Binance assures users funds are safe after $2.3 billion heist

Binance said on Tuesday that all customer assets remain intact after a coordinated cyberattack that siphoned an estimated $2.3 billion from the exchange’s hot wallets, the largest theft in cryptocurrency history. The breach was discovered early Wednesday morning when irregular withdrawals triggered internal alarms, prompting the platform to freeze outgoing transactions and activate its Secure Asset Fund for Users (SAFU) to cover the loss.

The hack comes at a time when the crypto industry is under intense scrutiny from regulators worldwide, following a series of high‑profile breaches at major platforms and growing concerns over systemic risk. Binance, the world’s biggest exchange by volume, has faced pressure to tighten security after a 2023 attack that stole $40 million and after recent calls from the U.S. Treasury and the European Union for tighter anti‑money‑laundering controls. Analysts say the scale of this incident could accelerate calls for mandatory insurance schemes and stricter oversight of hot‑wallet practices.

Binance’s chief security officer, Yi He, told reporters that the thieves exploited a vulnerability in a third‑party payment gateway linked to the exchange’s fiat‑on‑ramp service. The breach allowed the attackers to generate forged withdrawal requests that bypassed two‑factor authentication. Binance has reimbursed affected users from its SAFU reserve, which was bolstered after the 2023 incident, and has pledged to compensate any remaining losses through a combination of insurance policies and a newly created emergency liquidity pool. The exchange also announced a partnership with a leading cybersecurity firm to conduct a forensic audit and roll out multi‑signature controls for all hot wallets.

Law enforcement agencies in the United States, Singapore and the United Kingdom have opened joint investigations, and Binance is cooperating with Interpol to trace the stolen funds through blockchain analytics. The exchange plans to launch a public dashboard that will track the recovery of assets in real time. Industry observers say the episode underscores the need for robust custodial solutions and may push institutional investors to favor fully insured, off‑chain storage options, potentially reshaping how crypto assets are managed in the coming years.