Key Takeaways
- • Binance, the world's largest crypto exchange, lost more than $6 billion in about 20 minutes on Thursday, according to the primary report, with roughly half tied to stablecoins that issuers quickly froze.
- • Researchers estimate Binance's total losses could exceed $3 billion; the company pledged to cover them from emergency reserves and other assets and said it expects to resume withdrawals by Sunday morning.
- • The non-stablecoin portion, held in bitcoin and ether, is likely unrecoverable because those networks lack centralized authorities that could freeze funds, per crypto researchers.
- • A separate breach at Polymarket led to $2.7 million in unauthorized withdrawals from about 700 users, per analytics firm Bubblemaps; it was the second apparent Polymarket hack since June and likely unrelated.
- • Security experts argue that reimbursing customers is not a durable fix, raising institutional concerns about custody risk at centralized exchanges.
Summary
Binance, the world's largest crypto exchange, saw more than $6 billion siphoned from its system in roughly 20 minutes on Thursday, according to the report. About half of the stolen funds were tied to stablecoins, which the firms that issue them quickly froze. The remainder was held in tokens such as bitcoin and ether, which lack centralized governing authorities and are likely impossible to recover, according to crypto researchers. Binance's losses could top $3 billion, according to researchers. The company pledged to cover them with emergency reserves and other assets, emphasized that "user funds are safe," and said it expects to resume withdrawals by Sunday morning. Binance suspended deposits and withdrawals on Thursday.
The breach came hours after a smaller security incident throttled operations at Polymarket, the crypto-powered prediction market. Bubblemaps estimated that about 700 Polymarket users lost $2.7 million in unauthorized withdrawals. This was the second apparent Polymarket hack since June, and it was likely unrelated to the Binance incident. Polymarket also promised to make customers whole.
Security experts questioned whether balance-sheet strength offsets operational risk. Ryan Kirkley, CEO of Global Settlement Network, said in an email that Binance may have the capital to absorb the damage but that "I wouldn't confuse financial strength with operational security," adding that reliance on emergency freezes and reimbursement promises is "a serious problem for an industry asking institutions to trust it with substantially more capital."
The article notes that centralized exchanges are high-value targets partly because they operate outside the strict regulations that banks face, and that crypto has long attracted criminal activity due to its speed and cross-border anonymity. Binance, which lacks a fixed headquarters, pleaded guilty in 2023 to violating U.S. federal anti-money-laundering rules; founder Changpeng Zhao served four months in prison and was pardoned by President Donald Trump last year, but remains legally barred from running Binance. Chainalysis researchers said they observed "laundering patterns we have not seen before," with thousands of transactions suggesting automation was used to obscure the trail of funds.
Iman Shafiei, founder of Keystone Research Group, warned that centralized exchanges pose systemic risk because a single breach can compromise all customer funds, and advised moving holdings to self-custody wallets. The article cautions that self-custody carries its own risks, since lost passwords cannot be recovered, and cites a 2021 Chainalysis estimate that around 20% of all bitcoin ever created may be lost or inaccessible.
The breach came hours after a smaller security incident throttled operations at Polymarket, the crypto-powered prediction market. Bubblemaps estimated that about 700 Polymarket users lost $2.7 million in unauthorized withdrawals. This was the second apparent Polymarket hack since June, and it was likely unrelated to the Binance incident. Polymarket also promised to make customers whole.
Security experts questioned whether balance-sheet strength offsets operational risk. Ryan Kirkley, CEO of Global Settlement Network, said in an email that Binance may have the capital to absorb the damage but that "I wouldn't confuse financial strength with operational security," adding that reliance on emergency freezes and reimbursement promises is "a serious problem for an industry asking institutions to trust it with substantially more capital."
The article notes that centralized exchanges are high-value targets partly because they operate outside the strict regulations that banks face, and that crypto has long attracted criminal activity due to its speed and cross-border anonymity. Binance, which lacks a fixed headquarters, pleaded guilty in 2023 to violating U.S. federal anti-money-laundering rules; founder Changpeng Zhao served four months in prison and was pardoned by President Donald Trump last year, but remains legally barred from running Binance. Chainalysis researchers said they observed "laundering patterns we have not seen before," with thousands of transactions suggesting automation was used to obscure the trail of funds.
Iman Shafiei, founder of Keystone Research Group, warned that centralized exchanges pose systemic risk because a single breach can compromise all customer funds, and advised moving holdings to self-custody wallets. The article cautions that self-custody carries its own risks, since lost passwords cannot be recovered, and cites a 2021 Chainalysis estimate that around 20% of all bitcoin ever created may be lost or inaccessible.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.