Key Takeaways
- Binance estimates the incident's total impact at approximately $6.3 billion and says around $3 billion in affected assets have been frozen on-chain.
- Binance's preliminary investigation points to a potentially compromised DevOps engineer's laptop, while the company says it found no evidence of wallet private keys being compromised.
- Polymarket confirmed a separate third-party provider compromise on October 29. No official evidence reviewed establishes a connection between the incidents.
Binance Reports Major Security Incident
Binance has disclosed a major security incident, estimating its total impact at approximately $6.3 billion. The exchange says around $3 billion in affected assets have been frozen on-chain, while its investigation continues. It has also assured users that their funds remain safe.
What Binance Has Disclosed
In its October 30 security update, Binance said its preliminary investigation points to the possible compromise of a laptop belonging to a DevOps engineer. The attacker allegedly used access to a service container to submit an unauthorized withdrawal transaction.
The company said it had found no evidence that wallet private keys were compromised. Binance also stated that it would cover losses through its Secure Asset Fund for Users, known as SAFU, and its own corporate funds. It plans to publish an updated Proof of Reserves after remediation and a technical postmortem once the investigation is complete.
Importantly, the $6.3 billion figure represents Binance's estimated total impact. It should not be reported as a confirmed amount of cryptocurrency stolen. The company separately reported that approximately $3 billion in affected assets had been frozen on-chain.
Polymarket Confirms Separate Provider Breach
Polymarket's official status page recorded another security incident on October 29. The platform said one of its third-party providers had been compromised, prompting a temporary trading halt.
Polymarket later confirmed that the issue affecting its international platform had been fixed. It referred the matter to relevant law enforcement and said affected users would be made whole. Its official notice did not confirm the $2.7 million loss estimate circulating on social media.
TwikUp's Perspective
These incidents show that cryptocurrency security depends on more than blockchain technology. Employee devices, external service providers and internal access controls can all create vulnerabilities. Users should look for transparent technical findings, independently verifiable recovery updates and clear explanations of account protections.
There is no official evidence in the sources reviewed connecting the Binance and Polymarket incidents. The separate claim about information belonging to more than 40,000 U.S. Homeland Security personnel also remains unverified by an official agency statement.