Coinbase Details Offline Custody After Binance’s Multibillion-Dollar Breach
What happened: Coinbase said in a November 4 security update that it was unaffected by the October 29 Binance breach and keeps more than 99% of customer crypto in cold storage; reporting values the Bi
What happened: Coinbase said in a November 4 security update that it was unaffected by the October 29 Binance breach and keeps more than 99% of customer crypto in cold storage; reporting values the Binance loss at $6.3 billion to $6.4 billion. The exchange described split private keys that are never fully reassembled, kill switches, multiple approval requirements, withdrawal anomaly detection and strict limits on transfers from cold storage to hot wallets. Coinbase also reported $8.6 billion in cash and cash equivalents and $377 billion in platform assets as of September 30, while saying customer assets are held 1:1 and are not lent without explicit authorization.
Why it matters: The disclosure directs attention toward how transactions are authorized: keeping most assets offline addresses one exposure, while approval controls and transfer limits address how funds can move into accessible wallets. The reported cash balance and platform asset total describe different categories and should not be combined or read as a disclosed insurance commitment covering customer losses. Coinbase’s warning that advancing AI capabilities are changing the security landscape is relevant context, but the supplied research provides no quantified evidence that AI defenses prevented a particular attack.
The useful comparison is therefore between specific controls, rather than broad assurances about safety. Coinbase says no single employee has standing access to hot-wallet signing, adding an authorization constraint alongside its storage policy. Those details give customers more to evaluate, although the supplied reporting does not provide an independent test of how the controls would perform during an attempted breach.