Binance has shared the first findings of its investigation into the security incident. The attacker reportedly gained access through a DevOps engineer's laptop, reached a service container and used it to submit unauthorized withdrawal transactions. The exchange said it found no evidence that any wallet private key was leaked.

Binance now estimates the total impact at around $6.3B, with about $3B frozen on-chain together with blockchain partners.

Deposits and withdrawals remain suspended while security checks continue, and the affected address authorization has been revoked. Binance said all losses will be covered by the SAFU fund and company funds, and that it will publish an updated Proof of Reserves after remediation. A full technical post-mortem is promised once the facts are verified.