Binance halts withdrawals after record $6.3B crypto hack

The world's largest cryptocurrency exchange paused withdrawals on October 29 after what it now estimates to be a $6.3 billion theft, the largest crypto hack on record. The material fact for holders is not the breach itself but the halt, because a frozen withdrawal queue at a top-ten venue is the same dynamic that defined FTX, and the tape is now pricing the question Binance's own statements have not yet fully answered: are the funds there?

Binance's official Security Incident Update, issued October 29 at 19:23 UTC and revised early on October 30, puts the total impact at around $6.3 billion and says roughly $3 billion has already been frozen on-chain by exchanges, stablecoin issuers and law enforcement working the trail. That leaves about $3.3 billion in assets still in motion, per Fundstrat's estimate as carried by CNBC. The exchange states that deposits are unaffected and continue to operate normally, that no wallet private key leak has been found, and that all client losses will be covered from the Secure Asset Fund for Users, or SAFU, plus company funds.

Related reading: Bitcoin Tops $75,000 on $3B Squeeze, Treasury Liquidity.

Read those two sentences together and the size of the test becomes clear. Binance says user funds are safe and that it will make every customer whole, and there is no confirmed shortfall. But the numbers it published do not close the gap on their own. Co-CEO Richard Teng told CNBC the SAFU is worth approximately $1.2 billion, which covers roughly a third of the unfrozen losses, about $3.3 billion, if the worst case plays out. The balance would have to come from Binance's own treasury, and that is where the market's attention should sit between now and the moment the withdrawal queue reopens.

Teng described the attack as a more complex process than the misuse of a single engineer's permissions, and said Binance expects to begin resuming withdrawals within 48 hours. TRM Labs' initial assessment, reported by CNBC, connects the operation to a North Korean state-sponsored hacking group, the same threat actor that has been linked to a series of billion-dollar exchange drains over the past several years. The scale here is different: at $6.3 billion the incident roughly triples what had been the largest crypto theft on record, and it moves the event out of a security footnote and into the register of an exchange-level solvency event.

For the broader framework, see our bitcoin coverage.

Related reading: SEC Crypto Regulation: Safe Harbor and $75M Exemption Explained.

That is the parallel that matters for price. FTX's collapse began not with insolvency as such but with a withdrawal pause and a question mark over reserves, and the market's memory of it is a year of stepped-up scrutiny on any venue that stops honoring redemptions. The bull case for Binance is genuine: it is covering losses from a dedicated fund plus corporate balance sheet, it is publicly reporting the freeze progress, and there is no evidence of missing funds beyond the stolen amount. Teng's 48-hour target, if met, would contain the damage to a custody scare rather than a run.

The bear case deserves equal weight. A $3.3 billion unfrozen balance is large enough that, if the recovery effort stalls, covering it could force Binance to sell reserves into a market that is already watching. Any such selling would not be contained to one venue, because bitcoin and ether still trade as liquid collateral and sharp downside in either would pressure the whole complex. The 48-hour window is short, and the updated Proof of Reserves that Binance has promised will be the first objective check on whether the books actually support the promise that all client funds remain safe.

Related reading: The Rotation Inside Crypto: Bitcoin ETF Outflows Meet a Record Ether Inflow Streak.

For retail holders, the episode is a reminder of the custody trade-off that has shaped crypto for a decade. Self-custody removes the counterparty, but it also removes the recovery machinery, the insurance pools and the freeze capability that have already clawed back half the stolen amount. Centralized custody collects fees, fraud teams and on-chain freeze responses in one place, and concentrates the risk of a single point of failure. The hack does not settle that debate, but it makes the stakes concrete in dollar terms most participants have never seen at an exchange scale.

The dated catalysts are the ones to watch. First is whether withdrawals actually resume inside the roughly 48-hour window Teng described, and whether the reopening produces orderly outflows or a rush for the door. Second is the updated Proof of Reserves, which will tell the market whether the assets backing client balances cover the $3.3 billion question Binance says its safety net and treasury will answer. Between now and then, the crypto tape trades on tone: every incremental statement, every freeze update, every hour the queue stays closed. Recovery is possible, and $3 billion already frozen is real progress, but the next two days decide whether this reads as the industry's worst hack or the industry's worst run.

Related reading: SEC Approves 3x Leveraged Bitcoin and Ether ETFs (Oct. 2).

This content is for informational purposes only and does not constitute financial advice. Past performance is not indicative of future results. Consult a qualified financial advisor before making investment decisions.