Binance's estimated costs from regulatory penalties and hacking incidents have reached about $10.7 billion, an amount equal to roughly 56% of the exchange's projected $19.2 billion in pre-tax profit from 2021 through 2025, according to calculations by K33 Research analyst Vetle Lunde. The estimate places the financial burden of enforcement actions and security failures alongside one of the industry's most profitable trading businesses.
Known regulatory penalties account for approximately $4.34 billion of that total. The largest component is Binance's $4.32 billion U.S. criminal settlement reached in 2023, while fines imposed on local Binance entities in other countries add about $20 million, according to the K33 calculation.
Estimated losses associated with hacks account for the remaining $6.38 billion. That figure includes $6.34 billion reserved in connection with the latest incident cited in the analysis, plus the value of 7,000 BTC stolen from Binance in 2019. Roughly $3 billion of the recently stolen assets has been frozen, though the final amount that can be recovered has not been established.
The figures show how the economic cost of operating a major centralized crypto platform extends beyond staffing, technology and market-making expenses. Large enforcement settlements can consume years of operating profit, while a major breach can force an exchange to commit substantial capital to reimburse users, replace assets or maintain confidence in its custody systems.
Binance's tracked assets have fallen more than 11% since Oct. 29 to about $128.3 billion, according to the figures provided. Asset declines can reflect market movements, withdrawals or changes in the wallets being tracked, so they do not by themselves establish the cause of the reduction. They nevertheless arrive during a period in which security concerns have again become a central issue for centralized trading venues.
Mercado Bitcoin reports wallet security incident
Brazilian exchange Mercado Bitcoin said a security incident on Monday led to more than $46 million in cryptocurrency being moved from its wallets. The platform paused deposits and withdrawals for several hours, though blockchain activity linked to the incident continued after the suspension.
Addresses associated with the event showed thousands of small Ether deposits being sent into a single wallet. Security monitoring described the theft as relying on standard blockchain transfers rather than an exploit of a smart contract, a distinction that points toward compromised wallet controls or transaction authorization rather than a flaw in decentralized code.
As of 16:42 UTC, stablecoin issuers Tether and Circle had frozen about $6.2 million of assets linked to the incident, according to the monitoring data. More than $20 million had been sent to a newly created wallet, while another $20 million remained in addresses identified as connected to the theft. The reported addresses continued to hold all 106 BTC involved.
The ability of stablecoin issuers to freeze tokens can limit an attacker's options, particularly when stolen funds move through USDT or USDC. It cannot recover assets automatically, and it has less reach over cryptocurrencies such as Bitcoin and Ether once they have been transferred through wallets or converted into other assets.
South Korean regulators review exchange safeguards
South Korea's Financial Services Commission held an emergency security inspection meeting on Nov. 2 with representatives from Upbit, Bithumb and Coinone. The meeting came ahead of a broader financial-industry security review scheduled for Nov. 5.
Under South Korea's Virtual Asset User Protection Act, exchanges are required to store at least 80% of customer virtual assets in offline cold wallets. Cold wallets are storage systems kept disconnected from the internet, reducing exposure to remote theft compared with online hot wallets used for routine withdrawals and trading operations.
Reported cold-wallet ratios were above 99% at Upbit, about 94% at Bithumb and around 85% at Coinone. Digital X and Gopax were reported to hold ratios just above the statutory 80% threshold. The differences may shape the regulator's review, since platforms operating closer to the minimum have less buffer if their online-wallet requirements increase during periods of higher customer activity.
The Korean review follows a pattern in which major exchange breaches quickly draw regulatory attention to custody arrangements. Rules mandating cold storage do not eliminate risks from compromised internal systems, employee access or withdrawal procedures, but they reduce the amount of client assets immediately reachable through internet-connected infrastructure.
Security concerns coincide with a weaker token market
Several large cryptocurrencies posted losses over the previous 24 hours in the market data supplied. Bitcoin fell 1.35%, Ether declined 0.57%, Solana dropped 1.71% and BNB lost 1.31%. Smaller or more volatile tokens saw sharper moves, with ZEC down 5.80% and NEAR down 8.43%. XRP was among the exceptions, rising 0.79%.
Ether had already endured a difficult October, falling 16.1% during the month and recording its second-worst October performance since 2016, according to the supplied figures. The decline ended a three-month run of gains.
Bitcoin's third-quarter performance offered a different picture. Bitcoin gained 42.7% in the quarter, while long-term holders reduced their holdings by 248,000 BTC, valued at about $17.4 billion in the cited data. A report from 21shares said spot Bitcoin ETFs had overtaken public companies as the main source of Bitcoin demand.
That change places ETF flows more centrally in Bitcoin's market structure. Public-company treasury buying had been a visible source of demand during earlier parts of the cycle, but exchange-traded funds provide a route for traditional brokerage accounts and registered portfolios to gain exposure without directly managing Bitcoin.
Tokenized securities face corporate resistance
Tokenized equities also face friction from established companies. Disclosures related to OKXICE's stock-tokenization proposal showed that 12 additional companies filed objections, bringing the number of objectors to 50 out of the original 63 planned names. Nvidia, Costco, Nike, Reddit and CrowdStrike were among the added companies.
The objections suggest that stock-tokenization projects remain constrained by issuer rights, branding, shareholder-record rules and the question of whether a token represents direct ownership, a derivative claim or another form of exposure.
The New York Stock Exchange is pursuing a more conventional institutional route. It said it is working with Broadridge Financial Solutions on on-chain governance and digital transfer-agent services for a planned tokenized stock-trading platform. The proposed services would cover shareholder records, corporate communications and proxy voting through supported wallets, broker platforms or ProxyVote.
That structure would connect tokenized trading with the administrative systems that govern listed shares, rather than treating blockchain settlement as a standalone trading product.
Worried about hacks after Binance’s troubles? Strengthen your defenses by reading this guide on major crypto security lessons.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
