Binance hack aftermath puts stablecoin freeze rules under scrutiny

Binance’s pledge to cover customer losses has so far separated the $6.3 billion hack from the kind of broader confidence shock that can follow a major exchange breach. Daily net outflows fell to $458 million in the 24 hours before Monday’s reading, from $6.1 billion after withdrawals resumed on Nov. 2.

BitcoinBitcoinThe first and largest cryptocurrency, launched in 2009. Its supply is capped at 21 million coins, which is why supporters call it digital gold.Full explanation in the glossary → declined as much as 5.7% in the first five days following the Oct. 29 attack. That was materially smaller than the roughly 13.6% fall after the 2025 Bybit hack and the 9.9% decline following the 2018 Coincheck theft. Comparisons have limits: market conditions and the assets stolen differed in each case. Still, Binance’s balance-sheet backstop appears to have reduced the immediate risk of a run spreading across trading venues.

At the delayed quote timestamp, BNB traded at $686.52, up 0.47%. Bitcoin was at $74,740.66, up 0.21%, while EtherEthereumThe second-largest crypto network and its currency, ether (ETH). Unlike bitcoin it runs smart contracts, so stablecoins, DeFi and tokens are built on it.Full explanation in the glossary → changed little at $2,124.76, up 0.18%.

Containing customer losses does not end the security problem. Hackers linked to North Korea allegedly created six memecoinsMemecoinA cryptocurrency born from an internet joke or meme, with no real use behind it — Dogecoin is the best known. Its price is driven purely by hype and can collapse just as fast.Full explanation in the glossary → to launder 117,000 NEAR, valued at about $430,000, from the Binance theft.

The episode illustrates a persistent asymmetry. Centralized issuers can immobilize certain stablecoinsStablecoinA cryptocurrency pegged to a stable asset, usually the US dollar (USDT, USDC). Used to move money between exchanges and to park funds without leaving crypto.Full explanation in the glossary →, but attackers can seek to swap into assets without comparable issuer controls or use newly created, thinly traded tokens to obscure transaction paths. The reported NEAR transfers are small beside the total theft, yet they show that recovery and tracing remain active after the initial breach.

NEAR traded at $3.61, up 1.18%, at the delayed quote time. Its price movement alone does not establish a link between market trading and the alleged laundering activity.

About $2.85 billion of funds connected to the attack was frozen, with 94% of that amount held in stablecoins. The scale of those freezes is the strongest evidence that issuer-level controls can interrupt theft proceeds before they are converted into less controllable assets.

The attackers reportedly exchanged $325 million of stolen USDT for Ether within the first hour. Tether’s first major freeze came 37 minutes after stolen funds reached the main attacker wallet, followed three minutes later by Circle’s action against USDC. Speed mattered because Ether cannot be frozen by a stablecoin issuer in the same way.

That success comes with a trade-off. Freezing authority can protect victims, but it gives private issuers significant discretion over assets moving across jurisdictions. A system designed only around rapid action, without clear tests and review, can create a different set of legal and operational risks.

The case strengthens the argument for explicit stablecoin-freeze requirements in the UK, rather than reliance on ad hoc cooperation during a high-profile attack. The central policy question is not simply whether issuers should be able to freeze funds, but under what trigger, within what timeframe and with what avenue for challenge.

The UK’s cryptoasset regime requires trading platforms to conduct due diligence and publish disclosure documents before listing coins, including overseas-issued stablecoins; it takes effect on Oct. 25, 2027. The Bank of England is also finalizing a code of practice for systemic sterling stablecoin issuers by year-end. Neither framework establishes a specific obligation to freeze stolen funds.

Britain cannot directly dictate the conduct of overseas issuers simply because their tokens circulate there. It can, however, attach conditions to access to UK trading platforms. Requirements for a contactable response team, documented emergency procedures and transparent decision standards would address the operational gap exposed by the hack, while preserving scrutiny over how freeze powers are used.

The absence of an immediate contagion event should not be mistaken for a complete resolution. The theft remains unusually large, and continued efforts to move funds can test monitoring systems long after exchange withdrawals normalize.

Near-term cryptoCryptocurrencyDigital money that lives on a blockchain instead of a bank’s ledger. Its price is set purely by supply and demand, so it swings far more than shares.Full explanation in the glossary → pricing has also been shaped by macroeconomic expectations. Market participants were focused on the Nov. 10 US consumer-price reading and its implications for the Federal ReserveFederal ReserveThe US central bank. It sets the key interest rate for the dollar, and its decisions and comments move markets worldwide.Full explanation in the glossary →, with an 80% probability priced for a rate increase at the Dec. 9 meeting, up from 69% a month earlier. That backdrop helps explain why a contained exchange shock has not become the market’s sole driver.

The more durable consequence may therefore be regulatory rather than directional: a clearer distinction between voluntary emergency freezes that work in a crisis and formal, accountable rules that can be applied beyond the largest platforms.