Following Binance's $6.3 billion security incident, details regarding its hot wallet internal controls and signature management have not been made public.

Following the $6.3 billion security incident, Binance has not yet disclosed details regarding its internal controls over hot wallet management, signature processing, and transaction limits. Co-CEO Richard Teng stated on October 30th that the attack affected the exchange's own hot wallets, with most customer assets stored in offline cold storage and only transferred to hot wallets when users withdraw funds. Binance's initial report released on Tuesday stated that attackers accessed internal wallet signature services and bypassed normal withdrawal procedures to transfer funds; some technical details remain confidential. CertiK analyst Jonathan Riss pointed out that the $6.3 billion represents the cumulative value of assets affected across 10 blockchains. On Ethereum, attackers repeatedly drained hot wallets as new deposits arrived. Public on-chain records cannot confirm the internal signature architecture and limits; application-side limits can be bypassed when the system is compromised, and limits executed independently by the signature system may still be effective. Fireblocks co-founder Idan Ofrat stated that exchange hot wallets typically retain enough funds for several days of expected withdrawals, often representing a low single-digit percentage of managed assets. Coinbase, Gate, and Upbit have subsequently disclosed their cold storage ratios.