Binance pledges $6.34 billion to cover losses from laptop-borne breach

Binance says it has reserved more than $6.34 billion of its own funds to make users whole after a security breach that the exchange pegs at roughly $6.3 billion, according to a statement reported by The Block on Friday. Withdrawals are suspended; deposits remain open.

The exchange says it is holding about $5 billion of the committed sum in the same assets that were drained, and is buying the remaining roughly $1.3 billion through market and over-the-counter channels — a process it cautioned could run slow given thin liquidity and settlement delays. Binance did not name the affected tokens. Security firm Blockaid, flagging the incident earlier, said it was tracking billions in outflows from Binance hot wallets across Ethereum, Arbitrum and Avalanche.

Co-CEO Richard Teng attributed the attack to a compromised DevOps engineer's laptop, which he said gave an attacker access to a service container used to submit unauthorized withdrawals — not a leaked private key. Teng described a more involved chain than a single employee's permissions being abused, and said Binance has found no evidence of a wallet key compromise. "Your money is safe, and we're covering every loss," he wrote.

Separately, Binance says industry partners have frozen about $3 billion in assets, a sum not counted in its reserve. Tether CEO Paolo Ardoino said the company froze over $1.57 billion in USDT; Circle confirmed more than $800 million in USDC frozen; Ripple co-CEO Yi He said it froze roughly $200 million; and World Liberty Financial said it worked with BitGo and others to freeze about $27 million in stablecoins and $2 million of its own token.

Key facts

• Binance reserved $6.34 billion of company funds; it pegs the loss at $6.3 billion (The Block, citing Binance's statement, Oct. 30).
• ~$5 billion held in affected assets; ~$1.3 billion being bought via market/OTC (Binance statement, via The Block).
• Attack vector: a compromised DevOps laptop and service container; no key leak found (Co-CEO Richard Teng, via The Block).
• Partner freezes total ~$3 billion: $1.57B+ USDT (Tether's Ardoino), $800M+ USDC (Circle), ~$200M (Ripple's Yi He), ~$29M (World Liberty Financial).
• TRM Labs said elements resemble prior North Korea-linked incidents, including 2025's $1.5B Bybit breach; Binance has not attributed the attack.

The real-world read

The figures are Binance's own, and they're conveniently round: a $6.34 billion reserve against a $6.3 billion loss, with $5 billion supposedly already sitting in the exact assets stolen. That tidiness is a claim, not an audited fact — and the exchange won't say which tokens, which makes the "$5 billion already held" assertion hard to check. The frozen-funds tallies (Tether, Circle, Ripple) each tout their own quick action; useful, but it's interested parties quantifying their own helpfulness. TRM's North Korea comparison is a resemblance, not an attribution, and Binance pointedly hasn't endorsed it. Note too the gap: one tally of suspicious outflows ran to about $5.8 billion, below Binance's $6.3 billion loss figure — the final number isn't settled.

Not financial advice.

Sources

• The Block (reputable secondary), Oct. 30, 2026 — reported Binance's $6.34B reserve statement, Teng's breach account, partner freeze figures from Tether, Circle, Ripple and World Liberty Financial, Blockaid's outflow tracking, TRM Labs' North Korea comparison, and TD Cowen's custody-risk comment. The underlying Binance statement and Teng remarks are the exchange's own and should be read as self-reported.