Fed and OCC Start Calling Banks After $6.3 Billion Binance Hack

US bank regulators opened a Supervisory sweep of the banking system on Monday after hackers drained roughly $6.3 billion from Binance hot wallets in the largest crypto theft on record. Supervisors from the Federal Reserve and the Office of the Comptroller of the Currency began calling banks to ask about unusual activity and service disruptions, Reuters reported, citing people familiar with the matter.

The calls started the Monday after the October 29, 2026 breach. The theft itself took just 20 to 30 minutes and spanned multiple blockchains, with Ethereum carrying most of the movement. Hot wallets — the exchange's internet-connected accounts that allow fast trading and withdrawals — were the entry point.

Who did it?

The FBI attributed the attack to TraderTraitor, a North Korean unit inside the Lazarus Group. That outfit is no stranger to large crypto heists. It was also linked to the major breach at Bybit in 2025.

The size and speed change the stakes. A state-linked group pulling billions in under half an hour turns exchange security from a market issue into a national security one, and that framing is now shaping the response in Washington.

How the cleanup unfolded

Binance moved quickly once it detected the drain. It paused withdrawals and earmarked more than $6.34 billion from its reserves, including its Secure Asset Fund for Users (SAFU), to cover customer losses.

Stablecoin issuers provided the sharpest tools. Tether froze approximately $1.57 billion in USDT tied to the stolen funds. Circle froze more than $800 million in USDC. Stablecoins are centrally issued, so issuers can blacklist tokens at specific addresses — a lever almost no other crypto asset offers.

By early November, Binance said it had recovered 90% to 95% of the stolen assets through a mix of repurchases and freezes. Withdrawals reopened on November 1. Early reports put initial user outflows at roughly $3.6 billion to $4.7 billion.

Why bank regulators picked up the phone

The Fed and OCC calls signal a shift in how US authorities assess crypto risk, and the questions they asked were practical. Did banks see strange flows? Did any payment or custody services wobble? Were clients connected to Binance pulling cash in unusual patterns?

The outreach matters because Binance operates largely outside direct US supervision. Its troubles still prompted two of the most powerful US bank regulators to start making calls within days, testing the operational links between digital asset markets and traditional finance under stress.

The episode is also feeding a wider policy debate. CFTC Chairman Michael Selig has been pushing for stronger oversight of offshore exchanges in the wake of the hack, arguing that the Binance case shows how a breach far from US jurisdiction can transmit risk into the regulated banking system.

What does this change for crypto and its critics?

The recovery figures cut both ways. Binance clawing back 90% to 95% of the funds, with help from Tether and Circle, shows the industry has real tools for damage control. It equally shows how much of that control depends on centralized players with freeze powers — an awkward fact for a sector built on the promise of censorship-resistant money.

Three questions now matter for anyone watching the market structure:

• Whether the Fed and OCC outreach turns up any real disruption inside banks
• Whether Selig's push hardens into formal regulatory proposals
• Whether Binance's withdrawal volumes settle now that access is restored

The answers will arrive on different clocks. The supervisory findings should surface first, and any formal CFTC proposal on offshore exchanges would follow — a window to watch over the coming quarter as regulators decide whether the biggest heist in crypto history deserves a permanent policy response.

By Marcus Bennett