Binance hack: what we actually know, what's still unclear, and the phishing scams to watch for while withdrawals are paused

Loads of panic in here, so right here's a plain abstract of what Binance and unbiased investigators have stated as of Friday morning. Please right me within the feedback if something modifications.

What Binance has stated

• Estimated influence is ~$6.3B; ~$3B frozen on-chain to date with companions
• "Your funds are protected": all losses to be coated from SAFU and company funds
• Withdrawals are paused while they rebuild the withdrawal service; they say they're on monitor to resume in ~45 hours from their Friday 08:47 GMT update
• Deposits are working normally
• Initial cause: a compromised DevOps engineer's laptop computer gave entry to a service container that submitted unauthorized withdrawals. They've since found "further points of breach." No proof of a personal key leak
• A technical post-mortem and an updated Proof of Reserves are promised
• Binance.US says it isn't affected

What unbiased investigators say

• TRM Labs and Chainalysis attribute the assault to North Korea's TraderTraitor (Lazarus) group with high confidence. Binance hasn't confirmed attribution
• TRM counts ~$2.7B frozen by Tether, Circle, Ripple, World Liberty and Arbitrum's Security Council

Still unclear

• Precisely when withdrawals come again (45 hours is a target, not a assure)
• Whether SAFU alone covers it or how much comes from company funds
• The complete root trigger

Scams to observe for right now

Attackers love chaos like this. Security specialists quoted by the BBC flagged the primary three; the last one exhibits up after every massive hack:

• Emails or texts saying your funds are "at risk" and you need to act now
• Pretend Binance help accounts in DMs, feedback or Telegram offering to assist
• Anyone telling you to maneuver your crypto to a "protected pockets"
• "Recovery" providers promising to get stolen crypto back

Solely belief updates in the Binance app or the official website you sort in yourself. Binance help won't ever ask on your password, 2FA codes or seed phrase. If someone is dashing you, that's your signal to stop.

Anyone seen particular phishing attempts already? Submit them (with links removed) so others can acknowledge them.