Binance Faces Multi-Billion Dollar Breach via Compromised DevOps Laptop

The attack targeted hot wallets—online-connected accounts used for rapid trading—draining a diverse portfolio including $1.77 billion in Tether, $1.44 billion in Bitcoin, and $1.01 billion in Ethereum. In response, industry partners including Tether and Circle Group moved rapidly to freeze nearly $1.8 billion in assets. By late Thursday, Binance confirmed that roughly $3 billion had been successfully secured, with the exchange pledging to cover all remaining losses using its Secure Asset Fund for Users (SAFU) and corporate reserves.

While former CEO Changpeng Zhao expressed confidence that user funds would remain protected, the platform-wide suspension of withdrawals underscored the severity of the intrusion. Binance investigators identified that the attacker gained access to a service container through a single compromised workstation, allowing for unauthorized transaction submissions. Although deposits were allowed to resume by early Friday, the exchange maintained a strict freeze on withdrawals as it completes a comprehensive security overhaul, with operations expected to normalize within 48 hours.