Institutional Investors Pull Assets From Crypto Platforms After Binance Hack
Key Facts
Institutional investors are withdrawing digital assets from centralized exchanges following the suspected Binance hack, according to people familiar with the matter cited by CoinDesk in a report published on October 30, 2026. The investors are rebalancing trading books after the incident, the people said, without the report specifying the scale of withdrawals or where the funds were headed. Binance estimated the incident’s total impact at about $6.3 billion and said about $3 billion of affected assets had been frozen on-chain by that date. The institutional moves put the incident at the center of decisions about assets held on centralized platforms. Binance said user funds were safe, while temporarily suspending deposits and withdrawals to conduct security checks and work with law enforcement.
CoinDesk did not specify how much investors were withdrawing from various platforms, and the destination of the funds was unclear at the time of publication. People familiar with the matter told the outlet that the moves were intended to rebalance trading books; the report did not say the assets were being moved to private custody. This differs from Binance’s estimate of the incident’s total impact: the figure cited by the company covers its estimated impact, while the $3 billion figure refers to affected assets it said had been frozen on-chain. In the information available, Binance did not provide a breakdown linking either figure to institutional investors’ asset movements. Deposit and withdrawal restrictions remain part of the platform’s response during its checks, not evidence in themselves of additional losses or a realized impact on liquidity.
Binance said its initial investigation indicated that a DevOps engineer’s laptop may have been compromised, allowing the attacker to access a service container and send unauthorized withdrawal transactions. The company added that it had found no evidence of a private wallet key leak. It temporarily suspended deposits and withdrawals while conducting security checks and freezing funds, and said it was working with law enforcement. It also announced that it would cover losses through its SAFU fund and company funds. “Rest assured, user funds are completely safe,” a platform spokesperson said.
Market reactions extended to cryptocurrencies and shares of companies linked to the sector. Bitcoin fell 3.2% on the evening of October 29 to below $79,000, according to the Associated Press, while a CoinDesk report published on October 29 and updated on October 30 cited Bitcoin’s drop below $77,000 and a decline in Ether as news of the hack spread. In extended U.S. trading on October 29, Coinbase shares fell 4.8% and Strategy shares dropped about 6%, according to Reuters. The moves came as investors focused on how the incident would be contained and the platform’s operations restored, while Binance said customer funds were safe. These moves alone do not establish a specific impact on trading liquidity.
Security incident losses recorded in the previous quarter provide context for the breadth of risks facing the digital asset sector. CertiK said security incident losses totaled $1.28 billion in the third quarter of 2026, up about 56% from the second quarter. In the current incident, Circle’s chief executive said the company had frozen more than $800 million worth of currencies linked to the event, in coordination with law enforcement. The action forms part of efforts to freeze affected assets described by Binance, but is a separate figure reported by Circle. Binance said it was working with law enforcement partners to identify and pursue those responsible for the incident.
Binance said it would publish additional technical details after the investigation was complete and the facts had been fully verified, and would share an updated proof-of-reserves report after remediation was complete. The company did not specify when the updates would be published in the information available. “We found no evidence of private wallet keys being leaked,” Binance said. Deposits and withdrawals will remain temporarily suspended during security checks and work with law enforcement, according to the company’s statement. The scale of institutional withdrawals across platforms and the destinations investors chose for their funds remain unclear.