$6.3 Billion Heist and Lessons for Others

Last week, a financial earthquake stunned the world after an unprecedented heist at the world’s largest cryptocurrency exchange, where hackers breached security and stole $6.3 billion, leaving financial leaders bewildered. Hackers have intruded on the Cryptocurrency Exchange Binance, breaching the company's security system and plundering $6.3 billion from the Exchange’s digital wallet. After the hacking incident, Binance authorities took drastic action and froze $3 billion that had reportedly been moved to stablecoin issuers, including Tether, Circle and other crypto firms. According to Binance's statement, the remaining $3.3 billion is already in the hackers’ hands, leaving no scope for recovery. 

Binance has temporarily halted trading, deposits, and withdrawals after cybercriminals stole customers’ assets from its digital ledger. It urged stablecoin issuers, including Tether and Circle, to freeze nearly half the stolen assets, which are being recovered. Binance will fully compensate customers, using $1.23 billion from its Secure Asset Fund for Users (SAFU) and the remainder from company funds. It is investigating the breach and cooperating with law enforcement. 

Binance is a major cryptocurrency exchange that trades digital assets, including stablecoins. Its total assets reached $167 billion, all held as crypto in its digital wallets. Unlike traditional stock exchanges, which facilitate trading but do not hold customers’ money, crypto exchanges hold customers’ digital assets. Primarily based in Asia, Binance offers digital asset trading and wallet services primarily to customers outside the USA. 

Binance operates in the US through a separate subsidiary, Binance US. Media reports say Binance confirmed its Asia-based exchange does not serve US customers and that Binance US was unaffected by the heist. Had US customers or operations been affected, the consequences could have been more severe, given US authorities’ strict protection of the financial system. 

Banks and financial institutions remain prime targets for cybercriminals. Attacks affect institutions of all sizes, but breaches rarely cause major public outcry. The crypto industry, by contrast, has not been seen as a primary target, despite isolated incidents. In 2025, hackers stole $1.5 billion from crypto exchange Bybit, yet experts had not anticipated the industry becoming a leading target. Crypto has since surged to a market value exceeding $2 trillion. Stablecoins may gain legal-tender status, and several issuers have sought US banking licenses. Regulators are reviewing applications and have already approved one for stablecoin issuer Circle. 

Blockchain platforms underpinning cryptocurrency exchanges are gaining popularity as tokenised financial instruments, especially digital securities, enter the industry. Banks are set to issue tokenised deposits, and the US Securities and Exchange Commission has approved tokenised stocks. These developments create significant opportunities for exchanges, but also attract cybercriminals, as the Binance heist demonstrates. A risk-rating expert told the media the hack highlights risks concentrated in large, centralised intermediaries, adding, “Stronger institutional controls can reduce some vulnerabilities, but the scale of assets under custody can amplify the impact of a successful breach”. 

The Binance heist, called by one expert the largest bank heist in human history, may severely affect the financial sector. Although the company may recover, the long-term consequences could persist. The incident highlights risks in the fast-growing digital asset and AI investment industries. A recent wave of cyberattacks, blamed on AI-assisted methods, has caused damage and slowed the AI sector. 

More importantly, this unprecedented heist on the blockchain platform, which is known to have been developed using the most secure technology, has warned that any country or entity, in both the developed and developing worlds, is equally exposed to cybersecurity risk. Bangladesh, having been the worst victim of cyberattacks, still seems vulnerable to cyber risk. Cybersecurity features and corporate awareness are not up to the mark. It is worth mentioning that, in addition to standard cybersecurity applications, all employees’ roles and precautionary actions can safeguard the bank and thus prevent cyberattacks.