Binance Hacked for $6.3 Billion

Binance, the largest cryptocurrency exchange globally, confirmed a hack on Oct. 29 that resulted in an estimated loss of $6.3 billion. The breach targeted the platform's hot wallets, which remain connected to the internet to process daily withdrawals, rather than its offline cold storage reserves. In a security update issued on Saturday, the exchange stated it had replenished 90% of the stolen assets using its own funds and pledged to cover the remaining 10%.

Approximately $3 billion of the stolen assets have been frozen to date, according to Binance. Blockchain investigators at TRM Labs and Chainalysis have linked the attack to North Korea, although neither the U.S. government nor Binance has publicly confirmed the source. Tether and Circle, the issuers of the two largest dollar-backed stablecoins, froze billions of dollars in the stolen money. However, Michael Tanguma, co-founder and CEO of Onramp Bitcoin, noted that bitcoin itself has no central company to freeze it, making recovery difficult once it leaves a controlled environment.

The incident has intensified debate over consumer protections in the digital asset space. Josephine Wolff, a professor of cybersecurity policy at Tufts University, stated there are no legal protections for crypto assets equivalent to Federal Deposit Insurance Corporation insurance, which covers up to $250,000 in bank deposits. While some exchanges maintain emergency reserves, such as Binance's Secure Asset Fund for Users, estimated at $1 billion to $1.2 billion, these funds represent only a fraction of the total loss in this case. Binance reported setting aside more than $6.34 billion in company funds to address the shortfall.

Experts warn that exchange guarantees do not constitute legal obligations. Tanguma observed that customers are repaid after hacks only because exchanges choose to pay and have the liquidity to do so, not because the law requires it. In contrast, individual users who suffer losses through phishing or stolen passwords face a more precarious situation, as crypto transactions are final and lack a formal chargeback process. Sarah Downey, an executive vice president at Lockton, emphasized that recovery depends on factors like the speed of discovery and whether the platform holds adequate insurance or reserves.

The hack follows a pattern of large-scale thefts in the sector, including a $1.5 billion breach of Bybit last year and a $388 million attack on Bitget in September. Bitget CEO Gracy Chen said her company's User Protection Fund, which held over $464 million, fully covered the loss. As more Americans invest in crypto, with Pew Research Center citing a figure of 20% for adult participation, the distinction between holding assets on an exchange and self-custodying them has become a central concern for financial safety.