Binance says compromised engineer laptop may have enabled unauthorized withdrawals

Binance's initial investigation suggests a compromised DevOps engineer's laptop gave an attacker access to a service container used to submit unauthorized withdrawals, co-chief executive Richard Teng said. He said the attack involved a more complex process than using one engineer's permissions and that investigators had found no evidence of a wallet private key leak. Binance has revoked affected address authorizations and suspended withdrawals while it revamps the withdrawal service and related addresses. It says it will cover every loss. TRM Labs attributed the theft to North Korea's TraderTraitor with high confidence. Binance said its investigation had not attributed responsibility to any individual and pledged a technical post-mortem after verification.