Article produced with artificial intelligence systems and published under the editorial responsibility of Amelia Tomasicchio. How we work
Binance’s $6.3 billion crypto heist, the largest theft on record, is prompting insurance underwriters to examine crypto companies’ security and exposure to the exchange more closely. The response is expected to focus on tougher questions at renewal rather than a broad withdrawal of coverage, while the loss exceeds the protection available under any existing crypto insurance policy.
Summary
Key takeaways
- The FBI linked the Binance attack to a North Korea-linked group.
- Underwriters are expected to investigate clients’ Binance exposure and similar security vulnerabilities.
- Available insurance cannot absorb a theft of this size.
- State-backed attack exclusions add another potential obstacle to claims.
How the record Binance crypto theft unfolded
Hackers compromised the computers of two Binance software engineers through a fake job interview and malicious software concealed in an advertisement, according to a report Binance published this week. They then used a third computer to drain the cryptocurrency.
Binance described a multi-stage operation that began in June and involved successive security breaches before the theft. The FBI attributed the attack to a North Korea-linked group.
That attribution has implications beyond identifying the attackers: many insurance policies exclude state-backed cyberattacks, creating a separate coverage question alongside the sheer size of the loss.
Binance’s crypto heist brings tougher insurance questions
Insurers are expected to ask crypto businesses about their exposure to Binance when they apply for coverage or renew policies. David Rogers, managing director of financial institutions at Gallagher, said those questions would become more specific as details of the attack emerge.
“Insurers will be asking questions specific to Binance. Their first question will be very simple: what is your exposure to them and do you have any money with them?” Rogers said.
Policies typically last one year. Renewal gives underwriters an opportunity to reassess risks, request updated information and set additional security requirements before extending protection.
According to Jacqueline Quintal, Marsh’s financial institutions and digital asset industry leader, clients will likely face more scrutiny regarding their exposure to a comparable attack, though insurance capacity, pricing and coverage are unlikely to shift significantly.
Peter Hardy, a London-based insurance lawyer at Reed Smith, said a specific flaw uncovered in the Binance investigation could lead insurers to require that the weakness be addressed elsewhere. The scrutiny would therefore extend beyond general cybersecurity checks to vulnerabilities identified through the investigation.
Coverage limits and state-backed attack exclusions
Marcos Alvarez, managing director of global financial institution ratings at Morningstar DBRS, said that a loss on the scale of Binance’s would exceed what any existing crypto insurance policy could cover. Even payouts from multiple policies would fall short of covering the theft.
According to Alvarez, cyber policies underwritten through Lloyd’s have typically carried exclusions for state-sponsored attacks since 2023. Attribution to a state can lead insurers to dispute or deny claims, he said, adding that the effectiveness of those exclusions in a major geopolitically driven loss remains untested.
US and South Korean authorities and cybersecurity experts have accused North Korea of using state-linked cyber units for espionage and financial theft. Pyongyang has denied those allegations.
Alan Lyons, co-chair of the Insurance, Reinsurance & Dispute Resolution Group at Herrick, said that losses of this magnitude typically lead underwriters to reassess their full crypto portfolio, extending beyond just the business directly affected. Those reviews encompass total exposure, policy language and limits within individual coverages. He described tighter wording and clearer exclusions as the predictable response.
A growing market faces closer underwriting
The insurance response to Binance’s crypto heist is not expected to include a broad retreat from the sector.
The coverage limitations affect a cryptocurrency industry valued at more than $2.5 trillion. Expansion in custody services and wider cryptocurrency adoption are expected to support continued growth in insurance demand.
Grand View Research projects that the global crypto insurance market will grow from $13.8 billion in 2026 to $192.7 billion by 2033.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.
