Binance xavfsizlik hodisasi tufayli depozitlar va yechib olishlarni to'xtatdi. Blokcheyn kuzatuvining dastlabki baholashlari shuni ko'rsatdiki, hujumchilar 5,7 milliard dollargacha kriptovalyutani o'g'irlashgan bo'lishi mumkin.
Birja barcha yo'qotishlarni qoplash majburiyatini oldi, shu bilan birga tergovchilar tranzaksiyalarni kuzatish va kriptovalyuta ekotizimi bo'ylab aktivlarni muzlatish bo'yicha hamkorlik qilishmoqda.
Rasmiy bayonotida Binance xavfsizlik jamoalari tekshiruvlar o'tkazayotgani va huquqni muhofaza qiluvchi organlar bilan ishlayotgani aytildi. "Binance barcha yo'qotishlarni qoplaydi," deb aytdi kompaniya, foydalanuvchilarning mablag'lari xavfsiz qolganini va tergov tugagandan so'ng to'liq postmortem o'tkazilishini qo'shib qo'ydi.
Keyinchalik Binance yangilanishida dastlabki topilmalar shuni ko'rsatdiki, buzilgan DevOps muhandisining noutbuki hujumchiga xizmat konteyneriga kirish va ruxsatsiz yechib olish tranzaksiyalarini yuborish imkonini bergan bo'lishi mumkin. Bu hisob dastlabki, ya'ni kirish zanjirining to'liq sud-tibbiy aniqlanishi emas.
Ushbu ma'lumot operatsion infratuzilma va yechib olish ruxsatiga e'tiborni qaratadi. Biroq Binance muhandisning qurilmasini dastlabki yuqtirish usuli, foydalanilgan zaiflik, doimiylik mexanizmi yoki ishtirok etgan ma'lumotlar haqida ommaviy ravishda batafsil ma'lumot bermagan. Mavjud bayonot muhandisning qurilmasi fishing, zararli dastur yoki boshqa usul bilan buzilganini aniqlamaydi.
Oldingi xabarlar internetga ulangan issiq hamyonlardan shubhali o'tkazmalarni tasvirlagan. Bu hamyonlar birja tranzaksiyalarini qo'llab-quvvatlaydi, lekin oflayn saqlashdan farq qiladi. Binance avval alohida Bitcoin issiq hamyon buzilishiga duch kelgan, shuning uchun tarixiy hodisalarni ushbu rivojlanayotgan tergovdan ajratish muhim.
5,7 milliard dollarlik raqam dastlabki baholash, yakuniy hisob-kitob emas. Keyingi xabarlar yuqoriroq baholashlarni keltirdi, jumladan Chainalysis'dan taxminan 5,9 milliard dollar va Binance'ga tegishli deb aytilgan taxminan 6,3 milliard dollar, bu tergovning tez o'zgarib borayotgan ko'lamini ta'kidlaydi.
Binance'ning ommaviy yangilanishlari tasdiqlangan muzlatilgan miqdorni 2,54 milliard dollardan taxminan 3 milliard dollargacha oshirdi. Muzlatilgan aktivlar o'g'irlangan umumiy mablag'lar yoki birjaga allaqachon qaytarilgan mablag'lar bilan adashtirilmasligi kerak.
Stabilkoin emitentlari Tether va Circle o'g'irlikni cheklashga yordam berdi, USDT'da 1,57 milliard dollardan ortiq va USDC'da mos ravishda 800 million dollar muzlatilgani xabar qilindi. Bu aralashuvlar ta'sirlangan aktivlar harakatini cheklash bo'yicha kengroq sa'y-harakatlarning bir qismidir.
Biz bu muammoni hal qilish uchun to'xtovsiz ishlayapmiz. Binance barcha yo'qotishlarni qoplaydi.
Ehtiyot chorasi sifatida, jamoamiz xavfsizlik tekshiruvlarini o'tkazayotganda, mablag'larni muzlatayotganda va huquqni muhofaza qiluvchi organlar bilan ishlayotganda barcha depozitlar va yechib olishlar vaqtincha to'xtatilgan.
Biz kechayu kunduz ishlayapmiz va... pic.twitter.com/zufWJ6V05D
— Binance (@binance) 30-oktabr, 2026
Bu hodisa boshqa yirik birja o'g'irliklari, jumladan Bybit kriptovalyuta buzilishidan keyin sodir bo'ldi. Biroq tergovchilar umumiy hujumchi yoki bir xil foydalanish usulini aniqlamagan. Faqat taqqoslashlar atributsiyani qo'llab-quvvatlay olmaydi.
Binance foydalanuvchilarga faqat rasmiy kanallarga tayanishni so'radi. Uning vakili alohida ravishda norasmiy havolalar, xabarlar va hisob ma'lumotlari so'rovlari haqida ogohlantirdi. Shu bilan birga, birja xavfsizlik tekshiruvlarini davom ettirmoqda va va'da qilingan postmortemni tayyorlamoqda.
SOC'ingizga tezkor hodisalarni to'xtatish uchun ogohlantirish kontekstini bering. 16K SOC'dan tahdid razvedkasini integratsiya qiling.
Binance has suspended deposits and withdrawals due to a security incident. Early estimates fromblockchain tracking indicated that attackers may have drained as much as $5.7 billion in cryptocurrency.
The exchange has committed to covering all losses while investigators work to trace the transactions and coordinate asset freezes throughout the cryptocurrency ecosystem.
In its official statement, Binance said security teams were conducting checks and working with law enforcement. “Binance will cover all losses,” the company said, adding that user funds remained safe and that it would conduct a full postmortem after the investigation.
A subsequent Binance update said preliminary findings indicated a compromised DevOps engineer’s laptop may have enabled an attacker to access a service container and submit unauthorized withdrawal transactions. That account remains preliminary, rather than a completed forensic determination of the intrusion chain.
The disclosure shifts attention toward operational infrastructure and withdrawal authorization. However, Binance has not publicly detailed the initial infection method, exploited vulnerability, persistence mechanism, or credentials involved. The available statement does not establish whether phishing, malware, or another technique compromised the engineer’s endpoint.
Earlier reporting described suspicious transfers from internet-connected hot wallets. These wallets support exchange transactions but differ from offline storage. Binance previously suffered a separate Bitcoin hot-wallet breach, so distinguishing historical incidents from this developing investigation matters.
The $5.7 billion figure represents an early estimate, not a settled accounting. Later reporting cited higher estimates, including approximately $5.9 billion from Chainalysis and around $6.3 billion attributed to Binance, underscoring the investigation’s rapidly changing scope.
Binance’s public updates also increased the verified frozen amount from $2.54 billion to approximately $3 billion. Frozen assets should not be confused with the total stolen or funds already returned to the exchange.
Stablecoin issuers Tether and Circle helped contain the theft, with reported freezes exceeding $1.57 billion in USDT and $800 million in USDC, respectively. These interventions are part of a broader effort to restrict the movement of affected assets. We are working non-stop to resolve this issue. Binance will cover all losses.
As a precaution, all deposits and withdrawals are temporarily suspended while our team conducts security checks, freezes funds, and works with law enforcement.
We are working around the clock and will… pic.twitter.com/zufWJ6V05D
— Binance (@binance) October 30, 2026
The incident follows other major exchange thefts, including the Bybit cryptocurrency breach. However, investigators have not established a shared attacker or identical exploitation method. Comparisons alone cannot support attribution.
Binance urged users to rely exclusively on official channels. Its spokesperson separately warned against unofficial links, messages, and requests for account information. At the same time, the exchange continues security checks and prepares its promised postmortem.
Give your SOC the alert context to stops incidents quickly.Integrate Threat Intel from 16K SOCs.
