Binance Hack: Is Your Crypto Safe on an Exchange?

You open the Binance app on Thursday night to move some bitcoin before bed. The withdraw button is greyed out. A banner says withdrawals are suspended "as a precaution." By the time you wake up, bitcoin has dropped below $77,000 and you still cannot move a single coin.

Millions of people had that exact night. The Binance hack on October 29 is now the largest crypto theft on record, with Binance putting the total impact at about $6.3 billion. The exchange says user funds are safe and it will cover every loss. But your money is still locked, prices moved while it was locked, and no government insurance stands behind any of it.

Below you will find what actually happened, how Binance plans to pay for it, what a two-day freeze costs you in real numbers, and the steps that keep a single exchange's bad night from becoming your bad year.

What Happened in the Binance Hack

The attack moved fast. On-chain records show a Binance hot wallet (an internet-connected wallet used to process daily withdrawals) was taken over late on Thursday, October 29. Within about 40 minutes, most of the funds were gone, according to an on-chain timeline compiled by tech-ish.

One transaction alone moved about 167,464 ETH and 1.615 billion USDT to a new address. Two more Binance wallets followed. Binance's own initial investigation points to a compromised laptop belonging to a DevOps engineer, which the attacker reportedly used to reach a service container and submit withdrawals that looked authorized. Binance says it found no evidence that wallet private keys leaked.

How big is it, really?

The loss numbers vary, and you will see different figures in different headlines:

• $6.3 billion is Binance's own estimate of total impact.
• About $5.9 billion is what Chainalysis counted at the time of theft, as reported by CoinDesk.
• About $3.3 billion is what left Binance's Ethereum hot wallets alone, before counting Bitcoin and Tron outflows.

Any of those numbers sets a record. The previous one was the Bybit theft in February 2025, roughly $1.4 billion to $1.5 billion, which the FBI attributed to North Korea. Researchers at TRM Labs now link the Binance attack to a North Korean group known as TraderTraitor "with high confidence." No government agency has confirmed that yet.

Is Your Money on Binance Safe Right Now?

Binance says yes. Co-CEO Yi He said on X that the company will cover "all hacking losses," and Binance says it will draw on its emergency fund plus company money to do it. Founder Changpeng Zhao, who no longer runs the exchange but remains its largest shareholder, put it more bluntly: "It hurts, but we will survive."

The numbers make that promise believable, at least on paper. Binance held roughly $144 billion in assets before the hack, according to DefiLlama data cited by CoinDesk. A $6.3 billion hit is about 4% of that. Painful, but not the kind of hole that sank FTX, where customer money had been spent rather than stolen.

Why the frozen money matters

Stablecoins are the reason this is not worse. Tether and Circle can blacklist addresses on their own tokens, and both moved within minutes. Tether CEO Paolo Ardoino said more than $1.56 billion in USDT was frozen. Circle CEO Jeremy Allaire said more than $800 million in USDC was frozen "in coordination with law enforcement."

Frozen is not the same as returned, though. Those tokens are stuck, not back in Binance's wallets, and getting them released usually takes legal process. Bitcoin and ether cannot be frozen that way at all, which is why the attacker swapped stolen stablecoins into ETH before the blacklist landed. If you want the background on why some coins can be frozen and others cannot, our guide to how stablecoins work and who controls them covers it.

What a 48-Hour Freeze Actually Costs You

Binance halted withdrawals at about 22:15 UTC on Thursday. At 04:17 UTC on Friday, Yi He said the exchange expects to begin resuming withdrawals "in the next 48 hours." Deposits, he said, are working normally. That means some customers could be locked out for more than two full days.

Here is what that looks like with real numbers. Say you hold $10,000 in bitcoin on Binance and you wanted to sell when the news broke.

1. Bitcoin fell about 4.8% on the news, dropping below $77,000 according to CoinDesk.
2. A 4.8% drop on $10,000 is $480. You could still sell on Binance itself, since trading kept running, but you could not move coins to another exchange or your own wallet.
3. If you held BNB instead, Binance's own token, the hit was bigger. BNB fell about 8% before Binance disclosed the cause, which is $800 on the same $10,000.

Now run the same scenario with a split. Keep $1,000 on the exchange for trading and $9,000 in a wallet you control. The freeze still traps $1,000, and a 4.8% move on that is $48. The other $9,000 drops in price too, because the whole market fell, but you can move it, sell it elsewhere, or simply hold it without wondering whether you will get it back.

The price drop is a market risk you accept by owning crypto. The lockout is a separate risk, and it is the one you can shrink. For a refresher on why crypto prices swing this hard on a single headline, see what triggers crypto crashes and how to respond.

Who Pays When a Crypto Exchange Gets Hacked

This is the part most people get wrong. Your bank account carries federal deposit insurance. Your brokerage account carries SIPC protection if the broker fails. Crypto on an exchange carries neither.

The FDIC spelled this out in a 2022 advisory to banks: deposit insurance does not cover crypto assets, and it does not protect you if a non-bank company like a crypto exchange fails. SIPC coverage applies only to assets that legally count as securities, which most coins do not. So when an exchange is hacked, the only protection you have is whatever the exchange chooses to pay.

How Binance's emergency fund works

Binance set up its Secure Asset Fund for Users, or SAFU, in 2018 to cover customers in exactly this kind of event. It currently holds roughly $1 billion in bitcoin. That sounds large until you set it against the gap:

• Total impact: about $6.3 billion.
• Frozen so far: about $3 billion.
• Unfrozen gap: about $3.3 billion.
• SAFU: about $1 billion, or less than a third of that gap.

Everything above SAFU has to come from Binance's own funds. Binance has not said how it will split the bill. It has promised an updated proof of reserves (a public snapshot showing it holds enough assets to match customer balances) once the fix is done, plus a full technical write-up. That proof of reserves is the document to watch. If the numbers balance, the promise held. If they don't, you will want to know quickly.

Five Steps to Protect Your Crypto This Week

You cannot stop an exchange from being hacked. You can control how much of your money sits there when it happens, and how easy you are to scam in the confusion afterward.

1. Keep only your trading balance on any exchange. If you are not buying or selling this month, move the rest to a wallet where you hold the keys. A hardware wallet keeps those keys offline.
2. Spread what stays on exchanges. Two exchanges with half each means one freeze locks half your trading money, not all of it. The same diversification logic you apply to stocks applies to where you hold assets.
3. Ignore anyone offering to release your funds. After every big hack, fake support agents appear on WhatsApp, Telegram, and X promising early access to frozen accounts. Binance says updates come only through its official channels. Anyone who messages you first is a scammer.
4. Lock down your own account. Turn on app-based two-factor authentication, set a withdrawal address allowlist so coins can only go to wallets you approved, and switch to passkeys instead of passwords where the exchange supports them.
5. Save a record of your balances today. Screenshot your holdings and download your transaction history. If any reconciliation goes wrong later, you will want proof of what you held before the freeze.

One more note on that first step. Self-custody moves the risk to you: lose your recovery phrase and no company can restore your coins. If that worries you, a reasonable middle ground is holding the bulk in your own wallet and writing the recovery phrase on paper stored somewhere fireproof, never in a photo or a cloud note.

Frequently Asked Questions

Was Binance hacked?

Yes. Binance confirmed a security incident on October 29 and estimates the total impact at about $6.3 billion. Its initial investigation points to a compromised engineer's laptop, and it found no evidence that wallet private keys were leaked.

When will Binance withdrawals resume?

Co-CEO Yi He said on October 30 that Binance expects to begin resuming withdrawals within 48 hours. Deposits are working normally. Check Binance's official X account or app announcements rather than third-party posts for the restart.

Will Binance users lose money from the hack?

Binance says it will cover all losses using its SAFU fund and company money, and that user balances are safe. The promise has not been tested yet, so watch for the updated proof of reserves Binance has said it will publish.

Is crypto on an exchange insured?

No. FDIC deposit insurance does not cover crypto, and SIPC protection only applies to assets that qualify as securities. An exchange's own reserve fund, such as Binance's SAFU, is a company promise, not government insurance.

The Freeze Will End. Your Exposure Should Shrink.

Binance will most likely make customers whole. It is big enough to absorb a $6.3 billion hit, it has said publicly that it will, and about half the stolen money is already frozen. If that is how it plays out, most customers will lose nothing except two anxious days.

But those two days showed exactly how much control you hand over when your cryptocurrency sits on someone else's platform. The next exchange to get hit may be smaller, slower to respond, and unable to pay. Move what you are not trading, spread what you are, and treat every "we can release your funds" message as the scam it is.

Disclaimer: This article is for informational purposes only and does not constitute financial advice. Always consult with a qualified financial advisor before making investment decisions. Past performance is not indicative of future results.