Binance hack makes 2026 the worst year on record for crypto exploits
Security & Exploits ·
A $6.36 billion breach at Binance now accounts for 73% of the nearly $9 billion stolen across crypto this year, according to a post on X.
The figure puts 2026 losses at $8.7 billion across 322 attacks, more than double the previous peak of $4.0 billion set in 2020. Excluding today's Binance incident, the year's total would sit at $2.4 billion, roughly in line with recent years, underscoring how heavily a single event has skewed the annual tally. The breakdown attributes most of this year's attacks to human error, such as leaked private keys, rather than the advanced AI tools some have pointed to.
Binance has said it is holding $6.34 billion in reserves to cover losses from the hack, with $5 billion already secured in affected tokens and industry partners freezing roughly $3 billion more; the remaining $1.34 billion is being purchased. Decrypt reported that Binance has since found additional points of breach tied to the incident, suggesting the scope of the exploit may extend beyond initial assessments.
In response, Binance's CEO announced that withdrawal services would be restored pending thorough testing, and the exchange has begun returning assets to affected users. Separately, Unit protocol paused all deposits and withdrawals as a precaution, aiming to prevent stolen assets from moving through its system while the situation is assessed.
What remains unresolved is the full extent of the additional breach points identified after the initial hack, and whether further vulnerabilities will surface as Binance's testing continues. It is also unclear how quickly withdrawal services will be fully restored, and whether the $6.34 billion in allocated reserves will ultimately cover all affected users. The episode is being tracked by at least 11 distinct sources, reflecting the scale of attention on what is now the largest single exploit on record.