Binance said on October 30 that it had found additional security breaches while investigating a cryptocurrency theft it estimates at $6.3 billion. The global exchange kept withdrawals suspended as co-chief executive Richard Teng outlined efforts to rebuild and test its systems, according to CoinDesk.
The company’s initial October 30 notice pointed to a potentially compromised DevOps engineer’s laptop. Binance said this may have enabled access to a service container and unauthorized withdrawals. It reported no evidence of leaked wallet private keys and said a detailed technical account would follow verified findings.
In a later video statement reported by CoinDesk, Teng said investigators had identified further entry points but had not established the complete sequence of events. He said the review covered cloud infrastructure, employee devices, private-key management and transaction signing. The laptop explanation therefore remains preliminary.
Binance said approximately $3 billion in affected assets had been frozen with blockchain partners. The Block reported that the exchange had reserved more than $6.34 billion of company funds to cover losses, including about $5 billion already held in the affected tokens. It was purchasing the remaining assets. These are company commitments, not confirmation that all stolen funds have been recovered.
Independent blockchain investigator Crystal Intelligence said its snapshot at 22:30 UTC on October 29 traced $5.14 billion leaving Binance-linked wallets in 97 transactions. Its analysis covered several networks, including Bitcoin and Ethereum. Crystal said the difference from Binance’s estimate reflected funds it had not yet traced, and cautioned that the totals remained provisional.
Teng said Binance hoped to restore withdrawals by Sunday, November 1, according to CoinDesk. He also outlined plans for a full proof-of-reserves report on Monday after an initial update. The company said it was working with law enforcement and blockchain specialists to trace assets, while the withdrawal restart remained a target rather than a confirmed reopening.
Comments