Coinbase Says Customer Assets Unaffected by $6.34B Binance Hack
Coinbase said Wednesday that its systems and customer funds were unaffected by the Binance hot-wallet theft, and that more than 99% of customer assets are held in cold storage. The statement follows the October 29 Binance breach, which sources put at roughly $6.34 billion.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
Coinbase's Statement on Customer Custody
Coinbase said its systems and customer funds were not affected by the October 29 theft from Binance, and that more than 99% of customer assets are held in cold storage. The exchange keeps a small balance in hot wallets to process withdrawals and moves excess balances offline on a continuous basis.
In its custody explanation, Coinbase says customers retain ownership of their digital assets, that the company holds those assets at a 1:1 ratio, and that it does not lend or otherwise use them without specific customer instruction. The explanation applies to hosted Coinbase.com accounts; users of its self-custody wallet control their own private keys.
Security Controls Described
Coinbase describes distributed private keys, multiparty approval for sensitive changes, withdrawal limits and monitoring that can halt wallet signing when activity looks unusual. The company says no single employee has standing access to its production wallet signing service. Its storage uses secure multiparty computation, which splits signing material among separate participants so that no complete key is assembled in one place.
Account-level protections listed on its security page include two-factor authentication with security-key support and multi-approval withdrawals through Coinbase Vault.
What the Binance Incident Involved
Binance's November 3 incident findings put the affected assets at approximately $6.34 billion, with about $2.85 billion frozen or intercepted, subject to reconciliation and market prices. Binance attributed the breach to a campaign involving fake recruitment interviews, compromised developer software and an internal AI tool, which ultimately gave attackers access to its wallet-signing operations. Binance said malicious Ethereum authorizations allowed transfers outside its normal withdrawal infrastructure, and that suspending withdrawals did not automatically cancel permissions already granted on-chain.
Binance said Wednesday it had replenished 98% of the affected assets from its own resources and expanded proof-of-reserves coverage to 44 cryptocurrencies. The two sources differ on the exact figure for the theft: one reports approximately $6.34 billion as the total affected, while the Coinbase-focused coverage describes it as approximately $6.34 billion in stolen assets. Neither source provides an independent on-chain tally, so the figure remains Binance's own estimate.
Limits of Coverage
Coinbase's crime insurance covers a portion of digital assets across its storage systems against theft, including cybersecurity breaches. It does not cover losses from an account compromised through stolen or compromised credentials, and the company says losses from a covered event could exceed what insurers pay out.
Crypto holdings at Coinbase do not receive FDIC or SIPC protection for U.S. customers. Dollar balances can be held in custodial accounts, short-term U.S. Treasuries or money market funds. Where dollars sit as cash at eligible banks or credit unions, pass-through deposit insurance may apply up to $250,000 per depositor, subject to the relevant conditions.
Scale of Coinbase's Balance Sheet
As of September 30, Coinbase reported $377 billion in assets on its platform, $8.6 billion in cash and cash equivalents and $2.2 billion in crypto assets held for investment, according to the Crypto Briefing account. These figures are platform-level and do not themselves measure custody exposure.
Why It Matters
For Traders
Exchange-level custody disclosures do not change near-term price drivers, but withdrawal pauses or elevated outflows at other venues can still affect liquidity for specific tokens.
For Investors
The incident sharpens focus on custody architecture, insurance limits and proof-of-reserves as differentiators among centralized exchanges over a multi-month horizon.
For Builders
Binance's finding that on-chain token approvals survived a withdrawal halt means protocols should audit and revoke standing permissions as part of incident response.
This article is for information only and is not financial advice. Read the full disclaimer.
