Monday 2 November
Global

Your region, kept on this device.

Binance reports record $6.3 billion crypto theft, possibly via compromised DevOps engineer laptop

Severity
Critical
Sources
3

Binance's early findings suggest a compromised DevOps engineer laptop gave access to a service container used to submit unauthorised withdrawals, with no evidence of wallet private key leakage. Binance says investigators have found additional breach points. TRM Labs estimates about $6.36 billion left wallets across ten blockchains, mostly within about 20 minutes, and TRM Labs and Chainalysis attribute the theft to TraderTraitor. Binance says about $3 billion is frozen, while Elliptic says about $3.3 billion was converted into unfreezable assets. No CVEs were given. Binance.US was not affected. Users should rely on official channels, never share authentication codes, and treat recovery offers as likely scams.

For security analysts · Written by AI from 3 sources · Wrong?

What to do

  1. If you have an account with the company, change that password, and anywhere you used the same one.
  2. Turn on two-step sign-in where you can.
  3. Expect scam emails and texts that mention the breach: contact the company yourself, not through links.

General advice for this kind of story

Full story timeline · 3 updates

  1. Fri 30 OctoberBinance hit by $6.3 billion theft in what could be the biggest crypto heist on recordHelp Net Security
  2. Binance hit by largest-ever crypto theft, with $6.3 billion stolenMalwarebytes Labs
  3. Hackers steal $6.3 billion from Binance in record crypto heistArs Technica (Security)

Who reported · 3 outlets

Help Net SecurityMalwarebytes LabsArs Technica (Security)

Report a problem