Following a security incident with an estimated impact of approximately $6.3 billion, Binance has announced that it aims to reinstate withdrawal services within 48 hours. The exchange affirmed that deposit operations are continuing normally, while security updates are ongoing for withdrawal services and related addresses.
In its initial response, Binance temporarily halted both deposit and withdrawal functions citing security reviews. The latest update clarifies that deposits are fully operational, while the 48-hour timeline for reinitiating withdrawals reflects the company’s current projections rather than a fixed reopening time.
Investigation Focuses on Potential Breach Entry Point
Initial analysis by Binance suggests that the breach might be linked to the compromise of a DevOps engineer’s laptop. It appears the perpetrator accessed a service container via this laptop to initiate unauthorized withdrawals. Importantly, there is no evidence so far indicating any compromise of wallet private keys, according to the exchange.
The latest disclosures indicate that the incident arose from multiple factors. The security team is meticulously investigating all stages of the attack, which are believed to have been facilitated through the compromised device. A detailed technical report, providing insights into the incident’s root cause, will be released upon completion of the investigation and verification of findings.
$3 Billion Worth of Assets Frozen
Binance disclosed that while the incident’s estimated total impact is $6.3 billion, collaborative efforts with blockchain partners have successfully frozen approximately $3 billion on the blockchain. The exchange reassured users that their funds remain secure, with any losses to be covered by the SAFU fund and Binance’s resources.
As part of the preventive actions, authorization linked to the affected address has been revoked. Efforts are underway, in collaboration with law enforcement and blockchain intelligence partners, to trace and recover the compromised funds. Moreover, Binance is actively working to identify those responsible for the attack.
The exchange announced it will issue an updated proof-of-reserves report once the corrective measures are completed. Users have been advised to follow updates through official Binance channels and to direct their inquiries to customer support.
The most tangible restriction for users at present is the continued suspension of withdrawals. While $3 billion has been frozen, this does not imply successful recovery of the assets. The resolution of this incident hinges on both the restoration of withdrawal services and the retrieval of the frozen assets, as well as fulfilling the compensation commitment publicized by Binance.
