Skip to content

infrastructure

Binance replaces CFO Kaiser Ng with Airwallex's Justin Yek nine days after $6.3B hack

Binance co-CEO Yi He said on Nov 7 that CFO Kaiser Ng is leaving for a new venture; Justin Yek of Airwallex takes over. Company says the handover was planned six months ago.

by 3 min read

Binance announced on November 7, 2026 that Kaiser Ng is stepping down as chief financial officer and will be replaced by Justin Yek, most recently vice president of finance at payments firm Airwallex. The move lands nine days after the October 29 TraderTraitor-linked theft that drained roughly $6.3 billion across multiple chains — the largest crypto theft on record. Co-CEO Yi He's statement, carried by The Block and FinanceFeeds, frames the change as a long-planned handover: "the transition process has been ongoing over the past six months."

What happened

Ng has run finance at Binance since January 2022. Before that he served roughly five years as CFO at Kraken. Yi He said he is "pursuing a new venture"; the statement did not name the venture or an effective date for the transition.

Yek joins from Airwallex, where he was VP of finance after a career across investment banks. Binance has not disclosed his start date or title breakdown (group CFO versus a narrower scope), and it has not corrected the record about whether the search for a replacement predated the hack — the company's position is that it did.

Why the timing matters

Binance's position is that Ng's exit is unrelated to the hack. The chronology is the hostile one:

  • Oct 29, 2026 — Exploiter drains ~$6.3 billion across Ethereum, BNB Chain, Tron, Solana, Arbitrum and Base; Binance covers the shortfall with a $6.34 billion top-up to customer-asset wallets.
  • Oct 30 — Chainalysis and the FBI publicly attribute the theft to TraderTraitor (DPRK). Withdrawals reopen the same weekend.
  • Nov 7 — Ng's departure announced; markets read the pair as connected.

The CFO sits on top of the proof-of-reserves cycle, treasury and the SAFU-fund accounting readers are now watching more carefully than before the hack. A handover during active incident response is operationally expensive even when it is fully planned; it also tightens the lens on whether the published loss number and the chains of custody for the top-up funds hold up.

What to watch

  1. Effective date and reporting-cycle impact. Whether Yek is signing off on the next proof-of-reserves attestation, and when that attestation lands relative to Ng's final day.
  2. SAFU replenishment accounting. Binance said SAFU covered the shortfall, but on-chain analysis has tracked ~15,000 BTC moved from SAFU wallets since Oct 30. Yek will inherit the audit trail.
  3. Any disclosure about Ng's "new venture." If it is another exchange or a payments project, that itself will be news.
  4. Regulatory read-through. CFTC and offshore-regulator conversations initiated after the hack (see our earlier CFTC coverage) now cycle through a different finance leader.

Context

This is the second senior Binance exit since the hack — the first was the quiet removal of the compromised DevOps engineer named in the post-mortem. Exchange CFO transitions during live incidents are rare: the closest recent parallel is Binance.US elevating its CFO Joshua Sroge to interim CEO after the 2023 SEC action, a different kind of pressure. The question on the parent group's finance chair is whether the handover is the narrow operational event Binance describes or the first visible crack in its post-hack leadership stack. The next proof-of-reserves cut will say more than the press release.

Related stories