Binance paused withdrawals after a huge hack — how do you protect crypto you keep on any exchange?

TechCrunch reported on October 29 that Binance paused withdrawals as hackers were suspected of stealing billions in a cyberattack; Wired put the reported theft at $6.3 billion in about 20 minutes. Whatever the final facts, the protection steps are the same on any exchange: keep long-term holdings in your own hardware wallet, use passkeys or an authenticator app — not SMS — turn on a withdrawal address allowlist, and never trust urgent ‘verify your wallet’ links.

Short answer: TechCrunch reported on October 29 that Binance paused withdrawals as hackers were suspected of stealing billions of dollars in crypto in a cyberattack, and Wired reported the theft at $6.3 billion, pulled off in about 20 minutes. Those are early reports, not settled facts — and claims about who did it are unverified, so treat them that way. What you can settle today is your own setup: money you cannot afford to lose should not sit on any exchange longer than it needs to.Why it matters: an exchange account is an IOU — convenient for trading, but the coins are in someone else’s vault, behind someone else’s security.

When withdrawals pause, even honest customers wait. The steps below take under an hour, work on every major exchange, and protect you in ordinary times too, when the thief is a phishing email rather than a headline hack.Protect your crypto, step by step:1. Move long-term holdings to a hardware wallet you control.

Keep only what you are actively trading on the exchange; write the recovery phrase on paper, never in a photo or a notes app.2. Turn on passkeys or authenticator-app 2FA — not SMS. Text-message codes can be stolen with a SIM swap; an authenticator app or passkey cannot be phished the same way.3.

Switch on the withdrawal address allowlist, so funds can only leave to addresses you approved in advance, ideally with a waiting period for new ones.4. Never click “verify your wallet” links from urgent emails or DMs. During a hack scare, fake verification pages are the second wave of the attack.5.

Check status only on official channels you typed in yourself — the exchange’s own app or the address you entered by hand, never a link from a message or a search ad.Pro tip: The common mistake is moving everything in a panic during the scare itself. Scam sites spike exactly then. Slow down, use your saved bookmarks, and double-check the first address character by character.Ad’s take: “Not your keys, not your coins” is an old saying because it keeps being true.

An exchange is a shop, not a safe — shop there, then take your purchase home.