Binance says it suffered a cyber-attack that led to $6.3bn of cryptocurrency being stolen, which it describes as the largest cyber-attack in history. The company said on October 30 that it has frozen $3bn of the stolen funds. It also said it will cover all losses using its Secure Asset Fund for Users (SAFU) and company funds.
Binance's initial investigation suggested the attacker's entry point may have been a compromised laptop belonging to a Binance development and operations (DevOps) engineer. The company said this allegedly allowed the attacker to reach a service container and submit unauthorized withdrawal transactions. Binance has since revised that assessment and said its later investigation found additional points of breach.
The company said it has found no evidence that any wallet private keys were leaked. It has not yet given a definitive account of the attack and says it will publish a full technical post-mortem once the investigation is complete. Binance said it is working with law enforcement, blockchain intelligence firms, token issuers and other industry partners.
Three cryptocurrency analysis firms, TRM Labs, Elliptic and Chainalysis, attributed the attack with "high confidence" to TraderTraitor, a North Korean hacking group.