I’ve written about a lot of crypto exchange disasters over the years, but the Binance hack that unfolded on Thursday, October 29, is in a category of its own. Depending on who you ask, somewhere between $2 billion and $5.7 billion walked out of Binance’s hot wallets in a single afternoon. If the top end holds, that’s not just the biggest crypto theft ever, it’s roughly four times the previous record.
Here’s how it went down, at least as far as anyone can tell right now. Users started noticing funds moving out of Binance-controlled wallets in volumes that made no sense. Blockchain sleuths piled on. Within hours, Binance confirmed to TechCrunch that it was “aware of reports of a potential security issue” and had “temporarily suspended withdrawals on multiple networks following a security incident as a precautionary measure”, in the words of spokesperson Ross O’Leary.
Then came the classic line: “Rest assured that user funds are completely safe.” Sure. That sentence has been printed by every exchange about thirty seconds before things got very unsafe. To be fair, Binance is the one exchange with a balance sheet big enough to actually make that promise mean something, and it has a dedicated emergency fund (SAFU) built for exactly this scenario.
What we know about the Binance hack so far
Not much, and that’s the honest answer. Nobody has explained how the attackers got in. No signer compromise, no leaked keys, no phishing story has been confirmed. It might still be ongoing as you read this, which is the part that should worry you more than the headline figure.
What has happened is a scramble to freeze the loot. Circle froze around $800 million as it passed through its networks, and Tether locked about $1.56 billion tied to the attack. That’s a lot of money the thieves can’t easily spend, which matters: stolen crypto is only worth something if you can launder it, and the stablecoin issuers have gotten pretty quick at slamming the door.
Changpeng Zhao, the founder everyone still calls CZ, popped up on X to say the company had been “likely hacked” and that he expects user funds to be “fully covered”. He doesn’t run Binance anymore, but he’s still the largest shareholder, so when CZ says “covered”, the market tends to listen. He didn’t explain the how, though.
For scale, the previous record was Bybit in February 2025: about $1.4 billion, blamed on North Korean state hackers. Binance has already blown past that on even the most conservative estimate. As for who’s behind this one, it’s officially unknown, and Binance won’t say whether it has heard from the attackers.
Funnily enough, the same day Polymarket also halted trading after a third-party script it embedded got compromised, costing users around $2 million. Different incident, same lesson: your money is only as safe as the weakest JavaScript file on the page.
Why “not your keys, not your coins” still applies
Every time one of these happens, the same ritual plays out. Exchanges swear everything is fine, withdrawals get paused “as a precaution”, the Twitter detectives do the forensics for free, and a week later we find out it was an engineer’s laptop or a supplier’s library.
Binance will most likely survive this. It’s enormous, it’s profitable, and it has the reserves. But “will survive” isn’t the same as “you should park your savings there”. If a company holding tens of billions in customer assets can lose a few billion in an afternoon with no explanation, maybe the explanation itself is the problem: hot wallets are a honeypot, and the honey is yours.
What I’d do: keep on an exchange only what you’re actively trading. Everything else goes on a hardware wallet, and if that sounds like a hassle, it’s a lot less hassle than refreshing a “withdrawals temporarily suspended” page. We’ve already seen this year how even the people whose entire job is key management can get it spectacularly wrong.
Billions can vanish in an afternoon, but at least the press release was ready in minutes.
Source: TechCrunch — Binance pauses withdrawals as hackers suspected of stealing billions in crypto
Image: DS stories / Pexels
Discover more from TechPassion
Subscribe to get the latest posts sent to your email.
