The short versionIn a video update, Binance CEO Richard Teng said the company's first look at its security incident suggested a compromised laptop, but that the follow-up investigation uncovered additional points of breach and he called it a complex attack. He said Binance has reserved over $6.34 billion of company funds and can absorb the loss immediately with its own money. He did not name an attacker in the video.
When something goes wrong at a company, the first explanation is often a tidy one. One laptop. One mistake. Binance's latest update on its security incident is a reminder that the first explanation is only the first explanation.
What happened
In a video posted to X, Binance CEO Richard Teng gave an update on the company's security incident. He said Binance's initial investigation suggested a compromised laptop may have been involved. The later investigation, he said, "has uncovered additional points of breach." He called it a complex attack.
The details
From one device to several points. Decrypt reports that Binance first pointed to a compromised engineer's laptop before saying the investigation had found more. Teng's posted transcript says the investigation is still going on.
Who pays. Teng said Binance has reserved over $6.34 billion of company funds to cover the stolen assets, and that it can absorb the loss immediately using its own money. The figure is Binance's own, from Teng's statement.
Who did it. Teng did not name an attacker in the video.
Why brands should care
Most businesses reading this don't run a crypto exchange and don't hold anything close to this kind of money. But most do have a laptop or a phone that can move money, change a password or approve a payment. Often that device belongs to one busy person who also uses it for everything else.
The useful lesson is about assumptions. If you found one compromised device tomorrow, you'd want to know what else it could reach, not just clean up that one machine. Binance started with a laptop and ended up somewhere bigger.
There's a communication point too. Teng updated the story publicly when the first explanation stopped being enough, and he was specific about who'd cover the loss. Customers can work with an answer that changes as long as it's honest and it comes from the top.
The steps below are our advice, not anything Binance claims or recommends.
What to do
Our suggestions:
- List every device that can move money. Include phones, shared computers and anything logged in to your bank, payment processor or ad accounts.
- Turn on 2FA everywhere on that list. No exceptions, including for the owner.
- Separate the work. Don't let the device that approves payments be the one used for casual browsing and downloads.
- Don't stop at the first finding. If one device or account is compromised, check what else it had access to before calling it fixed.
- Decide who speaks. Know who'll update customers, and be ready to correct yourself as you learn more.
Sources
- Richard Teng on X: An update on the security incident (video, Oct 30, 2026)
- Richard Teng on X: Transcript of the video (Oct 30, 2026)
- Decrypt: Binance Finds 'Additional Points of Breach' (Oct 30, 2026)
FAQ
What happened in the Binance security incident?
Binance CEO Richard Teng said the first investigation suggested a compromised laptop may have been involved, and that the later investigation uncovered additional points of breach. He called it a complex attack.
Will Binance cover the losses?
Teng said Binance has reserved over $6.34 billion of company funds and can absorb the loss immediately with its own money.
Did Binance say who was behind the attack?
No. Teng did not name an attacker in the video update.
