Binance hacked: What the weekend clarified – and who controls your bitcoin

A balance is not your own wallet

After an exchange hack, moving everything to a personal wallet sounds straightforward. Responsibility does not disappear, however. It changes hands. The important question is whether you can protect your own keys reliably. The Binance incident also illustrates that access and ownership are different concerns.

What is confirmed as of 2 November

On 30 October Binance reported an attack against hot wallets on 29 October 2026. The investigation remained open. According to the exchange, an initially suspected compromised laptop did not explain all the access points subsequently discovered. A single technical attack narrative should therefore not be presented as a completed forensic finding.

The weekend changed the picture

In its 1 November recovery update Binance announced phased withdrawal availability and said it had covered around 95% of the affected assets. This is a company statement about replacement funding, not evidence that 95% of the stolen assets have been recovered. Reuters also reported the restart. Availability depends on the particular asset and network; reopening does not establish that every withdrawal is available or every question resolved.

What a private key does

Bitcoin remain recorded on the blockchain. A wallet manages the keys that authorise transactions. With ordinary exchange custody, an app displays an internal customer balance. The exchange operates the infrastructure and processes withdrawals. A strong password protects account access but does not give you control of the signing keys. Buying bitcoin and choosing its custodian are separate decisions.

Relai changes the responsibility

Relai describes its Swiss wallet as self-custodial: keys are held locally on the phone, and its terms state that it keeps no copies of private keys or seed words. Breaking into a company database therefore does not automatically enable an attacker to sign from that wallet. This architectural difference matters, but it does not protect against a compromised phone, phishing or a malicious app. Relai is also a bitcoin service, rather than a direct substitute for every exchange trading feature.

Hardware is not magic

A hardware wallet is intended to separate signing keys from an ordinary computer or phone. Transactions are checked and approved on the device. That extra step helps only when the recipient and amount are actually verified. Lost backups, exposed recovery phrases and carelessly approved transactions remain serious risks. Device provenance, firmware and recovery arrangements also require attention.

Choose a process you can maintain

An exchange can be convenient for frequent trading, in return for reliance on its operator and withdrawal processes. Mobile self-custody suits people able to manage a secure backup. For substantial long-term holdings, a hardware wallet is worth considering as an additional separation. In our view, the right choice depends on the procedure you can follow in everyday use and during a recovery, rather than a security slogan.

Start with a small test

Open the exchange through your familiar app, rather than an alleged compensation link. Check current withdrawal availability. Set up a wallet calmly and keep recovery words offline. Send a small test amount and understand recovery before moving substantial holdings. Never give the words to a support agent. Plan how relatives could follow a recovery procedure without creating an easily accessible copy of your keys.

Control needs a procedure

Self-custody reduces reliance on a custodian while increasing personal responsibility. The Binance incident is a reason to make that choice deliberately. It does not prove that every personal wallet is automatically safer. Information checked on 2 November 2026; the investigation and recovery may continue to evolve.

Sources and advice