CoinDesk
The reported $6.3 billion Binance theft has renewed debate over exchange security and how quickly a breach can become a financial catastrophe. CoinDesk’s examination of the exploit put the amount drained from one Binance wallet at about $2.5 billion in less than four minutes. The attackers exploited wallet permissions and operational controls, not Ethereum’s underlying cryptography.
Why it matters
The key difference from bank theft is what happens after an attacker gets access. Traditional financial transfers may pass through compliance checks and intermediary banks, and some can be recalled. Confirmed cryptocurrency transactions generally cannot be reversed, though issuers can freeze some stolen tokens. Blockchain transparency can help investigators trace funds, but tracing does not guarantee recovery.
Experts disagree on whether crypto firms face more attacks than banks. Addressable CEO Tomer Sharoni argues that the potential payoff makes crypto firms attractive targets. ZIG Finance co-founder Abdul Rafay Gadit says crypto breaches are more visible because transfers appear on public blockchains, while bank incidents may be handled privately. Neither provided comparative data establishing which sector is attacked more often.
Market impact
The breach puts withdrawal limits, separate signing authorities, approval procedures and key management in focus. Binance co-CEO Richard Teng said investigators found multiple security breaches, including evidence of efforts to erase traces of activity. Binance is rebuilding its withdrawal infrastructure and reviewing signing procedures, employee devices and key management.
The incident also adds to a broader run of losses. CertiK recorded $1.28 billion in crypto losses in the third quarter of 2026, up nearly 56% from the previous quarter; the $1.5 billion Bybit theft in February 2025 was another attack on systems controlling digital assets. For exchanges, the challenge is to secure large treasuries while keeping funds available for customers. The central test is whether safeguards can stop a theft before irreversible transfers are complete.
Frequently asked questions
-
How did the attackers drain funds from the Binance wallet?
CoinDesk’s examination said malicious code was authorized to operate the wallet through Ethereum’s EIP-7702 feature. The exploit targeted wallet permissions and operational controls, not Ethereum’s underlying cryptography.
-
Why can crypto theft be harder to contain than bank theft?
Confirmed cryptocurrency transfers generally cannot be reversed. Banks may have compliance checks and intermediary payment systems, and some transfers can be recalled.
-
Can investigators trace stolen cryptocurrency?
Public blockchains can make stolen funds traceable, but following the funds does not ensure their recovery. Issuers can freeze some stolen tokens.
-
Do experts agree that crypto exchanges are attacked more often than banks?
No. Tomer Sharoni says the potential payoff attracts attackers, while Abdul Rafay Gadit argues crypto theft is more visible. Neither provided comparative data establishing which sector is attacked more often.
-
What security changes is Binance making after the breach?
Binance is rebuilding its withdrawal infrastructure and reviewing signing procedures, employee devices and key management. The incident has also put withdrawal limits and separate signing authorities in focus.
Crypto Rank News
Crypto News
CoinTelegraph
TheBlock
Lookonchain
CryptoSlate