Binance hack: what we actually know, what's still unclear, and the phishing scams to watch for while withdrawals are paused

Numerous panic in right here, so right here's a plain abstract of what Binance and unbiased investigators have stated as of Friday morning. Please right me in the feedback if something modifications.

What Binance has stated

• Estimated impression is ~$6.3B; ~$3B frozen on-chain to date with partners
• "Your funds are protected": all losses to be coated from SAFU and company funds
• Withdrawals are paused whereas they rebuild the withdrawal service; they are saying they're on monitor to renew in ~45 hours from their Friday 08:47 GMT update
• Deposits are working normally
• Preliminary trigger: a compromised DevOps engineer's laptop gave entry to a service container that submitted unauthorized withdrawals. They've since discovered "further factors of breach." No proof of a personal key leak
• A technical post-mortem and an updated Proof of Reserves are promised
• Binance.US says it isn't affected

What unbiased investigators say

• TRM Labs and Chainalysis attribute the attack to North Korea's TraderTraitor (Lazarus) group with excessive confidence. Binance hasn't confirmed attribution
• TRM counts ~$2.7B frozen by Tether, Circle, Ripple, World Liberty and Arbitrum's Safety Council

Still unclear

• Exactly when withdrawals come again (45 hours is a goal, not a assure)
• Whether or not SAFU alone covers it or how a lot comes from firm funds
• The complete root cause

Scams to observe for proper now

Attackers love chaos like this. Security specialists quoted by the BBC flagged the first three; the last one exhibits up after each massive hack:

• Emails or texts saying your funds are "in danger" and you need to act now
• Pretend Binance help accounts in DMs, comments or Telegram providing to assist
• Anyone telling you to move your crypto to a "protected wallet"
• "Recovery" providers promising to get stolen crypto again

Only trust updates within the Binance app or the official website you sort in your self. Binance help will never ask in your password, 2FA codes or seed phrase. If someone is dashing you, that's your signal to cease.

Anyone seen particular phishing makes an attempt already? Publish them (with links eliminated) so others can acknowledge them.