MCF

An update on the security incident.

I want to speak to you directly about what happened. Bottom line - your money is safe, and we're covering every loss. Our initial investigation suggests this security incident may have started with a compromised DevOps engineer's laptop. That gave an attacker access to a service container, where they submitted unauthorized withdrawal transactions. To be clear: the attacker did not simply use one engineer's permissions, and this was not a single "one-click" action. It involved a more complex attack process. Our investigation has not attributed responsibility to any individual. So far, we have found no evidence of any wallet private key leak. We'll share a detailed technical post-mortem once the investigation is complete and every fact is verified - and publish an updated Proof of Reserves once remediation is complete. What you need to know: • Your funds are safe • Binance will cover all losses from the SAFU fund and company funds • Estimated total impact: ~$6.3B, with ~$3B frozen on-chain so far, in coordination with our blockchain partners • No evidence of any wallet private key leak • Deposits are unaffected and operating as normal What we've done: • Temporarily suspended withdrawals while we complete a security revamp of the withdrawal service and its related addresses • Revoked the affected address authorizations • Engaged law enforcement and blockchain intelligence partners to trace and recover funds Our team hasn't stopped. We're working closely with law enforcement to ensure the matter is handled appropriately - and I'll share what I can, as soon as I can.