Binance Probe Points to DevOps Laptop in Security Incident

Binance's preliminary investigation into a security incident points to a possible compromise of a DevOps engineer's laptop, which may have let an attacker reach service containers and submit unauthorized withdrawal transactions.

The exchange said investigators have found no evidence that wallet private keys were stolen. The attack method remains under investigation, and Binance plans to publish a technical report after the probe is complete. It has not released a full breakdown of the affected assets.

Binance said customer funds remain safe and it will cover all losses from the incident through its Secure Asset Fund for Users, known as SAFU, and company funds. SAFU is a reserve Binance established to protect users in extreme situations. The exchange also temporarily suspended deposits and withdrawals during security checks and revoked permissions for affected addresses.

Binance is working with law enforcement and blockchain intelligence firms to trace the funds and pursue recovery. It plans to republish its proof of reserves after completing asset replenishment and other remedial work.