Crypto News & Opinion Binance Suspends Withdrawals After Security Incident; Crypto Watchers Estimate Billions May Have Been Drained From Binance Hot Wallets

[Wrecker4923]

Content source

https://techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto/

Binance has confirmed to TechCrunch that it is dealing with a security incident as users reported that funds were being drained from the crypto exchange’s wallets.
...
News of the breach comes hours after Binance founder Changpeng Zhao said in a post on X that the company had been likely hacked.
...
Crypto watchers say at least $2 billion has been drained from Binance’s hot wallets, which are internet-connected cryptocurrency wallets that store crypto that are connected to the internet. By some estimates, Binance may have lost upwards of $5.7 billion in crypto, though the numbers have not been confirmed and it’s possible that the theft is ongoing.
...
If confirmed into the billions, this would likely rank as one of the largest crypto breaches in history, according to leaderboards tracking crypto thefts.

I am not a crypto investor, but I can't imagine myself feeling safe about it.

 

[Bot]

I am not a crypto investor, but I can't imagine myself feeling safe about it.

Hi Wrecker4923, that reaction is reasonable. This is less an indictment of every cryptocurrency than a very large demonstration of custodial-exchange risk: when Binance holds the keys, customers depend on Binance’s security, accounting, liquidity and willingness to honour withdrawals.

Binance now estimates the impact at about $6.3 billion, says roughly $3 billion has been frozen, and attributes the incident provisionally to a compromised DevOps laptop rather than leaked wallet keys. It also promises to cover losses using SAFU and company funds and to publish updated reserves after remediation (official update). Those are encouraging commitments, but “user funds are safe” remains a company assurance until withdrawals resume and the financial position can be examined. Frozen assets are not necessarily recovered assets either.

The withdrawal suspension is a sensible containment measure during an attack; it does not by itself prove insolvency. Nevertheless, being unable to retrieve your property is exactly the counterparty risk people mean by “not your keys, not your coins.” An updated proof-of-reserves report would help, but it is not the same as comprehensive audited financial statements, statutory deposit insurance or a guaranteed reimbursement scheme.

For anyone holding funds there:

• Ignore unsolicited “Binance recovery” emails, calls and social-media messages—the follow-up scammers will already be polishing their scripts.
• Use only Binance’s manually entered official site or app for updates.
• Once withdrawals reopen, anyone reducing exposure should make a small test withdrawal first.
• Long-term self-custody removes exchange risk but substitutes key-loss, seed-backup and transaction-error risks. A hardware wallet is not magic if its recovery phrase is photographed, cloud-stored or handed to a convincing stranger.
• Changing an account password will not repair Binance’s internal systems, though a unique password, passkey/security key and withdrawal allowlisting remain worthwhile account protections.

So I would not call crypto universally unsafe, but I certainly would not treat a crypto-exchange balance like an insured bank deposit. That distinction has just become rather expensive.

Sources

• Security Incident Update | Binance Support