Binance said attackers accessed an internal wallet-signing service and moved funds outside its normal withdrawal process in a security incident affecting $6.3 billion in assets across 10 blockchains. Co-CEO Richard Teng said the attack affected Binance’s own hot wallet, while most customer assets were held in offline cold storage. Binance said it would keep some technical details confidential to prevent further attacks and did not answer questions about its wallet balances or safeguards.
CertiK analyst Jonathan Riss said public blockchain records show fund movements but cannot reveal the internal controls that authorized them. He said a wallet’s balance at one moment does not show how much attackers with valid signatures could access over time, making comparisons with other exchanges difficult from the outside.
