Overview of the Incident

On Thursday evening, Binance, one of the leading cryptocurrency exchanges, announced it was investigating a significant security issue. As the situation unfolded, the estimated impact of the breach escalated to over $6 billion (£4.47 billion).

Timeline of Events

Thursday

• 21:29 GMT: Binance begins its investigation into a potential security breach, assuring users that their funds remain secure.
• 22:33: The exchange indicates that its security team is conducting extensive checks and announces that withdrawals will be paused until the issue is fully resolved.
• 23:06: Trading on Binance Alpha is suspended temporarily as a precautionary measure.
• 23:22: Binance reports freezing $2.54 billion (£1.89 billion) in assets, suggesting that this figure may rise as investigations continue in collaboration with law enforcement and blockchain intelligence partners.

Friday

• 00:13: Binance commits to covering all losses, announcing that both deposits and withdrawals are temporarily halted.
• 00:52: The amount of frozen assets is revised to approximately $3 billion (£2.24 billion).
• 02:25: Initial findings from Binance indicate that the breach may have originated from a compromised DevOps engineer’s laptop, which allegedly permitted unauthorized transactions. The estimated loss is now around $6.3 billion (£4.7 billion).
• 07:37: Co-CEO Richard Teng reassures users, stating, “Your money is safe and we’re covering every loss,” and emphasizes that the breach involved a complex attack methodology rather than a simple exploit. No individual has yet been assigned responsibility for the incident.
• 08:47: The exchange reports they have identified additional points of vulnerability beyond the compromised laptop, and they estimate they can resume withdrawal services within 45 hours.

Moving Forward

Binance has positioned itself to handle the aftermath of this significant security breach by enhancing its security protocols and maintaining transparent communication with its user base. The commitment to cover all losses underscores the exchange’s efforts to rebuild trust among users and stakeholders.