Binance Quietly Replaced Its CFO Days After Six Billion Dollar Theft

North Korea's hackers just pulled off the biggest crypto heist ever recorded.

Nine days after that heist, the executive who ran Binance's finances was suddenly gone.

Binance says the exit had nothing to do with the heist.

How Fake Job Offers Let Hackers Inside Binance's Wallets

The attackers planted malware on employee computers months before they ever touched a wallet.

Binance says the malware arrived disguised as software downloads and fake job interviews aimed at its engineers.

Once inside, the hackers reached the internal system that signs off on withdrawals and used it to move money out through ten separate blockchains.

Binance co-CEO Richard Teng said most customer funds sat safely in cold storage, far from where the attackers struck.

The company has not said how much it normally keeps in the hot wallets the hackers hit, and it declined to answer outside questions about its internal controls.

Security researchers who track wallet signing systems say the real exposure is not the balance sitting in a wallet at any given moment, it is how much a compromised system can authorize before anyone notices.

Other exchanges, including Coinbase, Gate, and Upbit, have disclosed their own cold storage ratios since the attack.

Binance has not.

Mt Gox and Coincheck Together Do Not Match What Binance Lost

Crypto's two most infamous collapses, Mt Gox in 2014 and Coincheck in 2018, cost a combined one billion dollars.

Binance lost more than six times that in a single operation.

The FBI blames a North Korean hacking group with a long record of draining crypto exchanges to fund the regime's weapons programs.

Pyongyang denies it, the same denial it gives every time.

Binance founder Changpeng Zhao, who stepped down as CEO in 2023, put it bluntly to Yahoo Finance: "There's no 100% security."

Kaiser Ng's New Venture Story Is Not Sitting Well

Binance says Kaiser Ng is leaving after more than five years to chase a new venture, a line that normally means nothing happened.

This time it arrived right on the heels of the company's worst theft on record and six months into what Binance calls a planned transition.

Justin Yek, most recently vice president of finance at Airwallex, now runs the books of a company that just admitted losing six billion dollars without fully explaining why so much sat exposed in the first place.

Binance wants customers to see a routine executive transition, not a company that still has not disclosed how much of their money sat in the wallet hackers drained.

Every major crypto collapse before this one came with executives who insisted nothing was wrong until the moment they could not deny it any longer.

Six billion dollars does not vanish from a hot wallet because of bad luck.

It vanishes because somebody controlling the keys did not do the job, and Binance has yet to say who that was.

Customers are being told they will be made whole, and maybe they will be.

What they have not been told is why the company responsible for safeguarding six billion dollars of their money changed its finance chief in the same week it was explaining the loss.

Crypto exchanges lobbied Washington for years to keep regulation light, and this is what light-touch rules actually produce: a six billion dollar hole and a finance chief who disappears before anyone has to answer for it.

Anyone with money sitting on an exchange this size is trusting an institution that still cannot explain basic security controls to regulators, let alone to the customers whose money it lost.

Sources:

• Binance, official statement on the Kaiser Ng to Justin Yek finance chief transition and the October 29 security incident, November 2026.
• Federal Bureau of Investigation, public attribution of the Binance hack to a North Korean hacking group, November 2026.
• Carlos Mendez, "Binance CFO Kaiser Ng Steps Down, Justin Yek Named New Finance Chief," The Star, November 8, 2026.
• Jonathan Riss, quoted wallet-signing exposure analysis, "Binance's Hack Questions Hot Wallet Risk Controls," Cointelegraph, November 2026.
• Changpeng Zhao, interview with Brian Sozzi, Yahoo Finance, October 2026.