Institutional crypto investors rush to pull funds from exchanges after Binance hack
- Published
- Updated
- Since then
- 68 new reports
- In
- Exchanges
Binance’s October 29 hack remained the central story across later coverage, with the exchange saying the intrusion started months earlier and first surfaced through a fake job interview and other access points. The latest reporting adds more detail on the recovery, including phased withdrawals, large amounts frozen or replaced, and continuing movement of stolen funds across blockchains.
Key claims & sources
What it means
Binance's Oct. 29 breach, which drained about $6.34 billion in roughly 20 minutes, became the largest exchange hack on record, eclipsing Bybit's $1.5 billion loss in 2025. Unlike a single-moment exploit, this one began months earlier, in June, through a tampered software install and a fake job interview that compromised two engineers, only surfacing when stolen coins moved through an Ethereum hot wallet in October.
Institutions reacted by pulling capital rather than waiting for forensic clarity, and Binance later reported $3.64 billion in net outflows, equal to 2.1% of its $171 billion in assets, after reopening withdrawals in phases. Holders of BTC, ETH, USDT and BNB regained access first; holders of other tokens still waited for clearance. Rival exchanges moved to tighten signing infrastructure and wallet-delegation controls, a response competitors can no longer put off.
Binance's pledge to cover losses from its own treasury works because it owned the compromised hot wallet outright, sparing customers direct harm, but it also shows how much trust in exchange custody still runs through one company's balance sheet. The episode revives a familiar tension: platforms marketed as gateways to decentralized finance remain centralized points of failure, where a single exploited signature can move billions before any user ever acts. (per coinpedia.org)
Binance says it has frozen roughly $2.85 billion of the stolen funds and is still sourcing the remainder to complete its promised reimbursement; the final tally depends on how quickly the networks still awaiting clearance reopen and whether frozen assets convert back into usable reserves. Continued tracing by the Secret Service, FBI and stablecoin issuers across Tron and bridge routes will decide how much of the $6.34 billion is recovered versus laundered beyond reach.
Market reaction i
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 5.9 years ago | LuBian · Weak key generation incident | $3.5B |
| 5.6 years ago | Thodex · Scam incident | $2.5B |
| 5.4 years ago | Africrypt · Scam incident | $2.3B |
| 6.4 years ago | Wirecard · Scam incident | $2.1B |
| 5.2 years ago | BitConnect · Scam incident | $2B |
4285 incidents stored · 0 were as large as this one or larger ($6.4B)