Last updated: October 30, 2026
When a crypto exchange is hacked, it usually pauses withdrawals first, then does one of three things: covers the loss from its own reserves or insurance fund, spreads the loss across all customers as a haircut, or, if the hole is too big, goes bankrupt and repays creditors years later. Which one you get depends on the exchange's size, reserves and honesty, not on you. Recent big exchanges covered their losses in full: Bybit in 2025 and Binance after its $6.3 billion hack in October 2026. History has worse outcomes too. Below: real cases, what happens step by step, and how to limit your exposure.
- 3 possible outcomes: cover, haircut, bankruptcy
- 36% haircut at Bitfinex in 2016
- ~10 years for Mt. Gox repayments to begin
- Minutes of exposure with an instant swap
What happens, step by step
- Withdrawals pause, sometimes deposits too, while the exchange finds the hole and stops further losses.
- The exchange announces the loss — sometimes in hours, sometimes after days of "maintenance" messages.
- Freezes and tracing: stablecoin issuers can freeze stolen USDT or USDC, and analytics firms track the rest.
- The coverage decision: the exchange either absorbs the loss or announces how customers will share it.
- Staged reopening: withdrawals usually return network by network, often with lower limits and long queues.
Real cases and how they ended
| Exchange | Year | Loss | Outcome for users |
|---|---|---|---|
| Mt. Gox | 2014 | ~850,000 BTC | Bankruptcy; repayments only began in 2024 |
| Bitfinex | 2016 | 119,756 BTC | 36% haircut on all accounts, paid back with tokens within about 8 months |
| Coincheck | 2018 | ~$530M in NEM | Reimbursed in yen |
| Binance | 2019 | 7,000 BTC | Covered by the SAFU fund |
| WazirX | 2024 | ~$230M | Withdrawals frozen for months; losses shared under a court-supervised restructuring |
| Bybit | 2025 | ~$1.5B in ETH | Covered in full; withdrawals kept working |
| Binance | 2026 | ~$6.3B | Binance says all losses covered by SAFU and company funds; withdrawals paused |
The pattern: big, profitable exchanges with real reserves tend to cover losses; smaller or already-weak exchanges pass them on to customers. And whatever the outcome, your coins are stuck until withdrawals reopen.
Why your balance isn't really yours
On a custodial exchange, your balance is a promise: the exchange owes you coins, but the coins sit in its wallets, mixed with everyone else's. If those wallets are drained, you're a creditor, not an owner — that's the meaning of not your keys, not your coins. Proof of reserves can show that an exchange holds enough coins on a given day, but it can't stop a hack.
What to do if your exchange was hacked
- Get information only from the official app or site. Hacks bring a wave of fake "compensation" and "priority withdrawal" pages — see fake support scams.
- Screenshot your balances and history in case there's a claims process later.
- Don't pay anyone who promises to recover your funds — recovery scams follow every big hack.
- Withdraw what you don't need once withdrawals reopen, and expect delays.
- If you're stuck for weeks, follow what to do if an exchange freezes your funds.
How to limit your exposure
- Keep on an exchange only what you're actively trading. Savings belong in your own cold wallet.
- Use instant swaps for conversions. A non-custodial swap service holds your coins only for the minutes the swap takes, and pays out to your own wallet — see custodial vs non-custodial swaps.
- Spread large amounts instead of keeping everything with one company.
- Check a service's history before trusting it — incidents and user reports are on the no-KYC track record.
Frequently asked questions
Do I lose my money if a crypto exchange gets hacked?
Not always. Large exchanges like Binance and Bybit have covered hacks in full. Smaller ones have cut every balance by a percentage or gone bankrupt. In every case, withdrawals are usually paused for a while.
What is SAFU?
The Secure Asset Fund for Users is Binance's emergency fund for covering losses such as hacks. Other exchanges have similar insurance funds, but their size and rules differ, and none are government guarantees.
Is crypto on an exchange insured?
Usually not like a bank deposit. Some exchanges have private insurance or their own funds, but coverage is limited and at the exchange's discretion.
How long are withdrawals paused after a hack?
From a few hours to months. Healthy exchanges usually reopen within days, network by network. Long, vague pauses are a warning sign.
Are instant swap services safer than exchanges?
They hold your coins for much less time — only the minutes a swap takes — and pay straight to your wallet, so there's no long-term balance to lose. Pick ones with a good track record.
Convert without leaving a balance anywhere: compare live offers on /swap, for example BTC → XMR or USDT → BTC. No account, no ID, no logs.