The largest theft in the history of cryptocurrency began with an object that most people have on their desk right now: one laptop, the personal property of one DevOps engineer, as first detailed by Forbes.

The engineer, whose name Binance has not released and whom this newspaper will simply call Kevin, because the story works better with a Kevin, apparently left something on the machine that a hostile actor found. From that laptop, the attacker reached a service container, and from the container, they submitted withdrawal transactions that the system — a system designed, marketed, and defended for a decade as a fortress — processed as routine. Across ten blockchains, roughly $6.3 billion moved. About $3 billion of it was later frozen on-chain — the security equivalent of catching the back half of a fleeing car by sprinting directly behind it.

Binance paused withdrawals. Users queued. The exchange’s co-founder, Yi He, posted that assets were “1 to 1 backed,” and the internet, in the manner of the internet, asked to see the backing.

THE LAPTOP: WHAT WE KNOW

  • It was one laptop.
  • It belonged to one engineer.
  • It was not, at the time of the incident, in a vault.
  • The total compromised value is estimated at $6.3 billion.
  • The laptop has not been recovered; it is described in the filing as "a device."

What followed was the rare financial disaster in which the loser’s response became the story. On Thursday, hours after the drain began, Binance founder Changpeng Zhao — known universally as CZ, which is what the machine reads your name as when you type it wrong on purpose — took to X to ask Elon Musk to stop. Musk had responded to Binance’s security notice with laughing emojis and the phrase “Everyday is Zeroday,” and CZ, in a post with the weary dignity of a man collecting a tab, reminded him per crypto.news that Binance’s stake in SpaceX — an offshoot of the $500 million Binance committed to Musk’s Twitter takeover — is now worth more than a billion dollars, and that a show of support would be appreciated.

Read plainly, a company that just lost six billion dollars publicly informed the world’s richest man that it holds his stock, and asked him to be nice about it. The crypto market, which has processed worse news with less grace, fell about 9% on the day. The founder of the exchange also initially mis-stated the size of the loss, then corrected it upward, a sequence investors describe in the literature as “fine, but stop.”

Some say the episode proves self-custody is the only honest way to hold money — that if your keys live on your own machine, only your own machine can fail. Others say it proves the opposite: the machine failed, and it was, at least, a supervised machine. The truth lies in a third position, which is that the keys were on a laptop, the laptop was in a house, and houses have doors.

Binance said late Thursday it would cover user losses from its own reserves. The withdrawal queue, as of Friday morning, was still open.