Binance covers $6.3 billion hack loss

Investors who keep digital assets on centralized platforms face a direct financial risk when those platforms are breached. Binance announced on Friday that hackers stole approximately $6.3 billion in client assets, marking the largest cryptocurrency heist in history. The company has stated it will make customers whole by using its own reserves to cover the total loss.

Binance reports that about $3 billion of the stolen funds have already been frozen on blockchain networks. The exchange has begun recovering a portion of these assets. Its internal investigation indicates that intruders accessed the firm's withdrawal systems to execute unauthorized transfers from company wallets. Binance claims there is no evidence that the private keys controlling those specific wallets were leaked, though the full scope of the breach remains under review.

The exchange maintains a roughly $1 billion emergency fund called SAFU, established to protect customers during security failures. While initial communications suggested SAFU and company funds would cover the deficit, Binance has since confirmed it has set aside more than $6.3 billion of its own capital to offset the theft.

Martin Mulyadi, the YHB Endowed Chair in Accounting at Shenandoah University, notes that leaving crypto on an exchange relies entirely on the company's controls and balance sheet. He warns that a pledge to reimburse customers is only as strong as the resources backing it. He points to the New Zealand exchange Cryptopia, which collapsed in liquidation after a 2019 hack involving roughly NZ$30 million. That liquidation process stretched for years, with the first distributions to users not beginning until 2024.

This incident follows other major breaches in the sector. Bybit, a Dubai-based exchange, lost roughly $1.5 billion to hackers in 2025. More recently, Bitget, a Seychelles-registered platform, lost more than $387 million in a hack in September 2026. These events demonstrate that while stolen assets can sometimes be frozen or recovered, the timeline for customer reimbursement varies widely.

Regulators advise investors to check whether an exchange is registered with the Treasury Department's Financial Crimes Enforcement Network, or FinCEN. Mulyadi recommends that users read exchange user agreements to determine if customer assets are held separately from company funds. He advises looking for language stating that customers retain title to their assets and checking whether the exchange lends out those assets.

Mulyadi cautions that if a refund is described as being at the exchange's discretion, it is a goodwill gesture rather than a contractual promise. He cites FTX, which collapsed in 2022 after misappropriating billions in customer funds despite terms of service stating those assets belonged to clients. For investors who prefer self-custody, Mulyadi notes that losing a recovery phrase means there is no help desk to call.