On October 29, hackers drained about $6.3 billion in cryptocurrency from Binance, the world’s largest crypto exchange, in what the BBC reported is believed to be the largest crypto hack ever. By Saturday, the FBI had named the culprit: North Korea.
If you don’t own crypto, this may sound like someone else’s problem. It’s still worth a few minutes, because it shows in plain terms what can happen when your money sits with a company that isn’t a bank, and what protections you do and don’t have.
What happened
In its first security update, Binance said its initial investigation suggested the attack “may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions.” It said it had found no evidence that wallet private keys were leaked. It put the estimated total impact at around $6.3 billion and suspended withdrawals.
On October 31, the FBI said North Korea “was responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026.” The bureau calls this North Korean activity “TraderTraitor” and said the thieves were converting the stolen assets mainly into Ether, with more laundering expected.
Markets noticed. Bitcoin fell nearly 5% after the hack was reported, Ether nearly 6%, and BNB, Binance’s own token, nearly 10%, the Guardian reported.
Where things stand as of November 1
Binance has said from the start that customers won’t eat the loss. In its fourth recovery update, it said it had covered about 95% of the impacted amount by buying replacement tokens, up from 90% in its prior update. The last 5% is in less liquid tokens that take longer to buy. Binance said it “will absorb the financial impact of the stolen funds, not our users.”
Withdrawals began coming back on Sunday, November 1, in phases. The first phase covered 15 crypto assets, including bitcoin, ether, XRP, and dogecoin, plus some stablecoins, with more to follow. Deposits stayed open throughout. Reuters reported that bitcoin withdrawals resumed shortly after 0600 GMT, and that Binance has set aside about $6.34 billion of company funds to cover the losses, drawing on its $1 billion Secure Asset Fund for Users, part of its Futures Insurance Fund, and its corporate treasury.
A note for U.S. readers: the theft hit Binance’s global exchange, Binance.com. Binance.US, which serves U.S. residents, said it hadn’t been affected, according to the BBC.
The real lesson: a promise isn’t insurance
Binance had the cash to make customers whole. That’s good news for its users this week. But notice what protected them: one company’s willingness and ability to pay. Not a law. Not a federal guarantee.
Compare that with the protections most families count on:
- Bank deposits. The FDIC insures deposits up to $250,000 per depositor, per insured bank, for each ownership category. Its own list of what’s not covered includes crypto assets.
- Brokerage accounts. SIPC protects up to $500,000 in missing cash and securities, including a $250,000 limit for cash, if a member brokerage firm fails. SIPC says it “does not protect any digital or crypto asset that does not qualify as a ‘security,'” and that stablecoins aren’t securities under the law.
Neither one covers market losses, either. But for crypto held at an exchange, there’s often no backstop at all beyond the company itself. Even when everything works out, you can be locked out of your money for days, as Binance customers were.
Simple ways to protect your family’s savings
- Keep your emergency fund in an FDIC-insured bank account. Money you might need next month belongs where it’s insured and boring.
- If you own crypto, keep it a small slice. Keep it small enough that a hack, a freeze, or a price drop wouldn’t derail your bills or your retirement plan.
- Don’t leave more on an exchange than you need to. If you hold crypto for the long term, learn how withdrawals and storage work before you need them, and understand that holding it yourself means losing your recovery phrase can mean losing the money.
- Watch for scams that ride the headlines. NordVPN’s chief technology officer, Marijus Briedis, told the BBC to watch for “an email claiming your funds are at risk,” “a fake support account offering help,” or “a message urging you to move your cryptocurrency to a ‘safe’ wallet.” His advice: “Avoid links in unsolicited messages, and never give anyone your password, verification codes, or wallet recovery phrase.”
- Build wealth where you have real protection. For most middle-income families, a plan still centers on a 401(k) or IRA invested in diversified mutual funds, a paid-down debt list, and term life insurance that protects the people who depend on you.
The Bottom Line
The Binance heist was enormous, and as of November 1, the company says it has covered about 95% of the loss and is reopening withdrawals in phases. Customers were lucky that the exchange could pay. Your savings shouldn’t depend on luck. Keep money you can’t afford to lose in accounts with real insurance, and treat crypto, if you own any, as the riskiest part of your plan.
Photo: Shixart1985 via Wikimedia Commons, CC BY 2.0.
Sources and Further Reading
- Binance, “Security Incident Update” (Oct. 29, 2026, updated Oct. 30)
- Binance, “Security Incident Recovery Update #4” (Oct. 31, 2026)
- FBI, “North Korea Responsible for $6 Billion+ Binance Attack” (Oct. 31, 2026)
- Reuters, “Binance resumes bitcoin, ether withdrawals after covering bulk of stolen $6.3 billion” (Nov. 1, 2026)
- The Guardian, “Binance resumes customer withdrawals after record $6.3bn hack” (Nov. 1, 2026)
- BBC News, “Binance hack: who is behind it, is my money safe and what we know so far”
- FDIC, “Understanding Deposit Insurance”
- SIPC, “What SIPC Protects”