An inquiry into Binance’s unauthorized withdrawals now covers vulnerabilities in company systems and a computer already known to be compromised, without confirming that any flaw enabled the theft.
Investigators have yet to determine whether the vulnerabilities played a part in the incident or how they connect to the compromised computer. A flaw can create a security risk without proving that an attacker used it. The findings do not identify a confirmed entry point.
As EconoTimes previously reported, Binance’s initial inquiry pointed to a possible route in which an attacker used a DevOps engineer’s compromised laptop to reach a service container and send unauthorized withdrawal requests.
The exchange also said it found no evidence that wallet private keys were leaked and estimated the incident’s total impact at about $6.3 billion. Withdrawals were paused, and Binance said it would publish technical details after the investigation, without setting a date.
