Binance CFO Departs Days After Largest Cryptocurrency Heist in History

Kaiser Ng, Chief Financial Officer at Binance since January 2022, has announced his departure from the cryptocurrency exchange to "pursue a new venture" after more than five years at the company. According to co-CEO Yi He, the transition plan was already being implemented over the past six months, well before the October 29 attack that resulted in a record US$ 6.3 billion theft—the largest financial fraud in cryptocurrency history.

Ng's replacement is Justin Yek, former vice president of finance at Airwallex, a digital payments company that competes directly with Binance in Asian and European markets. The leadership change comes at a delicate moment for the exchange, which is still recovering from the biggest hack ever recorded in the sector, attributed by the FBI to the TraderTraitor group linked to the Pyongyang regime.

The context of the attack

The US$ 6.3 billion theft occurred on October 29, 2026, when hackers exploited Binance's hot wallet signing infrastructure through Ethereum's EIP-7702 mechanism. The attack was not a standalone event: according to Binance itself, the infiltration campaign had been built over months, starting with malware hidden in software updates and fake job offers targeted at company engineers.

Binance's response was swift. Withdrawals were frozen for several days, allowing the exchange to freeze approximately US$ 2.85 billion of the stolen funds. By November 2, the company had already replenished 95% of affected assets with its own resources, using its SAFU (Secure Assets Fund for Users) reserve—a pool of approximately US$ 1 billion in Bitcoin—along with corporate treasury and Futures insurance funds.

The problem: in the first minutes after reopening, users withdrew a net US$ 3.6 billion. The exchange had to balance customer confidence with financial sustainability.

Kaiser Ng's departure

Binance's communication about Ng's departure was carefully calibrated. Yi He emphasized in a statement that the transition plan had been "implemented over the last half year," implying the exit was not a direct consequence of the hack. Ng, who previously spent five years as CFO at Kraken—the main competitor of Binance—brings more than five years of experience in the role.

The company did not reveal details about the "new venture" Ng will pursue. Nor did it confirm the formal departure date. For a financial market where every leadership news can trigger volatility, the ambiguity is strategic: Binance wants to project stability without giving hints about what comes next.

Justin Yek arrives from a company facing its own challenges. Airwallex, founded in 2015, operates in more than 50 currencies and faces increasingly strict regulation in the global payments sector. The move from a direct competitor to the world's largest exchange signals the growing professionalization of the crypto sector, which is shifting from amateur operators to executives with traditional finance experience.

What the hack reveals about crypto security

The attack on Binance exposed a structural vulnerability in the ecosystem: multi-signature hot wallets, which were supposed to offer additional security through multi-party computation, did not allow individual revocation of the malicious permission injected by the attackers. No single key could cancel the permission—which meant that the damage was irreversible without a coordinated containment process across multiple parties.

This is the same type of failure that has led to previous hacks in the sector: overconfidence in protection mechanisms that, when compromised at the signature level, become useless. Binance says it will bring independent cybersecurity experts to review the incident, but the fundamental question remains: does the current hot wallet protection model need a complete reinvention?

The FBI attributed the attack to TraderTraitor, a North Korean state-sponsored hacking group since at least 2020. Pyongyang has denied the allegations. Elliptic data shows that hackers have already converted US$ 124 million of the stolen tokens into Bitcoin—a sign that full recovery of the funds is unlikely.

The question that remains

As Binance recovers 95% of the funds and replaces its CFO, the sector faces a dilemma: in 2026, with artificial intelligence enabling sophisticated phishing and automated zero-day exploits, is the current security infrastructure of crypto exchanges sufficient to protect trillion-dollar assets? Or is it time to completely rethink the custody model?

Sources: TechCrunch, The Block, Cointelegraph

✓ Independent sources cross-checked and verified before publishing