On a Friday that the crypto world will not soon forget, the largest exchange in its industry told the people who trust it with their money that it had frozen roughly $4.2 billion, in the midst of a security breach whose estimated reach is about $8.9 billion. The company blames a single compromised laptop belonging to one engineer, a small human opening through which a thief could reach the machinery of a vast financial house. Its promises are the familiar ones of a steward answering for what was lost: that customers are safe, that losses will be covered, and that the truth will follow in a rep
Binance Freezes $4.2B in Assets After Attack Linked to Compromised Engineer Laptop
A single engineer's laptop, and $8.9 billion in estimated impact
Mark
Start with the basics. What is Binance actually saying happened?
Mimi
That a DevOps engineer's laptop was compromised, and the attacker used it to reach a service container and submit withdrawals nobody authorised. Binance says it found no sign that any wallet private key leaked.
Mark
And the money? I see two numbers, $8.9 billion and $4.2 billion.
Mimi
The $8.9 billion is the estimated total impact. The $4.2 billion is what Binance says it has frozen. The two are not the same thing.
Luke
Worth pausing there. The source doesn't explain how the $8.9 billion was estimated or who produced it, so I'd treat it as an estimate, not a settled loss figure.
Mark
Binance also says user funds are completely safe. Does that settle it?
Mimi
It's a firm promise. The exchange says it will cover all losses from its SAFU fund and company funds. Deposits and withdrawals are paused in the meantime.
Luke
Right, but that is Binance's assurance, not something independently verified. Paused withdrawals also mean users can't test it for themselves. The updated Proof of Reserves is the thing that would back it up, and it hasn't been published yet.
Mark
Chainalysis called it potentially the largest crypto heist ever. How firm is that?
Luke
The wording is conditional: "could be." And the laptop explanation is an initial finding. Zhao said it looked like a hack, which isn't a confirmation.
Mimi
The market took it seriously anyway. Bitcoin and Ethereum each slipped about two per cent, BNB fell more than eight per cent, and Coinbase and Strategy shares dropped too.
Mark
So what do we watch?
Mimi
The post-mortem, the Proof of Reserves, and whether law enforcement tracks down the attackers and the stolen assets.
Der Puls
- Binance has frozen about $4.2 billion and paused all deposits and withdrawals while an estimated $8.9 billion impact ripples through its systems.
- A single compromised DevOps laptop reportedly gave an attacker a route into a service container and the power to submit unauthorised withdrawals.
- Bitcoin slid to a six-week low and Ethereum to a two-month low, while BNB dropped more than eight per cent and Coinbase and Strategy shares fell in US trading.
- Binance has promised to cover every loss from its SAFU fund and company money, while bringing in law enforcement and blockchain analysts to trace the stolen assets.
- The next moves are an updated Proof of Reserves, a detailed technical post-mortem, and any law enforcement results that could confirm the laptop account or name the attackers.
On a Friday that the crypto world will not soon forget, the largest exchange in its industry told the people who trust it with their money that it had frozen roughly $4.2 billion, in the midst of a security breach whose estimated reach is about $8.9 billion. The company blames a single compromised laptop belonging to one engineer, a small human opening through which a thief could reach the machinery of a vast financial house. Its promises are the familiar ones of a steward answering for what was lost: that customers are safe, that losses will be covered, and that the truth will follow in a report yet to come. Whether that account holds will be settled not by the announcement but by the accounting still to be done.
On Friday, the world's largest cryptocurrency exchange told its customers it had frozen roughly $4.2 billion in assets. Binance was responding to a security incident with an estimated total impact of around $8.9 billion, and the analytics firm Chainalysis has suggested it could be the largest crypto heist on record.
In a post on X, Binance described its first findings. An initial investigation pointed to a compromised laptop belonging to a DevOps engineer, which let an attacker reach a service container and submit unauthorised withdrawals. The company said it had found no evidence that any wallet private key had leaked, and that its teams were working around the clock. It revoked the compromised address, brought in law enforcement and blockchain analysts, and temporarily suspended all deposits and withdrawals.
The message to users was direct: their funds were completely safe, and every loss would be covered by the SAFU fund and company money. Binance also promised an updated Proof of Reserves and a detailed technical post-mortem once the investigation concludes.
Markets reacted quickly. Bitcoin fell about two per cent to a six-week low, Ethereum to a two-month low, and BNB dropped more than eight per cent over 24 hours. Coinbase shares slid 4.8 per cent in US trading, and bitcoin buyer Strategy fell nearly six per cent.
Changpeng Zhao, Binance's co-founder, who no longer runs the company, said on X that the incident "looked like a hack." The scale of the platform explains the attention: more than 335 million registered users and about $227 billion in assets under custody.
What comes next rests largely with Binance. The coming reports will show whether the laptop explanation holds, and law enforcement results may reveal who was behind the attack and where the money went.
On Friday, the world's largest cryptocurrency exchange told its customers it had frozen roughly $4.2 billion in assets. Binance said it was responding to a security incident whose estimated total impact is around $8.9 billion. Analytics firm Chainalysis has said the episode could turn out to be the largest crypto heist ever recorded.
In a post on X, Binance gave its first account of what happened. An initial investigation, it said, points to a compromised laptop belonging to a DevOps engineer. That laptop allowed an attacker to reach a service container and submit unauthorised withdrawal transactions. The company said it has found no evidence that any wallet private key was leaked. It said its teams were working around the clock to resolve the matter safely and thoroughly.
Binance said it has revoked the permissions of the compromised address and brought in law enforcement and blockchain analysts to identify the attackers and trace the stolen assets. As an immediate precaution, it temporarily suspended all deposits and withdrawals while security checks are carried out.
The company's message to users was direct. Earlier on Friday a spokesperson said user funds were completely safe, and the exchange confirmed it would cover all losses using its SAFU fund and company money. Binance also promised two follow-ups once the investigation is finished: an updated Proof of Reserves and a detailed technical post-mortem.
Markets reacted quickly. In early Asian trading on Friday, bitcoin fell about two per cent to a six-week low of $110,385 (US$77,646), and Ethereum dropped about two per cent to a two-month low of $3182.75 (US$2238.76). BNB, the token that began as Binance Coin and can be used to pay fees on the platform, was down more than eight per cent over 24 hours at $986 (US$694), according to the market aggregator CoinGecko. In extended US trading, shares in exchange operator Coinbase Global slid 4.8 per cent, and shares in bitcoin buyer Strategy fell nearly six per cent.
Changpeng Zhao, Binance's co-founder, no longer runs the company, but he commented publicly on X earlier in the day, saying the incident "looked like a hack." Zhao founded Binance in 2017. In 2023 he pleaded guilty to a felony over his failure to prevent money laundering on the platform and stepped down as chief executive. US President Donald Trump pardoned him in 2025.
The scale of the platform explains the attention. Binance has more than 335 million registered users worldwide. Its 2024 annual report put assets under custody at about $227 billion (US$160 billion).
What comes next is largely in Binance's hands. The updated Proof of Reserves and the technical post-mortem will show whether the laptop explanation holds up, and any results from law enforcement and the blockchain analysts on who was behind the attack and where the stolen assets went will follow.
Bemerkenswerte Zitate
User funds are completely safe, and the exchange will cover all losses using its SAFU fund and company funds.— Binance spokesperson
The incident looked like a hack.— Changpeng Zhao, Binance co-founder, on X
Möchten Sie die ganze Geschichte?
Das Original lesen bei Nine.com.au ↗
Politics & Governance