fnews.si

Markets · · 3 min read

The $6.3 Billion Binance Hack: What It Teaches Anyone Who Holds Crypto on an Exchange

The largest crypto theft on record didn't cost Binance's customers money, according to the exchange. That depended on the exchange's own deep pockets, and it's the part investors should think hardest about.

By the fnews.si editors

Five days after the largest cryptocurrency theft on record, Binance says its customers are whole. Co-founder Changpeng Zhao said in an interview published Tuesday that users “did not suffer any loss,” and the exchange has been reopening withdrawals blockchain by blockchain since Sunday.

The scale is still hard to absorb. Hackers took about $6.3 billion in digital assets from Binance’s “hot” wallets on October 29, across ten blockchains in about 20 minutes, according to reconstructions of the attack. The FBI has attributed it to a North Korea–linked group known as TraderTraitor. On Tuesday, a senior North Korean official denied any involvement. The previous record, the 2025 hack of the exchange Bybit, was about $1.5 billion. One blockchain analyst called the Binance theft “almost certainly the single largest-known theft of any kind.”

How customers were made whole

Binance’s response explains why users were protected, and also why that protection is less certain than it sounds:

  • Stablecoin issuers froze funds. Tether and Circle, the companies behind the two largest dollar-linked stablecoins, froze about $3 billion of stolen tokens within hours. That’s possible because those coins are controlled by central issuers. Bitcoin can’t be frozen in the same way, and about $1.5 billion in bitcoin was taken.
  • Binance paid out of its own resources. The exchange said it would absorb the loss using its emergency insurance fund (known as SAFU), a futures insurance fund, its bitcoin reserve and corporate cash, buying tokens to replace what was stolen. By Monday it said only about 5% of the tokens still had to be bought.

In other words, customers were protected because Binance chose to cover the loss and could afford to. A smaller exchange hit by a theft this size would almost certainly have failed.

The run that didn’t become a crisis

Once withdrawals reopened, customers moved quickly. Net outflows reached about $4.9 billion by Monday morning, according to DefiLlama data, roughly 3% of Binance’s assets. That’s large, but the pace has slowed, and paying out without trouble is the best way for an exchange to stop a run.

Bitcoin fell about 5% to below $80,000 after the hack, and shares of listed crypto brokers, including Robinhood and Coinbase, dropped too. Bitcoin was trading near $77,000 on Tuesday morning.

Lessons for anyone holding crypto

An exchange account is an IOU. When you hold crypto on an exchange, you don’t directly control the coins. You have a claim on the exchange, much like a bank deposit but usually without government deposit insurance. Your safety depends on the exchange’s security, its solvency and its willingness to cover losses.

Hot wallets are where theft happens. Exchanges keep part of their holdings in “hot” wallets connected to the internet so they can process withdrawals quickly, and the rest in offline “cold” storage. Thieves target hot wallets. How much an exchange keeps online, and how it secures it, matters a lot.

Proof of reserves is useful but incomplete. Binance said it would publish an updated proof of reserves, a report showing it holds assets to match customer balances. Such reports can’t fully show liabilities or how well the assets are secured.

Scams follow hacks. Zhao warned that fraudsters are targeting people caught up in the breach, posing as support staff or offering to “recover” funds. No legitimate exchange will ask for your password or recovery phrase.

The Canadian angle

Binance withdrew from Canada in 2023 rather than meet tighter rules for crypto trading platforms. Platforms operating in Canada must register with securities regulators and meet custody requirements, including holding most client crypto assets with qualified custodians in cold storage. Those rules don’t eliminate risk, but they address exactly the weaknesses this hack exposed.

For investors who want crypto exposure without holding coins at all, Canadian-listed crypto ETFs are another option, with custody handled by regulated institutions. They come with their own fees and risks, including the price swings of crypto itself.

Binance’s customers appear to have been lucky in their choice of an exchange large enough to absorb a $6 billion loss. The better approach is not to depend on that kind of luck.