On October 29, a breach at Binance resulted in the transfer of approximately $6.3 billion from the exchange’s wallets within twenty minutes, marking the largest crypto theft recorded. The exchange identified the entry point as a compromised engineer’s computer, allegedly infected after a fraudulent job interview.
Binance announced that it restored 98% of the stolen assets using its own funds and resumed withdrawals the following day.
Patterns in Major Exchange Hacks
High‑profile incidents such as Mt. Gox (2014), QuadrigaCX (2019), FTX (2022), Bybit (2025) and Binance (2026) share a common theme: assets held on exchanges are vulnerable to attacks that can affect billions of dollars. While these events receive extensive media coverage, smaller individual losses often go unnoticed.
Self‑Custody Threat Vectors
Recent cases illustrate several ways self‑custody can be compromised:
- Social engineering: an investor disclosed a hardware‑wallet seed to a scammer posing as support, losing over $282 million in BTC and LTC.
- Seed leakage: photos, notes or cloud‑stored seeds unintentionally exposed.
- Signature phishing: attackers obtained signed off‑chain messages, enabling unauthorized token transfers worth $6.3 million in January 2026.
- Physical threats (“wrench attacks”): 52 incidents in the first half of 2026 resulted in $124 million of losses.
- Address poisoning: a typo‑squatted address caused a $12.25 million loss.
- Device failures: a randomness flaw in ColdCard key generation led to the loss of over a thousand bitcoins.
Recovery Outcomes
Recovery depends on the custody method:
- Exchanges may compensate losses, as seen when Bybit restored customer balances within three days and Bitget covered a $388 million loss through its protection fund.
- Binance absorbed the full loss and has already reimbursed 98% of the stolen assets.
- Self‑custody victims often face limited recourse; stolen funds are typically converted to other assets and rarely frozen.
Regulatory Considerations
In Brazil, Central Bank resolutions (519, 520, 521) require exchanges to segregate customer assets, maintain proof of reserves, undergo independent audits, and prohibit the use of customer funds for company operations.
Key Takeaway
Both exchange custody and self‑custody involve trust. Diversifying holdings across reputable exchanges, well‑managed self‑custody solutions, and regulated financial products can mitigate risk, but no approach eliminates it entirely.
