I still think that it was at users end because only a small precent of users were affected, most of the users didn't have any problem, so it's probably a software that only X amount of users downloaded.
A small percentage of users won't command the amount of attention this vulnerability has garnered in the past few days and its effect which can be traced to the downward trend in the price of bitcoin. What I see here is damage control of them trying to downplay the amount of people affected and along that promising some form of refund in other to appeal to the emotional side of the community. Earlier, I had read that binance was not hacked rather it was the bot that is being used on the platform that is hacked and another version shows that there is more than they are telling us. Its high time people are being held accountable for holding funds in this market.