Binance estimates that unauthorized withdrawals from its hot wallets on October 29 caused about $6.3 billion in token-asset losses. In an update published the following day, the exchange said it had frozen some funds and was still investigating access to its infrastructure.
What Binance announced
Binance says the withdrawals began at about 20:05 UTC on October 29. The company says its hot wallets were compromised and estimates the stolen assets at about $6.3 billion. It says it will cover losses related to the incident through its user protection fund and corporate treasury.
Binance reported that about $3 billion in assets had been frozen on-chain at the time of its October 30 update. Both the loss and recovery figures are company estimates; the investigation and recovery work are continuing.
An initial explanation has changed
Binance’s first public hypothesis involved a compromised DevOps laptop that may have enabled access to a service container and unauthorized withdrawal transactions. In its second update, the company said its investigation had uncovered additional breach points.
The full technical sequence has not been made public. Binance says it has found no evidence so far that wallet private keys were leaked. That statement belongs to the company and could change as the investigation progresses.
What customers should check
Customers should follow verified Binance announcements for withdrawal status and investigation updates. Do not open links in unsolicited messages promising refunds, fund recovery or priority support.
A legitimate service should not ask for a wallet recovery phrase, password or one-time code to “release” funds. If in doubt, open the official app or website yourself and check the address before taking any action.
What the figures do not yet establish
The estimates of frozen and lost funds are not a final accounting. Blockchain analysis firms have attributed the incident to a North Korean group, but that attribution is based on their own indicators and remains separate from facts confirmed by Binance. The technical post-mortem announced by the company is still pending.
The connection to Soclyde
A password vault can help a team protect account credentials and avoid reusing them. Soclyde keeps passwords encrypted on the user’s devices, without a centralized cloud vault operated by Soclyde. It cannot protect an exchange’s withdrawal infrastructure or hot wallets. For access you manage, read our guide to local and cloud password storage.
Key points
Binance attributes at least $6.3 billion in losses to unauthorized withdrawals on October 29 and says its investigation is ongoing. The company says investigators found multiple breach points and that it will cover losses. Customers should verify updates through official channels and ignore unsolicited recovery offers.
