according to the source report.

Ethereum recorded a further $363 million in liquidations. The figures highlight the market disruption accompanying the incident, although the reported liquidations alone do not establish that the security breach was the sole cause of the price movements.

Binance's investigation and asset recovery efforts remain central to its response. The exchange has pledged to cover customer losses, while the discovery of additional breach points indicates that investigators are still working to establish how the attack unfolded.

source: cryptopotato

Writer: Ethan Collins
Crypto Journalist
Ethan Collins reports on developments across the cryptocurrency and blockchain sector. His work covers market movements, protocol updates, regulatory changes, and emerging trends in digital assets.
He focuses on presenting complex topics in a clear and accessible manner for a broad readership.