U.S. Bank Regulators Probe Banks After $6.3B Binance Heist

This week, U.S. bank regulators reached out to banks to examine if their systems contained any weaknesses following the previous week's $6.3 billion hack of Binance, Reuters reported on Thursday, citing several people with knowledge of the matter.

On Monday morning, supervisors from the Federal Reserve and the Office of the Comptroller of the Currency started contacting banks, inquiring about any abnormal activity or service interruptions.

This outreach indicates that regulators view the largest crypto theft in history as a potential threat to traditional finance, not merely a crypto exchange issue, at a time when connections between banks and the crypto sector have strengthened.

Banks Conduct System Diagnostics

A source at a bank that was contacted by regulators stated to Reuters that its services had experienced no disruptions. Staff prepared discussion points for customers but have since received very few inquiries.

According to two people familiar with the initiatives, banks have been analyzing the attack and performing diagnostics on their own systems to ensure they can defend against a similar incident.

Within hours of the breach, a cybersecurity team from one of America's biggest banks contacted their counterparts at Binance. This team is preparing an internal report that will prompt a system review and potentially cybersecurity upgrades. It remains uncertain whether the bank is susceptible to the same methods.

One individual said the primary concern is that AI models are advancing rapidly, making it difficult for banks to keep pace with hackers. Banks are allocating significant resources to reviewing and fixing their cybersecurity code.

Binance stated it was not aware of any discussions between banks and regulators, nor whether the hack affected U.S. banks.

"We are in close contact with regulators all over the world, keeping them up to date on this security breach," a Binance spokesperson said.

How the Binance Attack Occurred

The worry over AI aligns with the attack's progression. Binance said the theft started with a false job interview and continued for five months before any funds moved. The operation involved a malicious software download, a staged hiring process, malware that bypassed endpoint detection, and an internal AI tool that the attackers used against the company's wallet engineers.

On Oct. 29, funds started flowing out of Binance hot wallets across various blockchains. Blockchain analytics companies Chainalysis and TRM Labs connected the hack to TraderTraitor, a group linked to North Korea.

Four days later, Binance gradually reopened withdrawals, beginning with bitcoin. The exchange said it had frozen or intercepted approximately $2.85 billion of the stolen assets and replenished 98% of the affected tokens using its own funds.

None of the methods described by Binance are exclusive to crypto. Social engineering, malicious downloads, and compromised internal systems are risks that all big financial institutions face, helping explain why bank cybersecurity teams acted within hours.

Tighter Links, Stricter Oversight

These checks follow a period of 18 months during which U.S. regulators cleared obstacles for banks to engage more in crypto. In March 2025, the OCC eliminated its rule requiring national banks to obtain supervisory nonobjection prior to offering crypto custody and stablecoin services. The following month, the Fed removed guidance that had required state member banks to inform it before initiating crypto activities.

With more banks holding bitcoin, issuing stablecoins, and serving exchanges, a breach at a major crypto platform becomes a concern for bank regulators as well.

Traditional banks are also not immune to major thefts. French bank Credit Mutuel Arkea confirmed a cyberattack on Wednesday that enabled unauthorized transfers from its own account, which an on-chain investigator estimates at over $133 million. The bank has not verified that amount and stated that customer assets were unaffected.

Neither the Federal Reserve nor the OCC has publicly issued any new guidance related to the Binance hack.