Binance first linked the security incident to a compromised DevOps engineer laptop, but its latest investigation update says further points of breach have since been found. The exchange called it a complex attack and said it is working with law enforcement while the facts are still being gathered.

The incident has an estimated total impact of about $6.3 billion. Outflows stopped once withdrawals were paused, and Binance and its partners have frozen around $3 billion of the affected assets so far, with Tether, Circle and Ripple among those freezing funds.

Binance says all losses will be covered from the SAFU fund and company money, and withdrawals remain on track to resume in about 45 hours.

Deposits are unaffected. The exchange has also promised an updated Proof of Reserves once the incident is resolved, which will be the first full public check on its balances after the attack.