Binance Says Hacked Employee Computer Started a Broader Attack

Binance said Friday it has found no evidence that wallet private keys were exposed in the theft, while saying the intrusion began with a compromised employee computer.

Customer-service representative sisi said on social media that the attack could not be completed through access to one device or one employee alone. The investigation has identified important leads, and Binance has activated risk controls and emergency response procedures, she said.

Binance has frozen about $3 billion in affected assets on-chain and is working with law enforcement and blockchain intelligence groups to trace the funds, sisi said. The company said its SAFU fund and company funds will cover all losses, so customers will not bear them.

Deposits remain open. Withdrawals were paused as a precaution and are expected to resume within 48 hours; the timing will be set by an official announcement.

Binance has not assigned responsibility to any individual. It plans to release more details and security upgrades after the investigation and review are complete.