Binance puts the cost of its security incident at $6.3 billion and says it has frozen about $3 billion

Binance says the total damage from its “security incident” is about $6.3 billion. For high-risk operators and their PSPs, the detail that matters is not just the size of the hit, but how the exchange plans to cover it: about $3 billion in stolen assets has been frozen, and the rest is set to be covered through its reserve SAFU fund and company funds.

1. According to Binance’s press service on X, the preliminary investigation points to a compromised laptop belonging to one of its DevOps engineers. That breach gave attackers access to service systems and allowed them to move funds.
2. Binance said it has found no evidence that private wallet keys were leaked. That distinction matters operationally: the incident, as described, sits in the infrastructure layer rather than in a confirmed wallet-key compromise.
3. The exchange says it has frozen about $3 billion in stolen assets. In parallel, it had already told customers it would reimburse the full damage, and now plans to use the reserve “Secure Asset Fund for Users” (SAFU) and its own funds to cover the remaining losses.
4. The announcement was published as an update to the incident, which Binance itself framed as a security issue rather than a full technical post-mortem. For PSPs and banking partners, the practical takeaway is straightforward: even when wallet keys are not exposed, access to internal systems can still produce a very large loss event.