金色财经|Nov 06, 2026 11:00
[Binance's $6.3 Billion Hack: Hot Wallet Controls Remain Unclear] According to a report by Jinse Finance on November 6th, Cointelegraph reported that following the $6.3 billion Binance security incident, there are still no public answers regarding its hot wallet management, signature, and transaction limit internal controls. Co-CEO Richard Teng stated on October 30th that the attack affected the exchange's own hot wallets, with most customer assets stored offline in cold storage and only transferred to hot wallets when users withdraw funds. Binance's initial report released on Tuesday stated that attackers accessed the internal wallet signature service, bypassing the normal withdrawal process to transfer funds. Some technical details will be kept confidential to prevent further attacks. Binance did not respond to Cointelegraph's questions regarding wallet balances and protection. CertiK analyst Jonathan Riss stated that $6.3 billion represents the cumulative value of assets affected across 10 blockchains. On Ethereum, attackers repeatedly drained hot wallets as new deposits arrived. Public on-chain records only show fund flows and cannot confirm the internal signature architecture and limits. Application-side limits can be bypassed when the system is compromised, and limits executed independently by the signature system may still be effective. Fireblocks co-founder Idan Ofrat stated that exchange hot wallets typically retain several days' worth of expected withdrawals, often representing a low single-digit percentage of managed assets. Coinbase, Gate, and Upbit have subsequently disclosed their cold storage ratios.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink