Last updated: October 30, 2026, 12:45 p.m. Pacific Time. This story is still changing.
On October 29, 2026, Binance, the world's largest crypto exchange, was hit by what may be the largest crypto theft ever. Binance says customer funds are safe, but withdrawals are paused while it rebuilds its systems. The event shows why it matters who holds your coins, and why HoneyBadger sends every purchase straight to your own wallet.
What happened at Binance
Graphic 2: Time Line of What Happened at Binance·
- About US$6.3 billion was taken. That is Binance's own estimate, in its Security Incident Update (updated October 30, 2026). Blockchain analysts Elliptic put it at US$6.43 billion, and TRM Labs at US$6.36 billion.
- The money came from "hot wallets." These are wallets connected to the internet. TRM Labs says most of the money left in about 20 minutes. Co-CEO Richard Teng said most customer funds sit in offline "cold wallets" and the attack hit a hot wallet, not customer assets (TokenPost, October 30, 2026).
- About US$3 billion has been frozen. Binance says around US$3 billion was frozen with help from partners. Elliptic says it has verified US$2.84 billion.
- Binance says it will cover the losses. Binance says it will cover all losses from its SAFU fund (an emergency reserve) and company funds. A Binance spokesperson told Cointelegraph on October 30 that it has set aside more than US$6.34 billion, including US$5 billion held in the same tokens that were taken.
- Withdrawals are still paused. Deposits work as normal. Teng said Binance is rebuilding its withdrawal service and will not switch it back on until it "passes rigorous testing," with a target of Sunday, November 1 (BBC, October 30, 2026).
- A reserve report is coming. Teng said Binance will publish a full proof-of-reserves report, which shows the assets it holds for users, by Monday, November 2 (TokenPost).
- Law enforcement is involved. The BBC reported that the US Secret Service is helping to trace and recover the funds, and that the FBI says it is "aware of the incident."
How it happened
Binance first said the attack may have started with a hacked engineer's laptop. It said it found no sign that wallet private keys leaked. Later on October 30, it said it had found "additional points of breach" and called it "a complex attack" (Decrypt).
TRM Labs says, with high confidence, that North Korea's TraderTraitor hacking group did it. BleepingComputer reported that Chainalysis agrees. Elliptic calls North Korea "likely" but says no government has confirmed it. Binance has not named anyone.
Why it matters: the risk of letting someone else hold your coins
Graphic 3: Custodial vs Non-Custodial
Most big exchanges are custodial. That means the exchange holds your crypto for you. Binance says this itself. Its Proof of Reserves page describes "assets that we hold in custody for users."
A huge pool of customer crypto makes an exchange a big target for hackers. Even when an exchange promises to cover losses, you may have to wait to move your coins, like Binance users are waiting now.
People in crypto have a saying for this: "Not your keys, not your coins." Private keys are the secret codes that move your crypto. If someone else has them, you are trusting them to give your coins back.
HoneyBadger vs. Binance
Graphic 4: Honeybadger Vs Binance
Why HoneyBadger?
HoneyBadger is non-custodial. We never hold your coins. Here is what our website says:
- FAQ: "We never hold your funds. Every purchase is sent directly to a wallet address you control."
- Terms and Conditions: "We do not custody (i.e., store, hold or manage) any cryptocurrencies, or Canadian Dollars, on your behalf."
We have served Canadians since 2016. No way of buying crypto is risk-free. Holding your own coins means keeping your keys safe is your job. We can't recover coins if you lose your recovery phrase or send them to the wrong address.
Simple safety tips
Graphic 5: Self Custody Safety Tips
· Use a trusted wallet. A hardware wallet, like Ledger or Trezor, keeps your keys offline.
· Write your recovery phrase on paper. Keep it somewhere safe. Never store it in a photo, email or cloud note.
· Never share your keys or recovery phrase. No real company, including HoneyBadger, will ask for them.
· Check every wallet address. Crypto sent to the wrong address can't be returned.
Buy crypto that stays with you
With HoneyBadger, your coins go straight to your wallet, and you stay in control.
Start buying online at etransfer.badgercoin.com
Prefer cash?
Find one of our 240 machines near you.
Frequently asked questions
What does non-custodial mean?
It means the company never holds your crypto. When you buy from HoneyBadger, the coins are sent straight to a wallet address you control.
Does HoneyBadger ever hold my coins?
No. Our FAQ says: "We never hold your funds. Every purchase is sent directly to a wallet address you control."
Do I need my own wallet to buy?
Yes. You need a wallet before you buy, so we have somewhere to send your coins. Our How It Works page lists some options.
Is HoneyBadger registered in Canada?
Yes. HoneyBadger is a Money Services Business registered with FINTRAC and Revenu Québec, and has served Canadians since 2016.
Can I use Binance in Canada?
According to FINTRAC, Binance stopped all of its operations in Canada on September 25, 2023.
Crypto asset prices are volatile and you can lose money. This article is general information, not financial advice. HoneyBadger is not connected to Binance.
