CZ Says Binance Restored Withdrawals in Two Days After $6.3B Hack

CZ Recalls the $6.3B Binance Breach

Binance founder Changpeng Zhao, known as CZ, has given his fullest account yet of the roughly $6.3 billion hack that struck the exchange on Oct. 29, the largest security breach in crypto's history. Speaking on Tuesday in a Talking Tokens interview and a second broadcast, CZ said he learned of the breach close to midnight United Arab Emirates time. The FBI has attributed the attack to North Korea's TraderTraitor operation. Having stepped back from daily management of Binance, he said his job was community communication: confirming the breach was real and telling users within the hour that their funds were safe. That fast disclosure, he argued, contained FUD and avoided the layered contagion seen in earlier collapses. Withdrawals came back within two days, the company absorbed the entire loss, and about $3.6 billion, some 2% of platform assets, left in the first 12 hours, well below the 10-30% CZ had braced for. Hourly net deposits turned positive within roughly 24 hours, and he still expects balances to build through the next bull market.

@jacqmelinek · X post

Talking Tokens interview.

View on X

Democrats Draft Their Own Market Structure Bill

Lawmakers are moving on their own track. House Democrats, who took majorities in both chambers in this week's midterms, are weighing a broader market structure bill built on the Crypto Investor and Consumer Bill of Rights first proposed by Representative Maxine Waters in 2025. Three industry sources in contact with Democratic staffers, first reported by journalist Eleanor Terrett, say the draft would fold in Waters' unadopted CLARITY provisions and elements agreed with Senate Republicans before the bill lost a procedural Senate vote 49-50 in September. Its core is a rebalancing of regulators: wider U.S. Securities and Exchange Commission (SEC) supervision of digital asset markets and a smaller role for the Commodity Futures Trading Commission (CFTC), the opposite of what an industry that prefers commodity classification has lobbied for. Investor protections would tighten as well: customers could withdraw or transfer requested assets within 24 hours, exchanges would publish monthly proof of reserves verified by outside accountants, customer assets would be segregated from company funds even in bankruptcy, and front-running that exploits knowledge of customer order types would be banned.

Paradigm senior advisor Justin Slaughter went further on Thursday, saying on a livestream that the CLARITY Act “does look dead” in the lame-duck session because Democrats “want a chance to rewrite things.” House Financial Services Committee staff, he said, are reportedly writing their own bill around four elements: stricter ethics rules on crypto involvement by government officials, aimed at President Donald Trump and his family's ventures; DeFi rules much stricter than the Blockchain Regulatory Certainty Act, which would shield developers that never take custody of user funds from money-transmitter licensing; Waters-style consumer protections such as 24-hour payouts and strong independent audits; and, most controversially, a shift of more of the industry's jurisdiction from the CFTC to the SEC. Democrats who follow crypto closely concede “80% of CLARITY's fine,” Slaughter said, but the contested 20% holds much of what the industry cares about, and DeFi “needs to be watching this very closely.” Manatt partner Mike Katz added that Waters is the presumptive committee chair, though Sean Casten has entered the race for the role.

Buterin Puts Survival Before Competition

Ethereum co-founder Vitalik Buterin framed the same period as a test of endurance rather than a race. In a recent interview he said the industry's priority for the next two years is survival, not winning competition against rival platforms. Large security incidents over the past 18 months, he noted, have concentrated in user interfaces and centralized components, while smart-contract attacks have fallen sharply. His prescription for major exchanges, custodians and financial institutions is something close to fortress mode, with harder defenses across every layer. Buterin also warned that if attacks continue at this pace, regulators could respond by imposing stricter security liability on companies, a risk that pairs with the legislative rewrite now underway in Washington. On Ethereum itself, he pointed to zero-knowledge proofs, AI and formal verification as tools for the Lean Ethereum roadmap, and said layer-2 networks should explore high-performance DeFi, privacy and enterprise applications instead of replicating base-layer scaling.

The OCC Sets a January Deadline

Read together, the week sets a two-front test for the industry: security and statute. On the security side, CZ is calling for an industry alliance that shares post-mortems and freezes stolen funds fast, with AI deployed on defense. On the statute side, one date is fixed: the Office of the Comptroller of the Currency (OCC) finalized its GENIUS Act rule as Bulletin 2026-50 on Oct. 21, effective Jan. 18, 2027, the same day the stablecoin law comes into force, while the Federal Deposit Insurance Corporation (FDIC), the Federal Reserve and the National Credit Union Administration (NCUA) have only proposed their rules so far. If Democrats also shift jurisdiction to the SEC, exchanges could face heavier security obligations and heavier compliance at once. CZ noted crypto's dip on breach day was smaller than tech stocks', the kind of calm the Crypto Fear and Greed Index is designed to track.