As far as i am concerned, malicious actor were able to obtain API keys, 2FA codes, etc.. from the victims, correct ?
Why does binance even cover those losses which obviously happened due to people who have no idea how to secure sensitive information ?
In order to negate bad press, and to ensure that people will keep patronizing them. Also, the SAFU fund does not specify which 'extreme cases' is it talking about, so surely this does fall under Binance's terms for SAFU, because CZ already announced it.
So.. i see 3 possibilities:
1) Binance indeed head a security breach and feels responsible
2) This is some sort of 'hackers stole money' - tax fraud from binance
3) Binance is just plain stupid for covering the losses caused by the victims
1. Highly likely, as shrugging it off would make them look as if they aren't concerned for their customers' funds.
2. Could be, and a highly successful cover-up if you ask me.
3. They surely have thought this out with their legal counsel so this is out of the equation.