Binance's New CFO Faces a $6.3 Billion Cybersecurity Test

By Tom Whitfield

An estimated $6.3 billion was drained from Binance on Oct. 29, giving incoming CFO Justin Yek a test that reaches beyond financial statements. The theft, which Binance attributed to North Korean hackers, puts internal controls, customer reimbursement and regulatory credibility on his desk as he takes charge.

Binance announced Saturday that Yek, a former vice president of finance at Airwallex, will succeed Kaiser Ng. Ng has held the CFO role since 2022 and is stepping down to pursue a new venture. Co-CEO Yi He said in a statement that a transition plan had been “implemented over the last half year.”

Yek is also stepping into a CFO job for the first time. He is joining the exchange described as the world's largest digital currency exchange after an incident described as the biggest heist in crypto history. Those labels establish scale, but they do not identify the specific control point that failed or the full sequence that enabled unauthorized withdrawals.

How did Binance contain the $6.3 billion loss?

Fortune's Jeff John Roberts reported that hackers drained an estimated $6.3 billion from the platform on Oct. 29. Binance later said North Korean hackers orchestrated the attack, using social engineering and malicious software to compromise engineers and gain access to systems that enabled unauthorized withdrawals. The account identifies the broad method, not each control point or failure.

The loss was partly contained. Tether and Circle froze about $2.5 billion in stolen stablecoins, roughly two-fifths of the estimated theft. Binance says it has replenished 98% of the stolen coins through reserve funds and other sources, and that users will not bear the losses.

That limits immediate customer harm, but the report does not itemize the remaining 2% or the controls that failed. Partial reimbursement also does not establish whether customers and regulators now consider the assets safe.

What finance risks does Yek inherit?

A breach turns cyber risk into finance exposure: lost assets, customer remediation, regulatory scrutiny and reputational damage can ultimately reach the CFO. Deloitte's Q3 2026 CFO Signals survey supports that broader remit. In the survey, 50% of finance chiefs named cybersecurity their top external concern, ahead of the economy and inflation.

The survey does not measure Binance's controls, so it cannot validate or condemn the exchange's response. It does show that Yek inherits a risk that senior finance teams already treat as core.

Can dealmaking experience fill the control gap?

Yek progressed at Airwallex from head of strategic finance and corporate development to vice president of finance, leading the company's global finance team. Before that, he spent about nine years in investment banking at Citi and Morgan Stanley. According to his LinkedIn profile, he worked on more than $30 billion of equity, M&A and debt transactions.

Those credentials support corporate finance and dealmaking. They do not supply direct exchange or crypto experience. The record also offers no test of whether that experience translates into the controls needed after this breach.

Ng brought the crypto-exchange experience Yek lacks, having joined Binance from Kraken. A transition planned over the last half year may preserve continuity, but continuity is not evidence that a similar breach cannot recur. Yek brings financing depth, but he does not bring his predecessor's sector experience.

What must Binance prove next?

Binance must answer two questions raised by the incident: how strong are its internal controls, and how can it persuade customers and regulators that their assets are safe? The account of the appointment sets out no new control standard, audit timetable or regulatory deadline. That silence leaves the operational case unresolved even as the reimbursement case improves.

On the current record, the measurable facts are $2.5 billion frozen, 98% replenished and 50% of surveyed CFOs ranking cybersecurity first. Yek's first test is therefore not simply closing the books. It is restoring trust that money alone cannot replace.

A refund can close a loss, but credible controls must close the risk.