Crypto Is Becoming Better at Absorbing Hacks Than Preventing Them

Binance said on Thursday, Nov. 12, that it had replaced all tokens stolen in an October cyberattack that drained approximately $6.3 billion from the exchange. That kind of reimbursement is now part of the playbook; the harder problem for crypto operators and their PSPs is preventing breaches that can still move money at institutional scale.

1. Binance said it fully replaced the tokens stolen in the October attack, while U.S. authorities said more than $2.7 billion in stolen assets had been frozen, including more than $1.2 billion subject to court-authorized seizure or restraint. For payment and custody teams, that split matters: reimbursement, freezing, and seizure are three different recovery paths, and none of them fixes the underlying control failure.
2. The scale of the Binance incident is not the point by itself. The point is that crypto is now being forced to treat disaster recovery as a core operating function, not a back-office afterthought. Once an exchange can absorb a loss of that size, the market starts asking a less flattering question: why was the transaction path still vulnerable in the first place?
3. Chainalysis said hackers stole approximately $2.2 billion from cryptocurrency platforms in 2024 across 303 incidents, a roughly 21% increase in stolen value from the previous year. Private-key compromises accounted for 43.8% of stolen cryptocurrency that year, and centralized exchanges drew more attention from attackers.
4. The 2024 pattern was not abstract. Japan’s DMM Bitcoin lost approximately $305 million, and India’s WazirX suffered a roughly $235 million breach. By February 2025, hackers had stolen approximately $1.5 billion from Bybit after compromising the process used to authorize transactions from its wallets.
5. The operational lesson is pretty clear: the weak point is often not the blockchain itself, but the infrastructure around it — human approvals, privileged credentials, transaction presentation systems, and the rails that turn an instruction into an irreversible transfer. In other words, stronger cryptography does not help much if the signer is approving a transaction that was already manipulated upstream.

For high-risk merchants and PSPs, that distinction is the whole game. On paper, crypto settlement is fast and programmable; in practice, that also means a bad authorization flow can move money quickly, across borders, before anyone can do much about it.