Crypto Is Getting Better at Absorbing Hacks Than Preventing Them - PYMNTS.com

The question is no longer simply whether crypto companies can reimburse customers after a breach but whether the industry’s security architecture can evolve quickly enough to make these extraordinary reimbursements unnecessary.

An industry built around instantaneous settlement, programmable assets and reduced dependence on financial intermediaries is discovering that some of these same capabilities complicate the controls needed to protect institutional-scale pools of capital.

Years of Blockchain Hacks

The scale of the Binance attack is unprecedented, but the underlying security challenges are not. In 2024, hackers stole approximately $2.2 billion from cryptocurrency platforms across 303 incidents, according to blockchain analytics firm Chainalysis.

That represented a roughly 21% increase in stolen value from the previous year. What was revealing was where attackers concentrated their efforts. Private-key compromises accounted for 43.8% of stolen cryptocurrency that year, while centralized exchanges increasingly became attractive targets.

Japan’s DMM Bitcoin lost approximately $305 million, and India’s WazirX suffered a roughly $235 million breach.

By February 2025, the industry’s largest vulnerabilities had shifted further into the operational systems surrounding digital assets. Hackers stole approximately $1.5 billion from Bybit after compromising the process used to authorize transactions from its wallets.

The attack demonstrated that even sophisticated multisignature custody arrangements could be undermined when the systems presenting transactions to authorized signers could not be trusted.

Infrastructure Vulnerabilities

Across these incidents, the common vulnerability is not necessarily blockchain technology itself. It is the infrastructure connecting human decisions, privileged credentials, transaction approvals and irreversible transfers.

The distinction matters because improving the cryptography underlying a blockchain does little to protect an organization whose authorized employees or systems have been manipulated into approving a fraudulent transaction.

Blockchain networks can execute transactions continuously, across borders and without requiring the same layers of intermediary approval. Once a valid transaction is confirmed, reversing it generally requires extraordinary intervention rather than a routine administrative process.

Traditional financial infrastructure, by contrast, has spent decades developing mechanisms that deliberately slow certain transactions. Banks impose approval hierarchies, settlement windows, transaction limits, fraud reviews and procedures for reversing unauthorized activity.

These controls introduce friction, but they also create opportunities to interrupt suspicious transfers before losses become permanent.

Reimbursement vs. Resilience

Binance’s reimbursement demonstrates that large crypto businesses can mobilize financial resources after an attack. The company has replaced all tokens stolen in the October cyberattack that drained approximately $6.3 billion from the exchange.

This comes as authorities in the United States disclosed that more than $2.7 billion in stolen assets had been frozen, including more than $1.2 billion subject to court-authorized seizure or restraint.