Binance Founder CZ Warns of Rising Crypto Scams After $6.3 Billion Hack
Changpeng Zhao has warned cryptocurrency users about a surge in fraudulent messages and fake compensation offers following the major Binance security breach, urging investors to remain cautious and rely only on official information.
Binance founder Changpeng Zhao, popularly known as CZ, has warned cryptocurrency users that scammers are increasing their activities following the reported $6.3 billion security breach involving the world’s largest cryptocurrency exchange. In a warning shared on social media on November 2, 2026, Zhao said scammers were operating at an unusually high level and urged users to remain careful. His warning followed the circulation of fake screenshots and fraudulent compensation announcements targeting Binance customers. Criminals are reportedly taking advantage of uncertainty surrounding the incident to impersonate exchange representatives and trick users into revealing account information or transferring their digital assets. The development has raised fresh concerns about the security of cryptocurrency investors during major industry incidents.
The warning comes after Binance experienced a major security incident estimated to have affected approximately $6.3 billion in cryptocurrency assets. Initial investigations indicated that attackers may have gained access through a compromised laptop belonging to a DevOps engineer before exploiting a system used to approve transactions. Binance said the incident involved unauthorised withdrawals from a company-controlled hot wallet. The exchange initially suspended deposits and withdrawals while its security teams investigated the breach and worked with law enforcement agencies and blockchain intelligence companies. Binance also maintained that customer funds would be protected and that it would cover the financial losses associated with the incident.
Following the breach, scammers reportedly began circulating fake messages claiming that affected customers were entitled to compensation or needed to complete special verification procedures to recover their funds. Some fraudulent communications may direct victims to imitation websites designed to steal passwords, authentication codes and cryptocurrency wallet credentials. Cybersecurity experts have warned that criminals frequently exploit fear and confusion during major security incidents because worried users may respond quickly without checking whether a message is genuine. Investors are therefore being advised not to click suspicious links, share recovery phrases or transfer cryptocurrency to wallets presented as safe storage accounts by unknown individuals.
The incident has also placed pressure on Binance to restore confidence among its global customer base. The company has more than 335 million registered users and has been working with other cryptocurrency businesses to trace and freeze affected assets. According to reports, approximately $3 billion in related assets had been located or frozen through cooperation with industry partners. Binance also began restoring withdrawal services after completing initial security checks. However, the breach triggered significant customer withdrawals, with Reuters reporting that users withdrew a net $3.64 billion during the first nine and a half hours after services partially resumed. The exchange said withdrawal activity subsequently began stabilising.
CZ’s latest warning highlights how cryptocurrency scams can intensify during periods of uncertainty, even when an exchange promises to reimburse affected customers. Investors are being encouraged to obtain updates directly through Binance’s official website and verified communication channels rather than relying on unsolicited messages, social media screenshots or individuals claiming to offer recovery assistance. The situation also demonstrates that protecting digital assets requires more than trusting the security systems of an exchange; users must remain alert to phishing attacks and impersonation schemes. As investigations into the Binance breach continue, the exchange faces the dual challenge of addressing the financial impact of the incident and protecting customers from criminals attempting to exploit the aftermath.



