Attackers drained Binance of $6.3 billion in the largest crypto hack on record, The Block reported on Friday 30 October 2026. Anyone holding assets on the exchange now holds a claim against the company rather than coins they control, and stolen stablecoins swapped into BTC and ETH can no longer be frozen by any issuer.
What happened in the $6.3B Binance hack?
Attackers breached Binance for $6.3 billion, the largest crypto hack on record, according to The Block on Friday 30 October 2026. Cointelegraph reported the same day that the thieves raced to move the funds before anyone could freeze them, converting stolen stablecoins into assets no issuer controls.
The speed mattered because some assets can be frozen and some cannot. Centralized stablecoin issuers like Circle (USDC) and Tether (USDT) can blacklist an address, which is why the attackers rushed to swap into coins outside that reach. Decrypt reported on Friday 30 October 2026 that CFTC Chair Michael Selig argued the breach shows why offshore exchanges need US-grade oversight.
Why the stablecoin freeze window matters
Frozen funds only help if the freeze lands before conversion. In this case, the window was measured in hours, not days.
- Freezable: centralized stablecoins (USDC, USDT) where the issuer can blacklist an address.
- Hard to freeze: native coins like BTC and ETH, and swaps routed through decentralized venues.
- The race: every minute between breach and detection widens how much becomes unrecoverable.
What is exchange custody risk?
Exchange custody risk is the chance you lose access to crypto because the platform holding it is hacked, frozen, insolvent, or geo-restricted, not because the asset itself failed. When your coins sit on an exchange, the exchange holds the private keys, so you hold a claim against the company rather than the coins directly.
This is the distinction behind the phrase "not your keys, not your coins." It does not mean exchanges are bad. It means the risk you carry on an exchange is counterparty risk, and it stacks on top of ordinary market risk.
The three layers of risk a holder carries
- Market risk: the price of the coin moves against you. Universal, unavoidable.
- Counterparty risk: the venue holding your coin fails, gets hacked, or freezes withdrawals.
- Access risk: regulation or sanctions cut off your account or a token on it.
The Binance breach is pure counterparty risk at record scale. For a sense of how the sanctions angle plays out separately, our write-up on Treasury sanctions over North Korean crypto laundering covers how stolen funds get chased after the fact.
How does exchange custody risk compare across holding methods?
Each way of holding crypto trades one risk for another. There is no option with zero risk, only a different mix.
| Holding method | Main risk | Who holds keys | Freezable by issuer? |
|---|---|---|---|
| Centralized exchange | Hack, insolvency, freeze | The exchange | Yes, if a stablecoin |
| Self-custody wallet | Lost seed phrase, user error | You | Stablecoins still freezable |
| Stablecoin (any venue) | Issuer blacklist, de-peg | Varies | Yes |
Notice that moving a stablecoin into self-custody does not escape the issuer's freeze power, because the freeze works at the token level, not the wallet level. That is exactly why the attackers swapped stablecoins for native coins instead of just withdrawing them.
How do you track crypto across exchanges alongside your stocks?
You track crypto across exchanges alongside stocks by holding every account in one view and converting everything into a single display currency. A hack at one venue is easier to reason about when you can see, in one place, exactly how much of your total net worth sits on that venue.
PortfolioTrackr covers 100 stock exchanges and crypto in the same workspace, with display and conversion across 100 currencies. Our guide to tracking stocks and crypto together in one app walks through the setup end to end.
Ways to get your crypto into the tracker
- Direct sync with Alpaca, Bybit and Interactive Brokers works on every plan, including the free trial.
- 42 brokers connect through the SnapTrade bridge on a paid Pro or Lifetime plan.
- Smart & Easy Import by voice, text or screenshot, plus bulk CSV import, is on every plan.
- Self-custody coins are added by hand, by CSV, or from a screenshot. PortfolioTrackr does not read a wallet address or connect to a wallet.
Each connected broker gets its own read-only portfolio, and it does not count toward your portfolio limit. The ALL PORTFOLIOS combined view, on every plan for anyone with more than one portfolio, is where you see concentration across every venue at once.
How do you review your own exchange concentration after a hack like this?
You review exchange concentration by reading your holdings per venue, not per coin, so a single-platform breach does not catch you blind. The question after any exchange hack is factual: how much of your total do you hold where, and is any of it on a venue now under stress?
Checking is not a trade. Here is what a holder can look at for themselves:
- Per-venue totals: what share of your crypto sits on each exchange, converted to one currency.
- Stablecoin exposure: how much you hold in freezable tokens versus native coins.
- Cross-asset weight: what the whole crypto sleeve is as a share of stocks plus crypto combined.
If you still run this in cells, our comparison of a portfolio tracker versus a spreadsheet explains why a live view beats a manual one when a story breaks over a weekend. Reporting status against your own position is factual. PortfolioTrackr does not tell you what to do with it.
How do you set price alerts on crypto positions?
You set price alerts on crypto positions by placing a Target 1, Target 2 and a stop-loss level on each holding, plus an above or below level on anything in your watchlist. Crypto is checked around the clock, and you hear within a minute of your level being hit.
Stocks, ETFs and futures are checked once a minute while their market is open, and skipped at night, on weekends and on exchange holidays. Crypto never closes, so crypto alerts run continuously by nature of the market.
What crypto alerts can and cannot do
- They report price-level status: still below target, Target 1 reached, Target 2 reached, stop-loss level reached.
- Delivery: email, WhatsApp, Telegram and push on every plan; SMS on Pro and Lifetime.
- Watchlist: 10 tickers on the free trial and Starter, 50 on Pro and Lifetime.
- They do not alert on news, a hack headline, a de-peg, or a balance change. Alerts are price levels only.
An alert will not warn you that an exchange was breached. It will tell you when a coin crosses a level you chose. You can set your own crypto price alerts on any position or watchlist entry.
What is still unknown about the Binance breach?
The full recovery figure is still unknown, because the outcome depends on how much was converted before freezes landed. Cointelegraph's account on Friday 30 October 2026 focused on the race to move funds, and The Block's reconstruction detailed the breach itself, but the final recoverable amount was not settled as of those reports.
Two further threads remain open:
- Attribution: the North Korea link was reported, but on-chain attribution is often refined over weeks.
- Policy: Decrypt reported Chair Selig's argument for US oversight of offshore exchanges, which is a position, not yet a rule.
The bottom line
The $6.3B Binance hack is a counterparty-risk event at record scale, and the attackers' rush to escape stablecoin freezes shows that what you can recover depends on what you hold and where. Coins on an exchange are a claim against that exchange, not the coins in your hand.
The practical, non-advisory step for any holder is to know your own exposure: how much sits on each venue, how much is in freezable stablecoins, and whether your alerts are set. Seeing stocks and crypto in one place, as PortfolioTrackr does across 100 exchanges and 100 currencies, turns a scary headline into a number you can actually read.
Sources
Frequently asked questions
What is exchange custody risk in crypto?
Exchange custody risk is the chance you lose access to crypto because the platform holding it is hacked, frozen, or insolvent, not because the asset failed. The exchange holds the private keys, so you hold a claim against the company rather than the coins directly.
Why did the Binance hackers rush to convert stablecoins?
Centralized stablecoin issuers like Circle and Tether can blacklist an address, freezing funds at the token level. The attackers swapped stablecoins for native coins such as BTC and ETH, which no issuer can freeze, before responders could catch up, according to Cointelegraph's 30 October 2026 report.
Can you track crypto across multiple exchanges and stocks together?
Yes. PortfolioTrackr holds crypto and 100 stock exchanges in one workspace, converting everything into one of 100 display currencies. Direct sync with Bybit, CSV import and screenshot entry work on every plan, and the ALL PORTFOLIOS view shows your concentration across every venue at once.
Does moving a stablecoin to self-custody stop it being frozen?
No. A stablecoin freeze works at the token level, not the wallet level, so the issuer can blacklist the address whether it is on an exchange or in self-custody. This is why the Binance attackers swapped stablecoins for native coins instead.
How fast are crypto price alerts on PortfolioTrackr?
Crypto positions and watchlist levels are checked around the clock, and you hear within a minute of your level being hit. Alerts report price-level status such as Target 1 or stop-loss reached, delivered by email, WhatsApp, Telegram or push, with SMS on Pro and Lifetime.