Binance CEO Reveals Complex Breach Points in $6.3B Security Hack
Co-CEO Richard Teng confirms sophisticated bypass of approval controls during massive exchange breach.
1Expanded Breach Scope
Binance co-CEO Richard Teng confirmed the $6.3 billion hack involved multiple breach points rather than a single compromised engineer laptop. The investigation revealed a sophisticated attack process that bypassed standard approval controls. This complex incident required the company to pause withdrawal services while conducting a comprehensive infrastructure rebuild and security review.
2Exploitation of EIP-7702
The attacker utilized the EIP-7702 multi-signature protocol to gain on-chain execution approval over a hot wallet. By delegating malicious code, the perpetrator bypassed normal security checks without needing a private key leak. This technical maneuver allowed the attacker to authorize transfers directly, circumventing the exchange's standard multi-signature approval protocols during the event.
3Evidence Destruction Tactics
The attackers employed a self-destruct mechanism that actively destroyed attack tools and digital traces during the operation. This tactic significantly complicated the forensic investigation process for the internal team. By erasing evidence in real-time, the perpetrators made it difficult to trace the exact sequence of actions taken during the breach.
4Infrastructure Signing Vulnerabilities
Independent analysis by TRM Labs identified a compromise within Binance's signing infrastructure across multiple blockchains. The firm observed valid signatures from wallets using diverse keys, suggesting the attackers gained control over the transaction-signing process itself. This finding highlights a critical failure in the exchange's internal systems rather than simple credential theft.
5Asset Recovery and Coverage
Binance has committed over $6.34 billion in corporate funds to cover all losses resulting from the incident. Approximately $5 billion was already held in affected tokens, while the remainder is being sourced through market and over-the-counter channels. The company maintains that user assets held in cold storage remain entirely unaffected.
6Withdrawal Restoration Timeline
The exchange is currently rebuilding its withdrawal service and will only resume operations after passing rigorous testing. CEO Richard Teng expressed hope that withdrawals would be restored within 40 hours of the announcement. The team is working continuously to verify reserves and ensure the security of the platform before reopening services.
7Marketwide Liquidation Impact
The news of the breach triggered a significant market sell-off, resulting in cryptocurrency liquidations exceeding $1.54 billion. Leveraged long positions were disproportionately affected by the sudden volatility following the hack announcement. This market reaction underscores the systemic sensitivity of the broader digital asset ecosystem to security failures at major exchanges.
8Future Security Commitments
Binance is conducting a companywide security review covering cloud infrastructure, key management, and endpoint protection. A full proof-of-reserves report is scheduled for release by November 2, 2026. The company continues to coordinate with law enforcement and blockchain intelligence firms to pursue accountability and ensure the long-term integrity of its systems.
Original article: Bitcoin News — Binance CEO Reveals Complex Breach Points in $6.3B Security Hack