Binance’s $6.3 Billion Hack: How Crypto Insurance Works - Insurance Journal
Hackers stole $6.3 billion from Binance in the world's biggest crypto heist, highlighting how cryptocurrency exchanges insure digital assets against theft and cyberattacks.
The unprecedented theft has put a spotlight on how cryptocurrency exchanges protect their digital assets through insurance. Coverage varies significantly based on how assets are stored, how hackers gain access and the specific terms of the policy.
Limited regulation and volatile crypto prices have long made insurers wary of the sector, despite growing demand for protection against digital asset theft and claims against company executives. While both crime and demand for protection have tracked cryptocurrencies' meteoric rise, underwriting such risks remains a niche business offered largely by specialist insurers in the Lloyd's market and in Bermuda.
Digital Asset Insurance
Digital asset insurance is a range of policies designed to protect cryptocurrency exchanges, custodians and other companies operating in the sector against financial losses from theft, cyberattacks, technology failures and other business risks. Unlike traditional insurance, these policies are tailored to risks associated with blockchain technology, including the theft or loss of private keys, wallet security breaches, smart contract vulnerabilities and failures in digital asset custody.
The global crypto insurance market was valued at $9.37 billion in 2025 and is projected to reach $184.98 billion by 2033, according to Data Bridge Market Research. The research firm cited growing institutional adoption of cryptocurrencies and rising incidents of cyberattacks and digital asset theft among the factors driving demand.
Coverage can include several types of policies: crime insurance for theft, social engineering and scams; cyber liability for breaches, hacks and regulatory response; errors and omissions insurance for software bugs, smart contract failures; directors and officers insurance for lawsuits targeting executives; and technology liability for infrastructure providers.
Loss Coverage
When a crypto exchange suffers a hack, losses can be covered through a combination of insurance payouts, the company's own capital and emergency funds set aside to compensate customers. The extent of coverage depends on the policies held by the exchange, including their limits, deductibles and exclusions.
Some exchanges maintain reserve funds to reimburse customers following security breaches. Binance established the Secure Asset Fund for Users (SAFU) in July 2018 as an emergency reserve to protect users in extreme cases, such as security breaches or platform-level incidents. As of 2026, the SAFU fund holds crypto assets worth roughly $1 billion, entirely in bitcoin.
Payout Prevention
Exclusions that allow insurers to deny certain claims are common in policies covering digital assets as well as the personal liabilities of directors and officers at cryptocurrency companies. Common exclusions include value fluctuations, fraudulent acts by the policyholder and unsecured or negligent key management.
Digital asset firms and, increasingly, their institutional clients need to understand precisely what is covered, where exclusions and sublimits apply, and which risks are retained.
Most standard crime insurance policies do not cover cryptocurrency losses, as they were originally designed to protect physical property such as cash, securities and precious metals. Traditional cyber liability policies also do not always cover the value of digital assets stolen in a hack.
Insurers examine how a breach occurred, which systems were compromised and whether the resulting loss falls within the policy's coverage. They may also assess whether the exchange followed required security procedures, including controls over private keys, wallet access and transaction approvals.
Related
