CZ Won't Call Binance Hack-Proof After $6.34B Incident

Changpeng Zhao won't hand anyone a promise he can't keep. At an appearance at the Oxford Union, Binance's founder said the exchange cannot guarantee it will never be hit again, arguing that complex information systems can't be made immune to every threat. He added that Binance's security and operational gaps needed to be fixed — not waved off as the work of an unusually sophisticated attacker.

The comments land after Binance's Nov. 3 investigation update, which put the Oct. 30 incident at roughly $6.34 billion in assets involved. The exchange said about $2.85 billion of that has been frozen or intercepted, and that it has reserved enough funds to cover user losses while it replenishes affected assets. That $6.34 billion figure describes the assets caught up in the incident, not losses.

Zhao said the attackers may have spent five or six months getting ready. Their playbook, he said, leaned on fake recruiting pitches and social engineering aimed at Binance staff, followed by artificial intelligence used to study the exchange's systems. He also acknowledged that some basic security procedures weren't enforced strictly enough.

On who should be on the hook for protecting customers, Zhao said user protection should be a platform rule that holds no matter who is running the company. He no longer serves as Binance's CEO. He pointed to the exchange's quick communication about the breach and its pledge to cover user losses as key parts of its response.

The conversation ranged well past the breach — 19 audience questions touched on crypto payments, artificial intelligence and enforcement. Zhao named limited access to banking, friction in cross-border payments and high inflation as problems crypto could help solve, while conceding that fees, compliance, custody and consumer protection remain unresolved headaches.

On AI, Zhao see-sawed between threat and opportunity. He said AI agents paying each other could drive demand for frequent, tiny transactions, giving low-cost digital payment rails a real job. He also noted that public blockchain records let outside analysts flag strange activity — sometimes before a platform spots it itself.