Users will not bear the loss
Binance will fully cover the loss of stolen assets through the Secure Asset Fund for Users (SAFU) and company funds.
Security incident update
Protecting our users comes first.
Over the past 24 hours, our teams have worked around the clock in response to a serious security incident involving unauthorized withdrawals from a hot wallet.
$6.3BEstimated value of affected assetsUser funds are covered
$5B+Equivalent tokens already in placeUSDC · USDT · BTC · ETH · BNB
$3BAssets frozen on-chain so farRecovery work continues
Our response
Every action is focused on safety and recovery.
We have activated our incident response plan and are coordinating with partners across the ecosystem.
Withdrawal service is paused
Withdrawals are temporarily paused while we complete additional reviews, apply fixes, and verify system integrity. Deposits and unaffected platform services remain available.
Authorizations revoked
We revoked authorizations associated with affected addresses and added controls to prevent further unauthorized activity.
Cross-industry coordination
Law enforcement, blockchain intelligence firms, asset issuers, and industry partners are helping us trace and freeze affected assets.
What we know
A transparent investigation is underway.
Our security and technology teams are working with internal and external experts to establish the full attack path.
01
Initial detection
At approximately 04:05 (UTC+8) on October 30, 2026, we detected unauthorized withdrawals from a Binance hot wallet, with an estimated value of $6.3 billion in tokens.
Incident contained
02
Multiple entry points identified
Early findings pointed to a compromised laptop. Our ongoing review has since identified additional potential points of compromise.
Analysis in progress
03
No evidence of wallet private-key exposure
At this stage, we have found no evidence that wallet private keys were exposed. The investigation continues, and we will update this assessment as facts are verified.
Current assessment
04
Next technical report
We expect to publish further verified technical findings within approximately 48 hours, provided disclosure does not compromise the ongoing investigation.
Target · within 48 hours
What comes next
Four workstreams, updated as they move.
We will continue sharing verified progress through official channels over the coming days.
01 / SERVICE
Restore withdrawals safely
Withdrawals will return in stages by asset once security checks are complete. Current target: approximately 34 hours.
02 / TRANSPARENCY
Publish proof of reserves
An initial proof-of-reserves snapshot is planned within 12 hours, with results targeted by November 2, 2026.
03 / RECOVERY
Trace and recover frozen funds
We are working with investigators, issuers, intelligence firms, and other exchanges to pursue every recovery path.
04 / LEARNING
Release a full incident review
A detailed technical report will cover what happened, what we learned, and the additional protections being implemented.
Full statement
A commitment to our community.
We understand the seriousness of this incident and the concern it creates across the community. We are treating it as our highest priority. Our work is focused on the security investigation, infrastructure upgrades, preventing further loss, and recovering funds.
“Binance will bear the financial loss from this theft. Our users will not.”— He Yi and Richard Teng, Co-CEOs
How we are protecting users
We have committed the resources needed to make users whole. More than $6.34 billion in company funds have been prepared. More than $5 billion equivalent in USDC, USDT, BTC, ETH, BNB, and other assets are already in place, replenishing approximately 80% of the affected funds. We are purchasing the remaining tokens through market and over-the-counter channels and will share further progress through official channels.
What we are doing now
- Revoking authorizations linked to affected addresses and adding controls against unauthorized activity.
- Working with law enforcement, blockchain intelligence companies, asset issuers, and industry partners to trace and freeze affected assets. Approximately $3 billion has been frozen on-chain so far.
- Strengthening security checks across every part of the affected infrastructure.
- Continuing the work required to safely restore withdrawal service.
Our commitment
We will take responsibility for this incident, strengthen our security infrastructure, and keep users informed. For verified updates, follow official Binance channels or contact official customer support directly. Please do not trust third-party links or requests for your credentials.