Binance has halted all user withdrawals following a devastating “complex attack” that drained approximately $6.3 billion from its hot wallets on October 29, 2026. The historic breach is the largest cryptocurrency theft on record. Despite the unprecedented scale, Binance co-CEOs Richard Teng and Yi He quickly reassured customers that all user losses will be fully covered by corporate reserves and the exchange’s Secure Asset Fund for Users (SAFU), with withdrawals expected to resume within 48 hours.

---

Internal Vulnerability Exploited

According to Binance’s initial investigation, the attack began through a compromised internal asset:

• The Entry Point: Cybercriminals gained initial access via a compromised DevOps engineer’s laptop, which allowed them to infiltrate an internal service container.
• The Mechanism: The hackers manipulated a newly integrated multi-signature framework on the platform. By executing pre-signed authorisations, they deployed an aggressive “sweeper contract” directly onto Binance’s hot wallets.
• The Velocity: Bypassing standard verification controls, the automated script extracted the bulk of the $6.3 billion within an astonishing 20-minute window.

While the compromised laptop provided the initial foothold, Binance’s security team noted that a deeper forensic probe has uncovered additional points of breach in the highly coordinated operation. To hinder investigators, the attackers used a programmatic self-destruct mechanism that deleted their deployment tools and technical tracers as the funds left the exchange.

---

Response and Recovery Status

Binance immediately mobilized external security partners and stablecoin issuers to contain the damage. Through rapid coordination, major asset issuers managed to freeze roughly $3 billion of the stolen funds on-chain, limiting the attacker’s ability to move nearly half of the stolen capital.

The exchange is currently working alongside global law enforcement agencies, including the FBI, to conduct a comprehensive forensic audit. While Binance’s native utility token (BNB) dipped 6% on the news, market analysts emphasize that the breach is an infrastructure security failure rather than a threat to the exchange’s solvency, as Binance maintains over $137 billion in total custody assets.