Binance breach puts custody at center of crypto infrastructure trade

A breach of Binance’s wallet infrastructure on 29 October affected about $6.34 billion in digital assets, according to the exchange. Binance says attackers gained access to an internal wallet signing service after compromising employees’ computers through malicious software and fake recruitment interviews. The attackers then authorised transfers from internet-connected wallets outside the normal withdrawal process. Binance says it will absorb the losses, had replenished 98% of the affected token assets by 31 October, and had frozen or intercepted about $2.85 billion as of its 3 November update. Its investigation and an independent review remain under way.

The scale of the theft has brought custody — the safekeeping and control of customers’ assets — into focus for investors assessing crypto infrastructure. The question extends beyond how exchanges secure private keys: it includes who can request a transfer, how signing systems check it, and how quickly a provider can stop unauthorised movements. The breach could increase scrutiny of custody providers and encourage investors to consider keeping assets with a separate custodian while using exchanges for trading. Those are possible responses to the incident, rather than established shifts in investment or customer behaviour.