This incident underscores the critical need for robust cybersecurity measures and highlights the potential vulnerabilities in digital asset exchanges. The post Binance says compromised DevOps engineer’s laptop may have enabled…
Approximately $3 billion in affected assets have been frozen on-chain, while Binance has committed to covering all losses.
by
John Chen
Fri 30 Oct 2026 · 00:33 EDT
·
2 min read
In Web3
Share
Add us on Google
Binance said its preliminary investigation pointed to a compromised laptop belonging to a DevOps engineer as the possible entry point for Friday’s security breach, which prompted the exchange to suspend deposits and withdrawals.
Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private… pic.twitter.com/5REncAI77y
— Binance (@binance) October 30, 2026
The attacker allegedly used the access to enter a service container and initiate unauthorized withdrawal transactions, although Binance found no evidence that wallet private keys were exposed, the exchange said in its latest update on X.
Binance estimated the incident’s impact at approximately $6.3 billion and said it had frozen about $3 billion in affected assets on-chain. The exchange has pledged to cover all losses through its SAFU fund and corporate resources.
The attacker behind the suspected Binance breach still holds approximately $3 billion in crypto across multiple blockchains, according to data tracked by Nansen.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
We respect your privacy. Unsubscribe anytime.
Nansen identified around 442,000 ETH across exploiter-linked wallets, while tracking 18,270 BTC worth approximately $1.48 billion transferred from a Binance hot wallet and split among 19 separate addresses.
The attacker also reportedly moved about 233 million XRP worth about $297 million and used DeFi protocols to borrow ETH against USDT deposits and swap hundreds of millions of dollars in altcoins. Around $2.7 billion in assets has reportedly been frozen, but substantial holdings remain across Ethereum, Bitcoin, TRON and Solana.
Update (Oct. 30 2026): This article has been updated to include Nansen’s report.
Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.
Scammers posing as Wells Fargo's fraud department took more than $7,500 from an Orlando, Florida couple after getting them to read back…
Several blockchain investigators say North Korea’s Tradertraitor (a sub-unit of the larger Lazarus/DPRK ecosystem) likely carried out the roughly $6.3 billion Binance…
Bitcoin slipped below $80,000 in early October 29 trading as markets digested the Federal Reserve’s decision to leave rates unchanged and the…
Something potentially historic could happen to Bitcoin by January 1, 2027. Elon Musk’s Grok AI predicts that in an intentionally extreme, over-the-top…
