Fed and OCC contact US banks after $6.3B Binance hack to check systems

5 Nov 2026

5 Nov 2026, 18:04 UTC+01:00

Regulation TradeReviewed News Desk

Fed and OCC supervisors contacted US banks on Monday morning, November 2, after last week’s $6.3 billion Binance hack, asking whether systems showed unusual activity or service disruptions. The outreach, reported by Reuters on November 5 and confirmed across multiple outlets, treats the largest crypto theft on record as a possible risk to traditional finance at a time when bank-crypto links have tightened.

What regulators asked

According to several people familiar with the matter cited by Reuters, Federal Reserve and Office of the Comptroller of the Currency supervisors started reaching out to banks early in the week. The questions focused on unusual activity, service disruptions and whether institutions had spotted cybersecurity weaknesses after the October 29 breach.

One bank source told Reuters there were no disruptions. Staff prepared customer talking points in case clients asked about the hack, but received few inquiries. The Fed and OCC declined to comment. There is no public evidence that US banks were compromised; the checks appear precautionary rather than a response to a confirmed intrusion.

Banks run their own diagnostics

Separately, banks have been studying the Binance attack and running diagnostics on their own systems, according to two people familiar with those efforts. Within hours of the hack, a cybersecurity team at one of the largest US banks contacted counterparts at Binance. That team is preparing an internal report that is expected to feed a systems review and possible cybersecurity updates. It was not yet clear whether the bank would be vulnerable to the same tactics used against Binance.

One person familiar with the discussions said a big concern is that artificial intelligence models are evolving quickly, making it harder for banks to keep up with attackers. Institutions are putting more resources into reviews and patches of cybersecurity code.

Binance said it was unaware of conversations between bankers and regulators, and of whether the hack had affected US banks. “We are in close contact with regulators all over the world, keeping them up to date on this security breach,” a Binance spokesperson told Reuters.

How the Binance hack worked

Context matters for why bank supervisors care. The October 29 theft emptied hot wallets across multiple chains and is widely described as the largest crypto heist on record. Blockchain analysis firms Chainalysis and TRM Labs have linked the operation to TraderTraitor, a North Korea-associated unit. Reporting summarized by Bitcoin Magazine describes a months-long campaign that combined a fake job interview, poisoned software, malware that evaded endpoint detection and abuse of an internal AI tool aimed at wallet engineers.

Binance has said it froze or intercepted about $2.85 billion of the stolen assets and replenished roughly 98% of affected tokens from its own funds, then reopened withdrawals in stages. Social engineering, malicious downloads and compromised internal tools are risks every large financial institution faces, which helps explain why bank cyber teams moved within hours and why supervisors followed up early the next week.

Closer bank-crypto ties raise the stakes

The timing of the outreach is not accidental. Over the past year and a half, US regulators have eased earlier restrictions on bank crypto activity. The OCC in March 2025 rescinded its requirement that national banks get supervisory nonobjection before crypto custody and related activities. The Fed later withdrew guidance that had required state member banks to notify it before starting crypto work. As more banks custody bitcoin, issue stablecoins or serve exchanges, a breach at a major crypto platform becomes a question for bank supervisors too.

That link cuts both ways. French bank Crédit Mutuel Arkéa confirmed a separate cyberattack this week involving fraudulent transfers from its own account, with on-chain investigators putting suspected crypto-linked losses in the nine-figure range. We covered that case in our report on the Crédit Mutuel Arkéa hack. There is no established connection to Binance, but both incidents underline how TradFi and crypto rails now share attack surfaces.

What it means for traders

For traders, the practical takeaway is not that US banks were hit. It is that regulators and large banks are treating exchange security as systemic risk. That points to more scrutiny of how banks connect to exchanges, how custody and stablecoin activity is supervised, and how platforms handle withdrawal freezes and proof of reserves after a breach.

Platform choice still matters. Our crypto exchange comparison ranks venues on security, fees and regulation. Our BingX review (our #1 pick) and OKX review (#2) cover proof of reserves, account protection and verification in detail. Prefer platforms with strong reserves disclosures, withdrawal whitelists and clear incident response over venues that stay quiet when something goes wrong.

What to watch next

• Whether the Fed or OCC issues public guidance tied to the Binance case.
• Whether large US banks disclose cybersecurity updates after their internal reviews.
• Further recovery, freezes and attribution details around the Binance theft and any confirmed TradFi spillover.

This is not financial advice.

Follow TradeReviewed on X and Telegram: you hear crypto and trading news here first.

Related reviews

• Bingx review
• Okx review

Sources

• Kitco / Reuters: Binance hack prompted US regulators to check in on bank systems, sources say
• Bitcoin.com News: Fed and OCC Probe Bank Security After Binance's $6.3B Hack: Report
• Bitcoin Magazine: Fed and OCC Quiz U.S. Banks After $6.3 Billion Binance Hack
• Bloomberg Law: Binance Hack Led US Regulators to Check on Bank Systems (Reuters)

News is for information only and is not financial advice. More crypto news