Not Your Keys, Not Your Crypto: The Binance Hack

Not Your Keys, Not Your Crypto: The Binance Hack

This is a developing story. Figures below were reported late on 29 October (US time) and are still changing. Check official updates before you share this.

What happened

Late on 29 October, on-chain watchers saw billions of dollars leave Binance’s hot wallets (the internet-connected wallets exchanges use for day-to-day withdrawals). Binance said it is “aware of reports of a potential security issue and actively investigating” and paused withdrawals on multiple networks as a precaution. As of the reports I could find, Binance has not publicly confirmed a breach or a loss figure. Its co-founder Yi He said user funds are safe. Founder Changpeng Zhao, who no longer runs the company, said it looks like a hack and that he expects user funds to be fully covered.

The numbers don’t agree yet:

About $2.8B left Binance-linked wallets (Etherscan data, per CryptoTicker) About $3.3B in suspicious outflows (Blockaid) About $3.55B received by an unlabelled wallet (on-chain analyst Spreek, Arkham data) Up to $5.8B (Coinbase’s Conor Grogan)

Stablecoin issuers moved fast. Tether froze more than 1.567B USDT and Circle reportedly froze about $800M+ USDC, so a large part of the stolen value may be unspendable. Aave also froze lending markets to stop the attacker borrowing against it.

How: Reporting points to an Ethereum feature called EIP-7702, which lets a wallet delegate control to a smart contract. A security firm classified it as abuse of that delegation with a compromised key. But how the attacker got that signature is unproven. It could be a stolen key, manipulated signing systems or an insider. No one has been identified.

Market: Bitcoin slid below $79,000 on the news. BNB fell more than 5%.

If confirmed at the upper figures, this would be larger than the roughly $1.4–1.5B Bybit hack in February 2025.

What “not your keys, not your crypto” actually means

When you hold crypto on an exchange, you don’t hold the private keys. The exchange does. Your balance is a promise on their database. If they’re hacked, mismanaged or go under, getting your money back depends on them, not on you.

Important nuance for this event: the funds taken appear to come from Binance’s wallets. Whether customers lose anything depends on how Binance covers it, and Binance says users are safe. But that’s exactly the point: you’re relying on a company’s word and balance sheet. Customers have been burned before when that wasn’t enough (FTX is the best-known case).

But self-custody isn’t automatically safer

It gives you control, and it also gives you all the responsibility.

Lose your seed phrase and it’s gone. There’s no support line. Phishing and fake wallet apps drain far more individuals than exchange hacks do. Sending to the wrong address can’t be reversed. A practical middle path Don’t leave long-term holdings on any exchange. Keep on an exchange only what you’re actively trading. Use a hardware wallet for the bulk, and buy it from the maker, never a reseller. Back up your seed phrase offline (never photographed, never in the cloud, never typed into a website). Spread it out. Don’t hold everything in one place, exchange or wallet. Test with a small amount first when moving funds. Turn on every security feature (app-based 2FA, withdrawal whitelists, anti-phishing codes). Plan for inheritance. Someone you trust should know how to access your crypto if something happens to you. Watch for scams this week

Scammers love events like this. Expect fake “Binance recovery” and “claim your compensation” messages, fake support accounts and phishing links. Binance itself warned users not to trust unofficial links or requests for account information. Only use the official app or website, and never share your seed phrase with anyone.

What to watch next Whether Binance confirms the breach and the real loss figure When withdrawals resume How much of the frozen stablecoin is recovered The cause (stolen key vs. insider vs. something else)

Want help setting up secure self-custody? Book a free 15-minute chat with the Orange Brick Road team: https://calendly.com/brandon-orangebrickroad/15min-call

General information only. Not financial, investment or tax advice, and it doesn’t consider your objectives, financial situation or needs. Orange Brick Road does not hold an Australian Financial Services Licence (AFSL). Crypto is highly volatile and you can lose all your money. Do your own research and speak to a licensed adviser before making decisions.

More from the blog