Coinbase Says 99% of Customer Crypto Is Offline After Binance Hack

Coinbase is answering the crypto market’s biggest security question with a blunt number: more than 99% of customer assets are kept offline.

The reassurance arrived after the massive Binance breach put exchange custody back under a harsh spotlight. According to Decrypt, Coinbase says the attack did not affect its systems or customer funds, and the company is using the moment to explain how its own custody model is built.

Cold storage is the center of that defense. Those wallets are not connected to the internet, which removes the direct online path attackers used against hot wallets in other incidents.

Coinbase says it moves only the funds needed for customer activity into internet-connected wallets.

That does not make an exchange invincible. It does, however, change the size of the attack surface and limit how much an attacker can reach at once.

At @Coinbase we keep more than 99% of funds in offline cold storage. We use Multi Party Computation (MPC) solutions to protect our cold wallets to prevent any person or system from transacting unilaterally.

These controls matter today more than ever. In the face of nation state… https://t.co/7ionB4b4nd

— Jeff Lunglhofer (Lunglhofer.eth) (@JLunglhofer) November 4, 2026

Coinbase chief information security officer Jeff Lunglhofer said the company combines offline storage with multiparty computation. In plain English, the signing authority is split so that no single person or system can move funds alone.

The company also described withdrawal-rate limits, automated anomaly detection and manual review for unusual spikes. If the risk level rises, Coinbase says it can trigger kill switches that take signing keys offline entirely.

Modern attackers go after far more than software bugs. Criminal groups target employees, contractors, devices and active sessions.

Coinbase says sensitive actions require multiple approvals, so one stolen password or compromised machine should not be enough.

The exchange also says customer assets are held 1:1 and are not lent unless the customer directs it. As of September 30, Coinbase reported $377 billion in assets on the platform and $8.6 billion in cash and cash equivalents.

The trend is starting to show more positive inflows with hourly deposits exceeding withdrawals. https://t.co/lzbYnZZ4El

— Richard Teng (@_RichardTeng) November 3, 2026

Binance CEO Richard Teng’s update that hourly deposits had begun exceeding withdrawals shows why confidence can move quickly after a security crisis. Customers watch whether withdrawals work and whether other users are willing to bring funds back.

No exchange has solved custody forever. The architecture behind a platform still matters.

Keeping nearly everything offline instead of leaving a large pool continuously exposed can separate a contained incident from an industry-changing loss.

For customers, Coinbase’s 99% figure is a meaningful signal. The real test is whether the layers around it—split authority, rate limits, human review and emergency shutdown controls—perform exactly as designed when attackers apply pressure.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.