Crypto Exchange Hacked: What Happens and How to Prepare
What a major exchange hack means for customers, what the Binance case shows, and how to limit how much depends on any one company.
Seeing a crypto exchange hacked in the headlines raises an uncomfortable question for anyone with coins on one: could the same thing happen to my money? Nobody outside an exchange can stop an attack on its systems. What people can control is how much depends on any one company, and how hard their own account is to break into. This guide uses one very large theft to explain both.
What happened in the Binance hack?
Figures in this section are as of 30 October 2026 and may change.
Binance, one of the largest crypto exchanges, estimated that about $6.3 billion was taken from its wallets. Reports described it as the largest crypto theft on record. Most of the money moved across 10 blockchains within about 20 minutes.
Binance first said that a laptop belonging to a DevOps engineer, someone who helps run a company's software systems, may have been compromised. That gave the attacker a way to submit unauthorised withdrawals. Binance later said its investigation had found further breaches.
The target was hot wallets, which are wallets kept online so an exchange can process withdrawals quickly. Binance said it found no evidence that private keys, the credentials that authorise moving coins, had leaked. The blockchain analysis firm TRM Labs assessed that the systems signing transactions were compromised. TRM Labs and Chainalysis linked the attack to a North Korean hacking group, while Binance said it hadn't attributed the attack to anyone. Early accounts of a hack often change as investigations finish.
One detail matters most for customers. The reports describe an attack on the company's wallets, not on customers' logins. A strong password wouldn't have stopped it, which is why personal security and company risk need separate thinking.
Crypto exchange hacked: what happens to customers?
Customers tend to run into three things after a major hack, and this case showed each of them.
Access can pause. Binance suspended withdrawals while it ran security checks. During a pause, a balance can look normal on screen but can't be moved.
Compensation depends on the company. Binance said it would cover all losses from SAFU, its emergency fund for users, and from its own money. A pledge like that is only as strong as the company behind it. Crypto on an exchange generally doesn't get the kind of government-backed protection a US bank deposit does. The SEC's bulletin on crypto custody basics warns that if a third-party custodian is hacked, shuts down or goes bankrupt, people may lose access to their crypto.
Recovery can be partial and slow. Binance said about $3 billion was frozen. Stablecoins, coins designed to track a currency like the US dollar, have issuers that can freeze them. Bitcoin and ether have no issuer, so investigators have to trace them to a service that can step in. Even frozen funds can take months or years to come back.
Are crypto exchanges safe?
There is no yes or no answer, because exchanges and personal wallets carry different risks. An exchange is a company holding coins for its customers, so its failures become theirs. The crypto saying "not your keys, not your coins" points at this risk.
Self-custody, meaning keeping coins in a wallet you control, removes that company risk but moves all the responsibility to the owner. The same SEC bulletin warns that a lost, stolen, damaged or hacked wallet can mean losing access for good.
| On an exchange | In your own wallet | |
|---|---|---|
| Who controls the keys | The company | The owner |
| Main risks | Hack, shutdown, bankruptcy | Lost keys, malware, scams |
| Help if it goes wrong | Support, while the company lasts | Usually none |
| Skill needed | Lower | Higher |
Neither column is free of risk. For a beginner with a small balance, losing a recovery phrase can be a bigger danger than an exchange failing. As the amount and the time held grow, the company risk usually matters more.
How does a hardware wallet protect against an exchange hack?
A hardware wallet, one type of cold wallet, is a small physical device that keeps private keys offline. Transactions are approved on the device itself, so the keys don't sit on an internet-connected computer or phone. The same SEC bulletin notes that cold wallets are generally more secure from cyberthreats than hot wallets, because they aren't connected to the internet.
This answers the Binance case directly. The stolen coins sat in wallets the exchange controlled. Coins in a personal hardware wallet were never in those wallets, so a hack of the exchange can't reach them, and a withdrawal pause can't lock them. The most reliable protection against an exchange hack is for the coins not to be on the exchange when it happens.
The crypto academy lesson on hot and cold wallets compares a hot wallet to cash in a pocket and a cold wallet to a safe. Its rule is simple: use an exchange only while buying, a hot wallet for small amounts, and a cold wallet for anything you would be upset to lose.
A hardware wallet moves the risk rather than removing it. These points matter most:
- The recovery phrase. These words can restore the wallet on a new device, so a lost device doesn't have to mean lost coins. Losing both can mean losing the coins for good, and anyone who finds the phrase can take them. It belongs offline, on paper or metal, and never in a photo, a cloud note or a message. A genuine support team never needs it.
- Where the device comes from. Ordering directly from the manufacturer reduces the risk of a tampered device. A device that arrives with a recovery phrase already filled in is a known sign of a scam.
- What gets approved. A hardware wallet protects the keys, but it can't stop its owner approving a bad transaction. Checking the address on the device's own screen catches many tricks.
- A small test first. Sending a small amount and confirming the phrase works shows up mistakes while they are still cheap.
- Cost and speed. The device costs money, moving coins involves network fees, and coins in cold storage take longer to reach an exchange. For a small balance, the effort may not be worth it.
How to protect crypto from hackers at the account level
No customer can prevent a hack of an exchange. Most of the protection within a person's control is about their own account, and these are the points worth checking:
- Password and email. A password used nowhere else, on an email account that is itself well protected, since email is often how account resets work.
- Sign-in method. Codes sent by text are the weakest common option, because phone numbers can be hijacked. An authenticator app is stronger. CISA's fact sheet on phishing-resistant MFA describes methods such as security keys, which a lookalike site can't trick.
- Withdrawal allowlist. Where offered, this limits withdrawals to addresses saved in advance, so a stolen login is harder to cash out.
- API keys. These give apps access to an exchange account. Old keys and any with withdrawal permission are worth reviewing.
- Devices. The attack reportedly began with one laptop. An up-to-date device matters as much as a strong password.
What scams tend to follow a hack?
News of a hack gives scammers a ready story. The FTC notes that scammers pretend to be someone you trust, and that crypto payments typically can't be reversed. Common patterns include:
- Fake support staff saying an account was affected
- Fake compensation or refund pages that ask for a login
- Fake "withdrawals have reopened" messages with an urgent link
- "Recovery services" that charge a fee up front to trace stolen coins
A simple habit defeats most of these: ignoring links in messages, and opening the official app or a typed-in address to check for notices.
How much depends on one company?
Here is an exposure check with made-up numbers. Someone has $10,000 of crypto: $7,000 on one exchange, $2,000 on a second, and $1,000 in a personal wallet. If the first exchange pauses withdrawals, 70% of their crypto can't be moved until it reopens. This isn't a suggested split. It simply shows the size of the dependency, which people often haven't worked out.
A few questions can make that number personal:
- If this exchange paused withdrawals for a month, what bills or plans would be affected?
- If this balance never came back, how would my life change?
- Do I have my own record of what I hold and where, outside the exchange's app?
- If I lost my phone today, could I still get into my accounts? Have I tested it?
- Which apps still have access to my exchange account, and do they need it?
Question 3 is where a manual record helps. Stratalla's portfolio tool lets users record holdings and transactions by hand. It doesn't connect to exchanges or wallets, so there are no exchange keys to share. This guide explains how to track crypto portfolio without API keys.
Stratalla doesn't tell anyone what to buy or sell, and it doesn't predict prices.
Sources