After Binance's US$6.3 billion-scale security incident, Coinbase disclosed that 99% of its customer assets are held in cold wallets, bringing exchange custody and security response into focus.
After a security incident at Binance on the US$6.3 billion scale, Coinbase disclosed that 99% of its customer assets are held in cold wallets. The disclosure pushed customer asset custody and security response at major exchanges into the market spotlight. The original material described the Binance incident as 'a major security incident involving Binance on the US$6.3 billion scale' and noted that it 'has brought customer asset custody and security response at major exchanges into focus, with high market attention.' The core data point disclosed by Coinbase is that 99% of customer assets are held in cold wallets. Together, the two pieces of information constitute observable facts after the incident: a major security incident occurred at a large exchange, and another mainstream exchange published a quantitative statement on the structure of customer asset custody. The disclosure is listed as one of the publicly available quantitative data points on exchange custody after the incident, making the structure of customer asset custody, the quality of information disclosure, and exchanges' risk management capabilities direct objects of observation.
The incident involves two major exchanges, Binance and Coinbase. On Binance, the original material only mentions a 'US$6.3 billion-scale security incident' and does not disclose the specific statistical basis for the amount. This wording should not be rewritten as confirmed losses, customer losses, or a final settlement amount; instead, it should retain the original meaning of a 'US$6.3 billion-scale security incident.' On Coinbase, the original material mentions that the company said 99% of customer assets are held in cold wallets. This data point was disclosed by Coinbase to explain the custody arrangements of another mainstream exchange after the incident. Together, the two pieces of information form the core factual framework of the current report, but the original material does not provide further details, so the data cannot be directly extended into conclusions about responsibility for the incident or the overall security level of the industry.
Regarding the amount, the original material provides no further statistical explanation for the 'US$6.3 billion-scale security incident.' The amount is the material's description of the scale of the security incident, but the original material does not explain its specific statistical scope. Therefore, 'US$6.3 billion-scale security incident' should retain the original wording and avoid being equated with customer losses or a final settlement amount. This treatment is consistent with the limited information in the original material and helps prevent the incident amount from being misread as the final outcome.
Coinbase's disclosure that 99% of customer assets are held in cold wallets likewise needs to be understood in light of its statistical scope. The original material does not disclose the statistical time point, asset scope, calculation method, or other details for this ratio, so the data point is Coinbase's own disclosure rather than a complete statistic on the industry's overall custody structure. The ratio indicates that Coinbase holds the vast majority of customer assets in cold wallets, but it does not represent other exchanges' custody arrangements and is not equivalent to a security audit conclusion. Although the two core data points have news value, with the original material providing no further information, they remain information presented by single institutions.
In terms of the chain of events, the Binance US$6.3 billion-scale security incident first drew market attention to the safety of exchange customer assets; subsequently, Coinbase disclosed that 99% of customer assets are held in cold wallets, making the structure of customer asset custody a direct object of observation. The original material does not state whether there is a direct connection between the two pieces of information, but the material mentions them together, indicating that they jointly form the current focus under the security topic. This juxtaposition is the editorial framework of the original material and does not mean that Coinbase's disclosure was a direct response to the Binance incident.
After a major security incident, the proportion of customer assets held in cold wallets and the clarity of disclosure have become dimensions for the market to observe exchanges' security arrangements. Coinbase's 99% cold-wallet ratio is a quantifiable disclosure by the company itself and represents only that company's situation, not other exchanges' custody arrangements. The data point provides the market with a comparable observation point, but based on the original material, currently it can only be confirmed that Coinbase disclosed this ratio; it cannot be extrapolated as an industry-wide practice. At the industry level, the original material mentions only Coinbase's cold-wallet ratio and provides no custody data from other exchanges, so whether a unified trend has formed in industry-level security responses cannot be judged from the original material. This single data point cannot explain the industry's overall custody level, but it can serve as a case of an exchange proactively disclosing custody data after the incident.
While the Binance security incident drew attention, contemporaneous market information showed that Bitcoin reclaimed the US$80,000 mark and Ethereum rebounded in tandem, with market attention to the impact of the Binance incident somewhat fading. The original material described this market move as 'BTC reclaiming the key US$80,000 level, with ETH rebounding in tandem, reflecting changes in risk appetite for mainstream assets and market sentiment.' This price performance reflects changes in risk appetite for mainstream assets and market sentiment, but the price recovery does not mean that the handling of the Binance security incident has been completed, nor can it replace a substantive assessment of customer asset custody and security response. Incident handling progress and market price performance should be observed separately. The price information comes from contemporaneous market reports and is used only as background; it is not directly linked to incident handling.
From the current material, only two core pieces of information are verifiable: the Binance US$6.3 billion-scale security incident and Coinbase's 99% of customer assets held in cold wallets. Going forward, attention could be paid to Binance disclosing a more complete scope of impact and handling progress for the US$6.3 billion-scale security incident, and to further explanation by Coinbase of the statistical basis for the 99% cold-wallet ratio. Whether other mainstream exchanges will follow with public customer asset custody data is also a possible direction for observation. The original material currently provides only the core facts above; the quality and scope of subsequent formal disclosures will supplement the industry context beyond the current single data point. Before more information is available, no advance judgment should be made about the outcome of the incident, nor should a single disclosed data point be regarded as a complete conclusion.
.jpg)