The $6.3 Billion Binance Heist Is About to Make Crypto Insurance Much Harder to Get
Last week's record $6.3 billion Binance heist is prompting insurers to scrutinize crypto companies' security more closely, with tougher questions expected at policy renewals — and experts say no available policy could cover a loss of that scale.
The $6.3 Billion Binance Heist Is About to Make Crypto Insurance Much Harder to Get
Last week's record $6.3 billion Binance heist is prompting insurers to scrutinize crypto companies' security more closely, with underwriters expected to probe whether clients are vulnerable to a similar attack when they seek new coverage or renew existing policies, industry insiders and experts said.
Insurers are not expected to broadly retreat from the crypto sector or reduce the availability of coverage. But the largest crypto theft on record could bring tougher scrutiny of crypto firms' exposure to Binance and any weaknesses identified in the attack, which the FBI has blamed on a North Korea-linked group.
The first question insurers will ask is a simple one. "Insurers will be asking questions specific to Binance. Their first question will be very simple: what is your exposure to them and do you have any money with them?" said David Rogers, managing director of financial institutions at insurance broker Gallagher.
As investigators piece together how the breach unfolded, those questions are expected to grow more granular, potentially altering underwriting behavior across the crypto book. "A loss of this magnitude prompts underwriters to re-examine their whole crypto book, not just the affected insured, reassessing aggregate exposure, wordings and sub-limits across the portfolio," said Alan Lyons, co-chair of the insurance, reinsurance and dispute resolution group at law firm Herrick. The predictable result, he said, is tighter policy language and clearer exclusions.
The attack also underscores the limits of the insurance coverage available for the fast-growing industry, which is worth more than $2.5 trillion. No available crypto insurance could cover a loss of the scale suffered by Binance, experts said, while many policies have exclusions for state-backed cyberattacks. Lloyd's of London has generally required cyber policies to exclude state-backed attacks since 2023, and the Binance loss exceeds the capacity of any single available policy, said Marcos Alvarez, managing director of global financial institution ratings at Morningstar DBRS.
Not everyone expects a sharp shift. Jacqueline Quintal, who leads Marsh's financial institutions and digital asset practice, said she does not expect material shifts in capacity, pricing or coverage. But scrutiny may go beyond broad cyber controls to the specific vulnerabilities identified in the Binance investigation. Peter Hardy, a London-based insurance lawyer at Reed Smith, said that if the probe reveals a distinct flaw in the exchange's defenses, other insurers can be expected to require that it be fixed before extending cover.
According to a report that Binance published this week, hackers used a bogus job interview and software hidden in an advertisement to compromise the computers of two Binance software engineers before using a third computer to drain $6.3 billion worth of crypto. The world's largest crypto exchange detailed a multi-stage hacking endeavor that began in June and set off a series of security breaches culminating in the theft.
For crypto firms, the implications of their insurance will likely become clear at their next renewal, executives said. The market is still growing fast — Grand View Research projects the global crypto insurance market will grow to $192.7 billion by 2033 from $13.8 billion in 2026 — but after the biggest theft in the industry's history, buying that cover is about to come with harder questions.
Sources
What's Your Reaction?
Like
0
Dislike
0
Love
0
Funny
0
Angry
0
Sad
0
Wow
0