Key takeaways
- Binance estimates the total impact of its security breach at about $6.3B and says about $3B is frozen.
- Tether and Circle freeze stablecoins tied to the suspected attacker, while Aave freezes lending markets to block borrowing.
- Binance says its initial investigation suggests a compromised engineer's laptop, with no evidence of a wallet private key leak.
Binance confirmed a security breach it estimates at about $6.3B in total impact, and said it worked with blockchain partners to freeze about $3B in affected assets onchain. Tether Chief Executive Officer (CEO) Paolo Ardoino said Tether froze more than 1.567B Tether (USDT), and Circle also froze USD Coin (USDC) tied to the suspected attacker.
Binance suspended deposits and withdrawals while it conducts security checks, freezes funds and works with law enforcement. The $6.3B estimate is higher than earlier figures, which ranged from $2.7B to $5.8B, and bitcoin dipped as news of the hack circulated.
What Binance Says Happened
In a post on X, Binance said its initial investigation suggests the incident may involve a compromised development operations (DevOps) engineer's laptop, which may have allowed an attacker to access a service container and submit unauthorized withdrawal transactions. Binance said it found no evidence of a wallet private key leak.
Those findings are preliminary, and Binance has promised a fuller account:
"We will share a detailed technical post-mortem once the investigation is complete and the facts are verified."
Binance has not released a timeline for that post-mortem. It also has not identified the attackers, saying it is working with law enforcement to establish their identities.
The Freeze and the Bill
Circle's Jeremy Allaire said Circle froze more than 800M USDC associated with the incident. Aave froze lending markets to block the suspected attacker from borrowing against the stolen funds. Changpeng Zhao, the former CEO of Binance, credited Tether and Circle for the quick freeze and addressed the losses on X:
"I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered."
Binance said it will cover all losses from its Secure Asset Fund for Users (SAFU) and company funds, and that user funds are safe. Co-founder Yi He, the Chief Customer Service Officer of Binance, said Binance will cover all hacking losses. Binance also pledged to publish an updated Proof of Reserves once remediation is complete.
Why It Matters
A breach Binance estimates at about $6.3B demolishes, once again, the narrative that custodians are better than hardware wallets. Expect the freeze of about $3B to be highlighted as the case for third-party custody, because it looks like protection when the funds are stolen. We think it proves the opposite: if Tether and Circle can freeze funds this quickly, governments can pressure those same third parties to censor people in the name of some manufactured narrative. Trusted third parties are always security holes, while Bitcoin held in self-custody leaves you with your keys, your exit and no gatekeeper to ask for permission.
