Binance, the world's largest cryptocurrency exchange, on Friday, 30 October suspended all deposits and withdrawals after disclosing a security incident with an estimated financial impact of approximately $6.3 billion. The exchange said its initial investigation points to a compromised DevOps engineer's laptop as the likely entry point, which reportedly allowed an attacker to access a service container and submit unauthorised withdrawal transactions.

What Happened

According to Binance, the attacker exploited access gained through the engineer's compromised device to infiltrate a service container — a key part of the exchange's operational infrastructure. The breach enabled the submission of unauthorised withdrawal transactions, though the exchange was quick to clarify the scope of the damage. 'We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified,' Binance said in an official statement.

As an immediate precaution, Binance said it temporarily suspended deposits and withdrawals while security checks are completed. It also revoked the affected address authorisation and engaged law enforcement and blockchain intelligence partners to trace and recover funds.

Funds Frozen and Recovery Efforts

Binance said it has been working with blockchain partners to freeze affected assets, with approximately $3 billion frozen on-chain so far — nearly half the estimated total exposure. The exchange confirmed it will cover all losses through its Secure Asset Fund for Users (SAFU) and company funds, stating that user funds remain safe.

The exchange further said it will publish an updated 'Proof of Reserves' once remediation is complete, a step designed to rebuild user confidence and provide on-chain transparency. Teams are reportedly working around the clock to resolve the issue. 'We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice,' the exchange added.

Market Impact: Bitcoin Slides Below $77,000

Bitcoin slumped below $77,000 following the disclosure, touching its lowest level since September. Other tokens also sold off sharply as fears mounted that this breach could surpass the $1.5 billion Bybit hack of February 2025 to become the largest crypto heist on record. If the full $6.3 billion exposure is confirmed unrecovered, it would represent an unprecedented scale of loss in the history of digital assets.

Context and What It Means for Crypto Security

This incident follows a troubling pattern of high-value exchange breaches that have periodically shaken confidence in centralised crypto platforms. The Bybit hack earlier in 2025 was itself considered a watershed moment for exchange security. Notably, the attack vector here — a compromised employee device rather than a protocol flaw — underscores the persistent threat of insider-adjacent risks and social engineering in the crypto industry. Centralised exchanges, despite their liquidity advantages, continue to present concentrated custodial risk that decentralised alternatives have long cited as a structural vulnerability.

With investigations ongoing and law enforcement engaged, the coming days will be critical in determining how much of the frozen $3 billion can be permanently secured and whether further exposure surfaces.