Binance hack: what we actually know, what's still unclear, and the phishing scams to watch for while withdrawals are paused

Plenty of panic in here, so here's a plain summary of what Binance and unbiased investigators have stated as of Friday morning. Please right me within the comments if anything modifications.

What Binance has stated

• Estimated impression is ~$6.3B; ~$3B frozen on-chain up to now with partners
• "Your funds are protected": all losses to be coated from SAFU and firm funds
• Withdrawals are paused whereas they rebuild the withdrawal service; they are saying they're on monitor to resume in ~45 hours from their Friday 08:47 GMT replace
• Deposits are working usually
• Preliminary trigger: a compromised DevOps engineer's laptop computer gave entry to a service container that submitted unauthorized withdrawals. They've since discovered "further points of breach." No proof of a personal key leak
• A technical autopsy and an up to date Proof of Reserves are promised
• Binance.US says it isn't affected

What unbiased investigators say

• TRM Labs and Chainalysis attribute the assault to North Korea's TraderTraitor (Lazarus) group with excessive confidence. Binance hasn't confirmed attribution
• TRM counts ~$2.7B frozen by Tether, Circle, Ripple, World Liberty and Arbitrum's Safety Council

Still unclear

• Exactly when withdrawals come back (45 hours is a goal, not a assure)
• Whether SAFU alone covers it or how much comes from firm funds
• The complete root cause

Scams to observe for right now

Attackers love chaos like this. Safety specialists quoted by the BBC flagged the primary three; the final one exhibits up after every massive hack:

• Emails or texts saying your funds are "in danger" and you need to act now
• Pretend Binance help accounts in DMs, comments or Telegram providing to assist
• Anyone telling you to move your crypto to a "protected pockets"
• "Recovery" providers promising to get stolen crypto again

Solely belief updates within the Binance app or the official website you sort in yourself. Binance help won't ever ask in your password, 2FA codes or seed phrase. If somebody is dashing you, that's your signal to cease.

Anybody seen specific phishing attempts already? Submit them (with hyperlinks removed) so others can recognize them.