Insurers After $6.3 Billion Crypto Heist: D’oh! - Gizmodo
Insurance underwriters are investigating whether crypto clients remain vulnerable to massive cyber heists following the suspected North Korean operation that stole $6.3 billion from Binance last week.
Industry insiders and experts told Reuters that underwriters are expected to investigate whether crypto clients remain vulnerable to cyber heists following the massive theft from Binance. Jacqueline Quintal, financial institutions and digital asset industry leader at insurance broker Marsh, said she wouldn't want to be the individual who renews or writes a policy for a crypto institution only to see another massive theft.
It's easy to see how that could result in higher barriers for policies or more claim rejections.
Experts told Reuters insurance policies that cover losses as huge as Binance's already don't exist, and that the crypto industry, valued at over $2.5 trillion, will face tougher scrutiny when renewing policies. Bloomberg had previously reported Binance insures some executives against personal liability but, unlike other crypto companies, lacked cyber insurance.
Industry Response
Alan Lyons, co-chair of the insurance group at law firm Herrick, told Reuters that a loss of this magnitude prompts underwriters to re-examine their whole crypto book, not just the affected insured. According to Cybersecurity Dive, the general trend for large businesses and cyber insurance has been decreasing frequency of claims but ballooning payouts.
The National Association of Insurance Commissioners (NAIC) wrote in a new report that the average size of claims for businesses with at least $1 billion in annual revenue was $4.4 million in 2025, up 586% since 2021. The Financial Times reported on concerns this year that the overall insurance market may be under-priced relative to actual risk.
Policy Changes
Insurers are likely to demand that crypto firms fix any vulnerabilities related to the Binance fiasco, with scrutiny extending to broader security measures. Policies may carry new exclusions, and tighter wording and clearer exclusions are a likely outcome, Lyons told Reuters.
Marcos Alvarez, managing director of global financial institution ratings at Morningstar DBRS, said it had yet to be determined whether crypto insurers will pay out in a Binance-style incident. Global insurance marketplace Lloyd's has generally required cyber policies to have exclusions for state-backed attacks since 2023.
Emerging Risks
The NAIC noted that while AI-fueled attackers mean "loss ratios may deteriorate," the central problem remains supply chains—the vast web of dubiously catalogued software and hardware components. While the Binance hack reportedly involved a fake job interview and malware in an ad, last year's $1.4 billion Bybit heist involved a compromised third-party developer machine.
Aon broker Kevin Kalinich told the Financial Times that insurers are wary AI deployment introduces systemic risk. The insurance industry can afford to pay a $400 million or $500 million loss to one company... What they can't afford to pay is if an AI provider makes a mistake that ends up in 1,000 or 10,000 losses—a systemic, correlated, aggregated risk.
Related
