According to sources familiar with the matter who spoke to CoinDesk, institutional investors are reorganizing their trading portfolios by withdrawing crypto assets from centralized exchanges after the Binance attack.
Sources who spoke on condition of anonymity said the impact of the attack extends beyond Binance and that investors are reassessing the assets they hold on exchanges. Institutions’ turn toward withdrawals has put the security of balances held on trading platforms at the center of attention.
Institutions reassess their exchange balances
Centralized exchanges provide institutional investors with infrastructure for both trading and holding assets. But security issues can affect investors’ access to these funds as well as the balances themselves. Binance’s suspension of withdrawals after the attack brought this risk back into focus.
The total amount of the institutional withdrawals reported in the article and the addresses or platforms to which the assets were moved remain unclear. The reported activity is described as part of investors’ efforts to rebalance their trading portfolios.
Binance estimates losses at $6.3 billion
According to Binance’s estimate reported by CoinDesk, approximately $6.3 billion in assets was stolen in the attack, and approximately $3 billion was later frozen. Co-CEO Yi He had said that all losses resulting from the attack would be covered. Details of the exchange’s trading restrictions and its commitment regarding user funds are available in our previous report.
Jimmy Su, Binance’s chief security officer, also said in a statement to CoinDesk that the company had taken additional protective measures before an official patch was released for the publicly disclosed PHP vulnerability, and then completed the necessary fixes. Su said the company continues to monitor new threats and maintain layered security controls; the statement did not identify the PHP vulnerability as the confirmed cause of the attack.
Market decline accompanies security concerns
Markets saw broad-based selling after the attack, while Bitcoin fell below $77,000. We covered the price moves and $1.55 billion in liquidation data in our market report.
Even before the Binance attack, security firm CertiK had recorded $1.28 billion in industry losses from attacks and exploit incidents in the third quarter of 2026. With this figure up approximately 56 percent from the previous quarter, the question of how much assets institutions will keep on exchanges has now been added to the picture.
Not investment advice.