JupiteX Get the app
Markets & Finance8 Nov 2026 · about 6 min

Binance CFO is leaving to ‘pursue a new venture’ after $6.3 billion hack

The brief

Kaiser Ng, Binance’s chief financial officer, is leaving the cryptocurrency exchange. Yi He, Binance’s co-CEO, said Ng plans to pursue a new venture after more than five years at Binance. The departure matters because a CFO helps oversee a company’s financial management during a major period of scrutiny. The transition was not presented as sudden. Yi He said Binance had implemented a transition plan over the last half year. That preparation is important because it gives the company time to transfer financial responsibilities rather than leaving the role without a handover. Ng will be replaced by Justin Yek as CFO. His departure comes barely more than a week after hackers stole $6.3 billion worth of cryptocurrency from Binance users. The article does not connect Ng’s departure to the hack, and it gives no additional reason beyond his plan to pursue a new venture.

01

What happened to Binance's CFO, and what reason was given for his departure?

Kaiser Ng, Binance’s chief financial officer, is leaving the cryptocurrency exchange. Yi He, Binance’s co-CEO, said Ng plans to pursue a new venture after more than five years at Binance. The departure matters because a CFO helps oversee a company’s financial management during a major period of scrutiny.

The transition was not presented as sudden. Yi He said Binance had implemented a transition plan over the last half year. That preparation is important because it gives the company time to transfer financial responsibilities rather than leaving the role without a handover.

Ng will be replaced by Justin Yek as CFO. His departure comes barely more than a week after hackers stole $6.3 billion worth of cryptocurrency from Binance users. The article does not connect Ng’s departure to the hack, and it gives no additional reason beyond his plan to pursue a new venture.

02

What is a cryptocurrency exchange, and what role does Binance play for its users?

A cryptocurrency exchange is a service that lets users buy, sell, trade, and often store digital currencies. It acts as a central platform between users and the cryptocurrency market. Binance is one such exchange, so its users use Binance accounts to manage cryptocurrency and request withdrawals.

The article gives a concrete example of that role. After hackers stole $6.3 billion worth of cryptocurrency from Binance users, Binance froze withdrawals for several days. When accounts were unfrozen, users withdrew a net $3.6 billion during the first few hours. The exchange therefore controlled access to the withdrawal process.

That central role makes an exchange both useful and important during a crisis. It can temporarily stop withdrawals while investigating or protecting accounts, but users depend on it to restore access. The article does not explain Binance’s full range of services, so details beyond trading, account access, and withdrawals come from general knowledge about exchanges.

03

How large was the reported hack, and how does that amount compare with the money users later withdrew?

The reported hack was enormous: $6.3 billion worth of cryptocurrency was stolen from Binance users. That figure describes the value of the stolen assets, not necessarily cash taken directly from Binance’s own accounts. Its size matters because it affected users on a major exchange and forced Binance to intervene.

Binance froze withdrawals for several days. After accounts were unfrozen, users withdrew a net $3.6 billion in the first few hours. Comparing the figures, $3.6 billion was about 57% of $6.3 billion. The word net means withdrawals were measured after accounting for deposits during that period.

The numbers show two different events. The $6.3 billion figure concerns the reported theft, while $3.6 billion concerns users moving funds after access returned. The article does not say that the withdrawn cryptocurrency came from the stolen funds. Binance said it would cover the losses, so users would not bear the stated financial impact.

04

What happens when an exchange freezes and then reopens withdrawals, and why might users rush to withdraw their funds?

An exchange freeze temporarily blocks users from moving cryptocurrency out of their accounts. When withdrawals reopen, users regain access and can request transfers. In this case, Binance froze withdrawals for several days after the reported theft, then restored them. The reopening created a sudden moment when many users could act at once.

The article records the result clearly: users withdrew a net $3.6 billion in the first few hours after accounts were unfrozen. A net figure counts withdrawals after deposits are subtracted. The rush may reflect users wanting direct control of their assets after seeing that a security incident had disrupted access. That explanation is general context; the article does not quote users describing their motives.

Large withdrawals can put pressure on an exchange’s available liquidity and operations, although the article does not report such a problem here. Binance said it would cover all losses from the stolen funds. Even so, the combination of a major hack and a temporary freeze helps explain why reopening produced unusually fast withdrawals.

05

Who are TraderTraitor and the FBI, and what evidence or role led them to be connected with the attack?

TraderTraitor is identified in the article as a North Korean group blamed for the Binance hack. The FBI is the United States’ federal law-enforcement agency. In this incident, Binance and the FBI were presented as the parties connecting the attack to TraderTraitor.

The reported attack involved hackers stealing $6.3 billion worth of cryptocurrency from Binance users. Binance froze withdrawals afterward, and the company said it would cover the losses. Those actions show the exchange’s operational response, while the attribution identifies who Binance and the FBI believed was responsible.

The source does not describe the evidence supporting the attribution. It gives no details about digital forensics, stolen funds, suspects, or an FBI investigation. Therefore, the careful conclusion is that Binance and the FBI blamed TraderTraitor, not that the article independently proves the group carried out the attack. The attribution may guide security and law-enforcement responses, but further details are outside the provided text.

06

How can Binance promise to cover stolen funds, and what other protections or recovery options might cryptocurrency users have?

Binance can promise to cover stolen funds by accepting the financial loss itself rather than passing it to affected users. The article states that Binance will bear the financial impact and that the losses will not be passed on to users. This is the company’s stated commitment, not a description of a separate insurance policy.

Other protections or recovery routes exist in some cryptocurrency situations. An exchange may reimburse customers from company reserves or an insurance program. Users may also report theft to law enforcement, freeze related accounts where possible, or pursue recovery through legal processes. These options depend on the platform, jurisdiction, asset, and investigation, and none is guaranteed.

The article gives no details about Binance’s reserves, insurance, or recovery efforts. It only records the company’s promise to cover the losses. That promise could reduce users’ direct financial exposure, but it does not explain how quickly compensation would happen or how stolen cryptocurrency would be traced. Those practical details remain unstated.

07

How do cryptocurrency transactions, digital wallets, and private keys work, and why can stolen crypto be difficult to recover?

Cryptocurrency transactions are recorded on a blockchain, a shared digital ledger. A wallet is software or hardware that manages access to cryptocurrency addresses. The private key is a secret credential that proves control and authorizes transactions. Users do not usually “hold” coins inside the wallet; the wallet enables control of assets recorded on the network.

When someone sends cryptocurrency, the transaction is signed with the sender’s private key and broadcast to the network. Once accepted and recorded, the transfer normally moves the asset to a new address. If attackers obtain a private key or compromise an exchange’s controls, they can authorize transfers. The recipient may then move the funds again.

Recovery can be difficult because blockchain transfers are generally designed to resist reversal, and there may be no central party able to cancel them. Investigators can sometimes trace public transaction records, but tracing does not guarantee return. The article reports theft and attribution but does not explain the wallets, keys, or transaction trail involved.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web