TronscannerBinance hack: why an exchange is not the place to store your crypto
On October 29, 2026, Binance, the world's largest crypto exchange, reported unauthorized withdrawals of funds. The exchange estimates the total impact at about $6.3 billion, making it one of the largest incidents in the industry's history. Binance has pledged to cover user losses, but the case raises a familiar question: where should you keep crypto you are not actively trading?
Information is current as of October 30, 2026
What we know so far
The investigation is ongoing, so these figures are preliminary and may change.
Amount. Estimates vary:
Source | Estimate |
|---|---|
Binance | about $6.3 billion total impact |
Chainalysis | $5.91 billion at the time of theft, later revised to $6.4 billion |
Blockaid | about $3.3 billion in suspicious transfers (early estimate) |
Frozen by issuers | about $3 billion, may rise |
How the attack happened. According to Binance's preliminary findings, attackers compromised a DevOps engineer's laptop. This may have given them access to a service container, from which they submitted unauthorized withdrawals. Binance says it found no evidence of a private key leak and described the attack as a multi-step process.
Who is behind it. TRM Labs attributes the attack with "high confidence" to TraderTraitor, a North Korean hacking group; Chainalysis also considers this likely. The FBI previously named the same group as responsible for the 2025 Bybit hack.
How Binance responded
Binance says it will cover all losses using its SAFU insurance fund and company funds. In the meantime, some services are restricted:
withdrawals are paused while the withdrawal service is rebuilt, with resumption expected within 48 hours;
deposits were briefly suspended and have since resumed;
Binance Alpha trading is temporarily suspended.
Stablecoin issuers (Tether, Circle, First Digital, Ripple, World Liberty Financial) and the Arbitrum Security Council have frozen part of the stolen assets. Binance has promised a full post-mortem once the investigation is complete.
Why an exchange is not long-term storage
This incident shows once again that on an exchange you do not hold coins — you hold a claim against the exchange. This is not a judgment of any single company; it is how every centralized platform works.
You don't hold the keys. The exchange controls the private keys, so access to your funds depends on its decisions.
Exchanges are prime targets. Assets of millions of users sit in one place, which attracts the most sophisticated hacking groups.
The risk isn't only theft. Even when losses are reimbursed, withdrawals can be frozen for hours or days — exactly when you may need your funds.
It has happened before. Mt. Gox (2014), Binance itself (2019), Bybit (2025, about $1.5 billion): major platforms have lost funds repeatedly, and customers were not always made whole.
Exchanges are convenient for trading and swapping. It makes sense to keep there only what you need for active trades. As the crypto community has long said: "Not your keys, not your coins."
Make the right choice for storage
The most reliable way to store crypto is a wallet where the private keys belong only to you. When choosing one, look at four things:
Non-custodial. Your keys and seed phrase stay with you, not on the company's servers.
Access protection. A password, biometrics and confirmation of every transaction.
Backup. Your seed phrase is written down offline — never in screenshots, email or the cloud.
Separate your funds. Keep only your trading balance on the exchange and the rest in a personal wallet.
Ironwallet is built for people who want full control over their assets. Download Ironwallet and move the funds you are not trading under your own control.
