Binance Hack: $6.3 Billion Stolen, $3 Billion Frozen, and a $1.2 Billion Backstop Under Test
Hackers stole $6.3 billion from Binance, the world's biggest cryptocurrency exchange, in what Reuters and CNBC reported on October 29, 2026 as a record theft. The exchange's account has been revised since then, and the figures now in circulation are the ones that matter for customers and counterparties.
Binance's security incident update, dated October 30, 2026, says the company identified a suspected compromised engineer laptop in connection with the incident. The same update reports approximately $3 billion frozen on-chain. It also states that user funds are safe and that losses are covered by the Secure Asset Fund for Users, known as SAFU. The update is the company's own statement, and its coverage claim rests on that fund.
SAFU is a reserve Binance maintains for exactly this kind of event. The company's glossary says it may use SAFU assets to compensate affected users if a security incident results in loss of user funds. The word "may" carries weight here. It describes a permitted use of the reserve, not an automatic payout. CNBC put the fund's value at approximately $1.2 billion as of October 30, 2026, and said it could cover roughly a third of the remaining losses.
Co-CEO Richard Teng said Binance would cover all losses from the $6.3 billion hack using its SAFU fund and company funds. That is a stated commitment. It is not yet a record of compensation paid, and the distinction will matter to anyone with a claim against a balance.
The arithmetic is worth doing in the open. $1.2 billion is under a fifth of the $6.3 billion headline figure. If the reserve covers roughly a third of what remains after the frozen assets are netted out, the rest of the coverage pledge depends on company money, which is the second funding source Teng named. A pledge to cover everything is only as strong as the balance sheet behind it, and the company's balance sheet is not the same thing as its customer reserve.
Frozen is a status, not a recovery. The $3 billion on-chain is funds that have been stopped from moving, and whether they return to Binance's control, and how quickly, will decide how much of the gap closes. Until that happens, the frozen figure is a best-case offset rather than cash in hand.
The Wall Street Journal framed the episode as a potential biggest-ever crypto heist in an article published October 30, 2026. The word "potential" is doing real work in that headline.
For an ordinary Binance user, the question is narrower than the headline theft figure. It is whether a given balance is covered, on what timeline, and through which mechanism. The company's position is that user funds are safe. The test of that position is whether the reserve and the company's own resources can absorb losses without the coverage pledge becoming a negotiation.
For the wider market, the question is whether losses stay inside one platform. A $6.3 billion theft from the largest exchange is large enough that counterparties, lenders and liquidity providers will watch the recovery figures closely, and the frozen-asset number will be the first one they test against the reserve.
