SINGAPORE / NEW YORK — November 8, 2026 — Binance, the world’s largest cryptocurrency exchange by trading volume, has announced a major leadership shake-up just nine days after suffering a devastating US$6.3-billion cyberattack, raising fresh questions about financial oversight, customer confidence and the future of the global digital-asset industry.
Chief Financial Officer Kaiser Ng is leaving the company after more than five years, with former Airwallex executive Justin Yek appointed to take over its financial operations.
The announcement, confirmed by Binance co-Chief Executive Officer Yi He on Saturday, November 7, comes during one of the most challenging periods in the exchange’s history.
According to Bloomberg, Reuters and The Block, Ng is departing to pursue another business venture, while Yek brings extensive experience in corporate finance and financial technology.
Binance emphasized that the transition had been underway for approximately six months.
That means the leadership change was being prepared long before hackers allegedly stole billions of dollars in cryptocurrency from the exchange on October 29.
But the timing has nevertheless attracted intense attention.
Binance is dealing with the financial consequences of the attack, billions in customer withdrawals and an international investigation involving hackers the FBI has linked to North Korea.
The biggest question now is whether Justin Yek can strengthen Binance’s financial controls and rebuild investor confidence—or whether the record-breaking security breach will continue casting a shadow over the world’s most influential cryptocurrency exchange.
Binance Confirms Kaiser Ng’s Departure After More Than Five Years
Binance announced the leadership change on November 7, confirming that Kaiser Ng would step down as chief financial officer.
Ng has served as CFO since January 2022, according to Reuters.
Before joining Binance, he worked at rival cryptocurrency exchange Kraken.
His experience included navigating an increasingly complex digital-asset industry shaped by regulatory scrutiny, volatile trading activity and the growing importance of customer-asset protection.
In a statement, Binance co-CEO Yi He said Ng had decided to pursue a new venture and that preparations for his departure had been underway over the previous six months.
The company thanked Ng for his contributions and confirmed Justin Yek as his successor.
Binance has not publicly disclosed the nature of Ng’s next venture.
It has also not announced that his departure was related to financial misconduct, the recent cyberattack or any regulatory enforcement action.
The timing of the announcement is important, but it does not establish a causal connection between the security breach and the executive transition.
Who Is Justin Yek, Binance’s New Chief Financial Officer?
Justin Yek joins Binance after serving as vice president of finance at Airwallex, an international financial technology company providing payment and financial infrastructure services.
His appointment places him in charge of a critical corporate function at one of the world’s largest digital-asset businesses.
As CFO, Yek will be responsible for financial management, capital planning and oversight of the company’s financial operations.
His responsibilities are particularly significant because Binance operates in a rapidly evolving industry where customer protection, regulatory compliance and financial transparency remain major concerns.
The exchange handles substantial volumes of cryptocurrency trading and serves users across numerous international markets.
Managing its financial resources requires coordination among treasury operations, accounting, risk management and other corporate functions.
Yek’s background in financial technology may provide experience relevant to these challenges.
However, his appointment alone does not guarantee stronger financial performance or improved cybersecurity.
Those outcomes will depend on how effectively Binance implements its recovery measures, financial controls and long-term business strategy.
$6.3-Billion Cryptocurrency Hack Creates a Leadership Test
The CFO transition comes just over a week after Binance disclosed a cyberattack involving approximately US$6.3 billion in digital assets.
According to Reuters, Binance said the October 29 attack originated from a sophisticated operation that began months earlier.
The attackers allegedly compromised employee computers using malware concealed in software downloads and fraudulent recruitment efforts targeting engineers.
The operation eventually enabled unauthorized cryptocurrency transfers.
The financial scale of the incident is extraordinary.
At approximately $6.3 billion, the reported theft substantially exceeds many previous cryptocurrency exchange hacks.
The attack has also intensified scrutiny of the security systems used to protect customer funds.
Binance has pledged to fully reimburse affected customers, saying the financial losses will be absorbed through company resources rather than passed on to users.
The company’s ability to honor that commitment will be central to restoring confidence.
As previously reported by WWC ONE MEDIA, the breach triggered an industrywide effort to identify and restrict stolen digital assets.
Related WWC ONE MEDIA coverage:
The incident also highlights the difficulty of securing financial platforms against attackers who target employees and internal systems rather than relying exclusively on traditional technical vulnerabilities.
Binance Customers Withdraw $4.72 Billion After Security Breach
One of the most important measures of customer confidence has been the movement of assets out of Binance.
Reuters reported that customers withdrew a net US$4.72 billion by November 2, representing approximately 3% of the platform’s reported assets.
That is a substantial amount of money.
However, it does not necessarily mean Binance experienced a financial collapse or that customers permanently abandoned the exchange.
Net withdrawals measure the difference between customer outflows and inflows over a specified period.
They are also separate from the assets stolen during the cyberattack.
The $4.72 billion in customer withdrawals must not be added to the $6.3 billion in stolen cryptocurrency as though both amounts represented hacking losses.
Binance co-CEO Richard Teng said customer flows had largely stabilized following the initial period of disruption.
The exchange has also reported progress in replacing affected assets.
As of November 3, approximately 95% of the stolen digital assets had been replenished, according to the company’s statements.
The remaining portion involved less-liquid assets requiring additional acquisition arrangements.
Replenishing customer balances is not the same as recovering the original stolen cryptocurrency.
Binance can replace stolen tokens using corporate funds while investigators continue attempting to trace the assets taken by attackers.
WWC ONE MEDIA previously examined how the withdrawals affected the exchange’s reputation.
Related WWC ONE MEDIA coverage:
The company’s next challenge is convincing customers that its security measures can prevent another major incident.
FBI Links Binance Theft to North Korean Hackers
The cyberattack has also become an international security issue.
The US Federal Bureau of Investigation has attributed the theft to TraderTraitor, a hacking operation associated by US authorities with North Korea.
The FBI’s assessment has intensified concerns about the use of cryptocurrency theft to generate funds for sanctioned organizations.
North Korea has rejected the allegation.
Pyongyang maintains that Washington’s accusations are politically motivated.
The competing claims should be reported accurately.
The FBI’s attribution represents an official US law-enforcement assessment, but the allegation does not mean that every detail of the attack has been established through a public court proceeding.
Investigators are continuing to track the movement of stolen digital assets.
Blockchain analysis can help identify suspicious cryptocurrency transactions, but recovering funds remains difficult when attackers move assets across multiple wallets or convert them into other cryptocurrencies.
WWC ONE MEDIA previously covered North Korea’s denial and the wider diplomatic implications.
Related WWC ONE MEDIA coverage:
The investigation will remain important for international regulators, financial institutions and cryptocurrency security specialists.
Binance Says Its Financial Position Remains Strong
Despite the enormous theft, Binance maintains that its financial position remains stable.
Speaking at Hong Kong Fintech Week, co-CEO Richard Teng said the exchange was in very strong financial health.
He reported that customer outflows and inflows had largely returned to normal and that the company was using its financial resources to replace stolen assets.
Binance says it serves more than 335 million users and processes approximately US$95 billion in average daily digital-asset and derivatives trading.
Those figures illustrate the enormous scale of its operations.
However, trading volume should not be confused with corporate revenue, profits or available cash reserves.
A platform may process billions of dollars in transactions without retaining those amounts as company income.
Likewise, the exchange’s reported asset replenishment reflects company statements and does not replace an independent audit of its finances.
For Justin Yek, improving the quality and transparency of financial reporting could become an important leadership priority.
Investors and customers will likely want clearer information about the security response, any assets recovered and the ultimate costs borne by Binance.
The Challenge of Recovering Billions in Stolen Cryptocurrency
One of the biggest unanswered questions is how much of the stolen cryptocurrency investigators can recover.
Some stablecoin issuers have mechanisms that allow them to freeze tokens associated with suspicious transactions.
Other cryptocurrencies, including Bitcoin, do not have a central issuer capable of reversing transactions or directly freezing assets on the blockchain.
This difference can complicate recovery efforts.
Even when stolen funds are traced, controlling or retrieving those assets may require cooperation from cryptocurrency exchanges, law enforcement authorities and other financial intermediaries.
The process can become even more complicated when attackers convert tokens across different blockchain networks.
As WWC ONE MEDIA previously reported, security specialists have warned that approximately US$1.4 billion in Bitcoin linked to the Binance incident could prove particularly difficult to recover.
Related WWC ONE MEDIA coverage:
The warning does not mean those assets have definitively been lost forever.
It highlights the difference between tracing cryptocurrency and successfully retrieving it.
For Binance, the final financial impact will depend partly on the amount recovered and the cost of replacing assets that remain missing.
Why the CFO Change Matters for the Global Crypto Industry
The executive transition comes at a time when cryptocurrency exchanges face increasing demands for transparency and accountability.
Digital-asset platforms must maintain sufficient financial resources while protecting customer funds against sophisticated cyber threats.
The Binance incident has demonstrated the potential consequences of weaknesses involving employee devices, internal access permissions and transaction authorization systems.
It may encourage other major exchanges to review their cybersecurity practices and emergency response plans.
For regulators, the attack could reinforce concerns about customer custody, financial safeguards and the need for reliable reporting.
For investors, the key issue is whether cryptocurrency platforms can demonstrate that they have the resources and controls needed to withstand extraordinary losses.
Justin Yek’s appointment therefore arrives at a commercially sensitive time.
He will inherit a company seeking to preserve confidence after a major security incident while continuing its international operations.
But the evidence currently available does not establish that Binance faces insolvency or that its new CFO has been appointed to manage a financial collapse.
Those conclusions would require additional independently verified financial information.
What the Leadership Change Means for Philippine Crypto Investors
The Binance developments are also relevant to cryptocurrency users in the Philippines.
Filipinos participate in digital-asset markets through various exchanges, wallets and financial technology services.
However, Binance has faced regulatory restrictions in the Philippines, meaning its global operations should not be mistaken for authorization to offer all services locally.
For cryptocurrency users, the incident reinforces the importance of understanding how exchanges safeguard customer assets.
It also highlights the risks of relying on a single platform for substantial digital-asset holdings.
Investors should verify that any platform they use complies with applicable Philippine regulations.
They should also exercise caution when encountering fraudulent messages offering compensation after major hacking incidents.
Scammers frequently exploit security emergencies by impersonating exchange representatives and asking users to disclose account credentials or wallet recovery phrases.
A legitimate exchange representative should never need a customer’s private recovery phrase to process compensation.
What Happens Next for Binance and Justin Yek?
The company’s immediate priorities include completing the financial transition, continuing asset replenishment and supporting the investigation into the October 29 attack.
Several developments will be important in determining whether Binance can rebuild confidence.
First, the company must fulfill its commitment to protect affected customers from losses.
Second, it will need to demonstrate that the weaknesses exploited during the attack have been addressed.
Third, investigators will continue tracking the stolen cryptocurrency and examining the identities of the suspected attackers.
Finally, Binance will need to maintain financial stability while adjusting to its new leadership structure.
There is no confirmed announcement that Ng’s departure was prompted by the security incident.
The company says the transition was planned months earlier.
Nevertheless, the new CFO will inherit the financial and reputational consequences of one of the largest reported cryptocurrency thefts in history.
The Bigger Picture: Can Binance Rebuild Trust After a Historic Crypto Heist?
Binance’s appointment of Justin Yek marks the beginning of a new chapter in its financial leadership.
The company has confirmed that Kaiser Ng is pursuing another venture following a planned transition.
But the timing has placed the announcement under intense scrutiny.
The exchange is still managing the consequences of a $6.3-billion cryptocurrency theft.
Customers have withdrawn billions of dollars.
Authorities are investigating suspected North Korean-linked hackers, while Binance continues replacing affected assets.
The company says its finances remain strong and that customers will not bear the direct losses from the attack.
Yet maintaining that confidence will require continued transparency, effective security improvements and credible financial management.
For Justin Yek, the task will extend beyond overseeing accounts and financial planning.
He will become a key executive responsible for helping Binance navigate the aftermath of an unprecedented cybersecurity crisis.
The central issue is not whether the CFO transition caused the crisis. Binance says it did not.
The question is whether the company’s new financial leadership can help secure its recovery and maintain the confidence of millions of users.
With billions of dollars at stake and international investigators still tracing stolen cryptocurrency, could Justin Yek’s arrival mark the beginning of Binance’s recovery—or will the fallout from the record-breaking hack expose deeper vulnerabilities across the global cryptocurrency industry?
