Fed, OCC Probe US Banks on Security After Binance Hack

Regulators Probe Banks After Massive Binance Hack

U.S. financial regulators have reportedly reached out to banks following last week’s $6.3 billion hack of cryptocurrency exchange Binance, as cybersecurity experts voice concerns over transaction security and the broader risks associated with digital assets.

Officials from the Federal Reserve and the Office of the Comptroller of the Currency (OCC) began contacting banks on Monday to inquire about any “unusual activity” or service disruptions, Reuters reported Thursday, citing individuals familiar with the matter.

These inquiries could signal increased scrutiny on how banks manage crypto-related risks, including custody, counterparty exposure, and incident response, according to Stefan Muehlbauer, head of U.S. government affairs at CertiK.

“After an incident of this scale, it would be surprising if the Fed and OCC didn’t check in with the banks they supervise,” Muehlbauer told Cointelegraph. “Their mandate is to protect the financial system, and that means understanding where exposures sit and how quickly they can respond.”

Banks have reportedly been assessing the hack and reviewing their systems to determine their capacity to absorb or manage similar threats.

Reuters’ report also indicated that a cybersecurity team at one of the largest U.S. banks contacted Binance within hours of the hack. A Binance spokesperson confirmed to Cointelegraph that the exchange had shared its publicly released incident report with all its banking partners and was unaware of any vulnerabilities affecting them.

Muehlbauer described the unfolding procedure as “how a maturing framework should work,” adding that it “is not a signal that regulators are pulling back from the industry.”

The inquiries come at a time when the Federal Reserve has eased certain oversight requirements. In April, the central bank removed a mandate for state member banks to notify regulators before engaging in crypto activities, stating it would continue to monitor such operations through its standard supervisory processes.

A Federal Reserve spokesperson declined to comment on the reported inquiries. The OCC did not respond to requests for comment by the time of publication.

Hack Details and Broader Implications

Binance stated in its November 3 incident report that approximately $6.34 billion in digital assets were impacted by the October 29 attack, with $2.85 billion frozen or intercepted as of the report’s filing.

The exchange explained that the attack originated from compromised software installed by an engineer in June. Hackers subsequently utilized social engineering tactics, stolen credentials, and malicious software to gain access to wallet systems and execute unauthorized transfers.

Dr. Darren Williams, founder and CEO of cybersecurity firm BlackFog, warned that the methods employed in the Binance attack could pose significant risks to traditional banks, particularly those offering crypto custody and payment services.

“Attackers no longer need to break encryption or steal private keys if they can compromise the trusted systems and people authorized to move money,” Williams stated.

He cautioned that hackers could leverage compromised employee devices, accounts, or third-party services to move funds undetected. Williams also highlighted the potential for increased risks due to the growing use of artificial intelligence in financial operations.

“The priority must be stopping unauthorized transactions and data exfiltration before assets or sensitive information leave the organization, not simply investigating the damage afterwards,” Williams emphasized.

Binance has since announced that it has enhanced its security controls and is engaging independent cybersecurity experts to review the attack.