Binance, the world’s largest cryptocurrency exchange, suffered a massive security breach on Thursday that saw more than $6 billion siphoned from its systems in just 20 minutes. While the company moved to suspend both deposits and withdrawals, the incident has highlighted persistent security vulnerabilities within the digital asset sector. AI is turbocharging security risks across the internet.
The stolen funds were split between stablecoins and decentralized tokens. Stablecoins, which are typically managed by issuing firms, were quickly frozen by those entities to mitigate losses. However, the remaining assets—primarily bitcoin and ether—lack centralized oversight, making recovery efforts significantly more difficult. Researchers estimate that the total loss to the exchange could exceed $3 billion, though the platform has pledged to utilize emergency reserves and other internal assets to ensure customers are made whole. Binance has assured users that their funds are safe and expects to resume normal withdrawal services by Sunday morning.
This major breach follows a separate attack on the crypto-based prediction market Polymarket, which saw roughly 700 users lose $2.7 million in unauthorized withdrawals earlier that same day.
While likely unrelated, the back-to-back incidents underscore the instability facing users on centralized platforms. Ryan Kirkley, CEO of Global Settlement Network, warned that while Binance may have the financial strength to absorb these losses, institutional trust remains a critical issue. “The fact that Binance may have the balance sheet to absorb the damage is encouraging, but I wouldn’t confuse financial strength with operational security,” Kirkley noted, adding that relying on emergency promises is problematic for an industry seeking broader adoption. For years, the crypto industry has tried to shed its affiliation with crime while marketing itself as a safe alternative to traditional banking and investing. A record-shattering heist is deepening concerns about crypto’s vulnerabilities, but once again.
Centralized exchanges have long been favored targets for cybercriminals, partly due to the high volume of assets held and the absence of the rigorous regulatory frameworks that govern traditional financial institutions. Binance, which maintains no fixed headquarters, previously pleaded guilty in 2023 to US federal anti-money-laundering violations. That case resulted in a prison sentence for founder Changpeng Zhao, who remains barred from managing the firm despite receiving a pardon from President Donald Trump last year. Crypto remains a risky business with few regulations on the books, and despite a warm embrace from the Trump administration. The vast majority of people investing in crypto do so through centralized exchanges that lack the kind of federal deposit insurance provided by traditional banks, in the United States.
Sophistication in cybercrime is also escalating as hackers increasingly leverage automation. Chainalysis researchers reported observing novel laundering patterns during the Binance hack, noting that the execution of thousands of rapid transactions suggests the attackers utilized automated tools to obscure the movement of stolen capital. Iman Shafiei, founder of Keystone Research Group, argued that these risks are inherent to the centralized model. “Centralized exchanges pose a risk because they’re centralized… once that system gets hacked, everybody’s funds can be compromised,” Shafiei said.
Experts continue to emphasize the importance of self-custody as the primary defense against such large-scale hacks. By moving assets to private digital wallets, users can maintain direct control over their holdings rather than leaving them on vulnerable exchanges. However, this approach carries its own risks: should an account holder lose access to their private credentials, there is no centralized customer service to assist with recovery. Data from 2021 indicates that roughly 20% of all bitcoin in circulation may already be permanently stranded in inaccessible wallets, illustrating the high stakes of personal asset management in the crypto ecosystem. To be sure, any business can be vulnerable to a cyberattack. He said, is to not leave funds sitting on the same exchanges where you buy and sell. “The moment you want to hold, move your crypto to a self-custody wallet.”, the simplest protection. In 2021, Chainalysis estimated that around 20% of all the bitcoin ever created may be lost or stranded in wallets that account holders can no longer access.
