The $6 billion hack of Binance has renewed scrutiny of cryptocurrency security, though the exchange says customers will not bear the losses. Grayscale said the October 19 attack, attributed to North Korea, underscores the importance of institutional custody for digital assets.

Binance said it has restored 95% of the affected assets, with the remaining 5% consisting of less liquid tokens that require more time to recover. Stablecoin issuers Tether and Circle froze approximately $2.9 billion, representing 45% of the stolen funds, while Binance absorbed the losses on its balance sheet.

Binance Restores Most Affected Customer Assets

Zach Pandl, Grayscale's Head of Research, said the breach pushed reported crypto security losses above $8 billion in 2026, meaning the Binance incident alone accounts for most of this year's reported total. Excluding the Binance incident, losses this year remain comparable to 2025, he noted, adding that losses have declined over time relative to total crypto market capitalization. Against that backdrop, the breach stands out as an outlier in dollar terms for the year rather than a break from the broader trend.

According to Grayscale's assessment, Binance had covered 95% of the affected assets by the time the report was published. The exchange said the remaining 5% comprises less liquid tokens and will take longer to restore.

Stablecoin issuers froze roughly $2.9 billion, or 45% of the stolen funds, with Tether and Circle among those involved. Pandl said issuers regularly cooperate with law enforcement and that he expected the frozen assets to be returned to Binance.

Grayscale Highlights Institutional Crypto Custody

Pandl described the hack as a possible temporary setback for market confidence, but he expects the incident to encourage stronger security practices across crypto exchanges. He also emphasized institutional custody as a safeguard for digital asset holders.

More U.S. investors are gaining digital asset exposure through crypto exchange-traded products, or ETPs, according to Pandl. These products provide access through institutional custody, with safeguards that typically include segregated holdings, offline storage, multi-signature wallets, strict internal procedures, and insurance.

Some crypto ETPs also allow investors to contribute tokens in-kind. Pandl said this can preserve an investor's original cost basis while upgrading asset security.

Hack Raises Questions About Exchange Security Standards

Grayscale said the attack highlights the differences between exchange holdings and institutional custody. Its report noted that U.S.-based ETPs hold assets with state-chartered banks and qualified custodians, arrangements that typically include offline storage, multi-signature wallets, SOC attestations, and insurance.

Pandl said the Binance incident could prompt exchanges to strengthen their security practices. The report also identified institutional custody as an important consideration for U.S. crypto investors. The near-term markers are the restoration of Binance's remaining 5% of affected assets and the return of the roughly $2.9 billion in frozen stablecoins, which together will show how much of the $6 billion is ultimately recovered.