Binance initially reported that the October 29, 2026 hack involved a compromised DevOps engineer's laptop accessing a service container to submit unauthorized withdrawal transactions, before identifying additional breach points.