In the world of cryptocurrency, few questions generate as much concern as this one: Is Binance safe, or has it ever been hacked? The short answer is yes, but with important nuances that are worth understanding before jumping to conclusions.
Unlike what is often circulated on social media, not all incidents associated with Binance have been direct hacks of the exchange, nor have they involved losses for users. In fact, the history shows a more complex reality: a single relevant attack on the exchange, several incidents within its ecosystem, and a clear evolution in its security measures.
2019: the only direct hack to the exchange
The most significant incident occurred in May 2019. A group of attackers managed to access a Binance hot wallet by combining phishing, malware, and API key misuse techniques.
The result was the theft of approximately 7,000 BTC, which at that time were equivalent to about 40 million dollars.
Binance's reaction was immediate. They suspended withdrawals for about a week, investigated the attack, and fully covered the losses using their security fund, known as SAFU (Secure Asset Fund for Users).
From the user's point of view, this detail is key: no one lost money, something that set an important precedent in the industry.
Important note: This remains the only confirmed hack that has directly affected the exchange.
2022: the 570 million that wasn't a hack to the exchange
In October 2022, headlines once again pointed to Binance with alarming figures: «$570 million hack.» The reality was more nuanced.
The incident affected BNB Chain, a blockchain network linked to the Binance ecosystem, where a vulnerability was exploited in a cross-chain bridge. The attacker managed to fraudulently generate tokens, not directly access user funds on the centralized exchange.
The network paused quickly, validators intervened, and the actual impact was much lower than the initial figure. There were no widespread losses for user accounts on the platform.
The distinction matters: a vulnerability in an external blockchain network does not equate to a breach in the exchange where you keep your funds.
What is SAFU and why is it the key to everything
The SAFU (Secure Asset Fund for Users) fund is the strongest argument Binance has in terms of security, and one that few articles dedicate the attention it deserves.
Binance established it in July 2018, funding it with 10% of all trading fees generated by the platform. Its purpose is clear: to serve as a safety net in the event of hacks, technical failures, or any other incident that could affect users.
In early 2026, the SAFU will hold approximately $1 billion, entirely in Bitcoin, after a conversion completed in February of that year. Binance has published the fund's on-chain address, allowing anyone to verify its balance in real-time. Furthermore, the platform has committed to topping up the fund with its own capital if its value falls below $800 million due to market volatility.
To put it in perspective: when Binance was hacked in 2019 and lost $40 million, they covered the losses without issue. With a $1 billion fund, their response capability to a similar incident is significantly greater.
That said, the SAFU does not cover scenarios such as bankruptcies, serious regulatory issues, or situations analogous to what happened with FTX. It is a security fund for technical incidents, not a bank guarantee.
The comparison that matters most: Binance versus the sector
To understand Binance's history in its real context, it's advisable to compare it with the most relevant episodes in the sector:
| Exchange | Incident | Loss | Compensated users? |
|---|---|---|---|
| Mt. Gox (2014) | Massive hack | +850,000 BTC | No (partial recovery years later) |
| FTX (2022) | Collapse due to mismanagement | +8 billion 1Q-4Q | No |
| KuCoin (2020) | Hacking | ~280 million (Q1–Q4) | Partially |
| Binance | Hot wallet hack | ~40 million Q1–Q4 | Yes, to 100% |
The difference is not in whether incidents occur, but in how they are managed when they do.
How has security evolved after the hack?
After the 2019 attack, Binance significantly reorganized its infrastructure. Today, the majority of funds are kept in cold storage, disconnected from the internet. Hot wallets, which are exposed online, contain a much smaller fraction of the total.
Among the security measures implemented or reinforced since then are:
- Two-factor authentication (2FA) is mandatory for sensitive operations. The safest option is to use an app like Google Authenticator or a physical security key, not SMS.
- Withdrawal address whitelist: Can you configure it so that funds can only be withdrawn to previously verified addresses, blocking any external attempts to divert funds.
- Suspicious Activity Detection Systems Binance monitors unusual patterns and may block trades preventively.
- Proof of Reserves It publishes regular audits showing that user assets are 100% backed. In 2025, the most recent report showed approximately $162.8 billion in fully backed user assets.
So, is it safe to have money on Binance today?
The history shows that Binance has had incidents, but also that it has developed mechanisms to absorb them without passing the impact on to users. Compared to exchanges that have collapsed, leaving their users without funds for years, the difference is substantial.
Nevertheless, there's one unchanging reality: no exchange is completely secure, and the biggest risks today aren't necessarily technical. Regulatory shutdowns, withdrawal restrictions during times of high volatility, and reliance on a centralized platform are factors just as relevant as the risk of being hacked.
Therefore, the recommendation spread among experienced investors remains the same: use the exchange to trade, not to hold all your capital long-term.
- Until 1.000-2.000€: acceptable risk for usual use
- Enter €2,000 and €10,000It's advisable to activate all available security measures and consider diversifying.
- More than 10.000€It is recommended to combine exchanges with your own wallet (hardware wallet) for capital you don't need to trade.
Conclusion
Binance has indeed been hacked, but only directly once, with full compensation to users and a response that contrasted with the sector's major collapses. The rest of the incidents associated with its name correspond to its external ecosystem, not the exchange itself.
The relevant debate today isn't whether Binance can have an incident, but what happens when it does and how you are positioned when it does. A $1 billion SAFU fund, public audits, and a track record of full compensation are strong arguments. But they are not an absolute guarantee.
In a sector without a banking safety net, the best protection remains what you build yourself: diversification, active security measures, and not leaving more on an exchange than you need for trading.
Legal Notice: This article is for informational purposes only and does not constitute financial advice or investment recommendations. Investing in cryptocurrencies involves a high level of risk. Always consult with a qualified professional before making investment decisions.