US$6.3 Billion Hit Binance. What Happens to an Australian Crypto Estate?

US$6.3 billion is the reported scale of the Binance hack. For Australians holding crypto on the exchange, or administering the estate of someone who did, the immediate problem is not just the stolen money. It is whether the platform can make good on its promises, when access will return, and whether anyone in the family knows the account exists.

Binance says it will cover losses. That is an important assurance, but it is not evidence that every customer has already been reimbursed or that every withdrawal has resumed. A digital estate plan needs to preserve that distinction.

What has been confirmed, and what is still developing

TechCrunch reported on 29 October that Binance had confirmed a security incident and temporarily suspended withdrawals on multiple networks. Its spokesperson described the suspension as a precautionary measure. At that point, estimates of the amount stolen varied, and the exchange said it was investigating.

More recent reporting from the Guardian, updated on 31 October Australian time, puts the hack at US$6.3 billion. It quotes Binance co-chief executive Richard Teng saying: “Bottom line, your money is safe, and we’re covering every loss.” The report says Binance has set aside US$6.34 billion to cover stolen assets.

The same report quotes the company saying that deposits and withdrawals were temporarily suspended while security teams checked systems, secured wallet infrastructure and traced affected assets. Those are reported statements about the response, not a live confirmation of the status of any particular Australian customer's account. Check the exchange's official channels for current restrictions before acting.

According to the reporting, an initial investigation pointed to a compromised engineer's laptop, with Binance subsequently describing additional points of breach. Crypto analysis firms have attributed the attack to North Korea. The investigation is developing; neither the laptop explanation nor the attribution should be treated as a complete, final account of everything that happened.

The Australian issue: a company promise is not a deposit guarantee

The Guardian's Australian-focused explainer makes a critical distinction: crypto users do not receive the formal deposit protections that apply to qualifying bank deposits in Australia. An exchange's undertaking to cover a hack is not the same thing as a government-backed deposit protection scheme.

That does not establish that Binance will fail to honour its undertaking. Nor does it establish that every customer will suffer a loss. It does mean families should avoid translating “funds are safe” into “nothing needs checking”. The practical questions are narrower: what assets were recorded, what restrictions apply, and what evidence confirms the eventual outcome?

For someone handling a deceased person's affairs, those questions can become harder. The account holder cannot explain where records are kept, identify unfamiliar transactions or clarify whether a balance was on an exchange or in a separate wallet. A family already dealing with grief should not have to reconstruct that information from scattered emails during a security incident.

Your password cannot repair the exchange

This incident illustrates a limit that digital estate planning often overlooks. Knowing how to find an account is not the same as controlling the infrastructure behind it. A carefully stored password cannot reopen withdrawals that an exchange has suspended. A record of a balance cannot, by itself, prove that an asset is now available to transfer.

The Guardian's explainer describes attackers gaining access to internal systems rather than simply cracking customers' cryptographic keys. On that reported account, this is not a problem that can be reduced to an individual choosing a stronger password. Platform custody creates a separate dependency, even when the account holder has taken sensible security precautions.

There is also a distinction between an exchange account and a self-custody wallet. Your records should explain which is which. Do not assume that a recovery phrase for a separate wallet restores assets held by an exchange, or that an exchange login describes everything a person owned. The family needs an accurate map, not one generic instruction marked “crypto”.

What Australian account holders can do now

Start with verification, not urgency generated by strangers. Binance's statement to TechCrunch explicitly warned users about scams, unofficial links, messages and requests for account information. Use a known official app or a website address you already trust. Do not follow a supposed refund or recovery link simply because it refers to the hack.

Preserve an account statement or transaction export if it is safely available. Record the date, the assets shown, and any restrictions or notices visible at the time. Keep subsequent communications so there is a clear distinction between the balance before the incident, an undertaking to cover losses, and evidence of a completed adjustment or accessible funds afterwards.

Update the private inventory of your digital assets. Include the platform name, the account identifier needed to locate records, and where supporting documents are stored securely. Avoid putting passwords or recovery phrases into a broadly shared document. An inventory should help the right person find the right process without creating a new route for theft.

Do not make an irreversible transfer simply to demonstrate that your estate plan works. If you decide to change custody arrangements once access is available, understand the destination, recovery arrangements and risks first. Self-custody changes the responsibilities; it does not remove the need for reliable records and a considered succession plan.

If you are handling an estate

Treat a deceased person's account as an estate matter, not an invitation to impersonate them. Use the platform's official deceased-account or estate-support process and obtain professional advice where authority or ownership is unclear. Do not send identity documents to an unsolicited “recovery agent”, and do not disclose recovery phrases to someone promising faster access.

Keep a dated record of each request, the reference number, the response and any outstanding requirement. Separate three states in your notes: the account has been located; the platform has accepted or is assessing the estate request; assets have actually been released. One does not automatically prove the next.

The central lesson is not that every Australian should panic about every exchange. It is that a digital estate includes dependencies as well as assets. Binance's reported loss is extraordinary, but the planning question is ordinary: if the platform stops working today, does your family know what you held, where the evidence is, and how to pursue it without making a bad situation worse?

Reporting checked on 31 October 2026 (AEDT). The loss figure, investigation details and Binance's assurances are attributed to the sources linked above. Account restrictions and reimbursement outcomes may change. This article is general information, not legal, financial or tax advice.