Bitcoin Stolen from Binance Exceeds Tesla Holdings, Doubles El Salvador Reserve
CoinDesk reports the cumulative Bitcoin stolen from Binance — primarily the 2019 hack — now tops Tesla's 9,720 BTC treasury and is more than double El Salvador's ~5,700 BTC national reserve, reaching ~11,000 BTC.
·2 min read
What happened CoinDesk analysis shows that the total Bitcoin stolen from Binance across incidents — chiefly the May 2019 breach of 7,000 BTC — now exceeds Tesla's corporate holdings (9,720 BTC per Q4 2023 filing) and more than doubles El Salvador's sovereign stack (~5,700 BTC as of early 2024). The combined figure approaches 11,000 BTC, worth over $700 million at current prices.
Key figures - Total stolen from Binance: ~11,000 BTC ($700M+) - Tesla treasury: 9,720 BTC (Q4 2023) - El Salvador reserve: ~5,700 BTC (1 BTC/day since Nov 2022) - Main incident: Binance hack, May 2019 (7,000 BTC), covered by SAFU fund
Background and details The 2019 attack used phishing, viruses, and leaked API keys to withdraw 7,000 BTC in a single transaction. Binance reimbursed users via its Secure Asset Fund for Users (SAFU). Blockchain forensics firms (Chainalysis, CipherTrace, Arkham) have tracked the coins ever since — portions moved through mixers (Tornado Cash, Wasabi), P2P markets, and DEXs. While U.S. authorities seized Bitfinex 2016 hack funds in 2023–24, the Binance-linked coins remain largely dormant or in non-KYC jurisdictions.
Why it matters Tesla's $1.5B BTC purchase (2021) and El Salvador's legal-tender experiment (2021) made them poster children for institutional and state adoption. That a *single exchange hack* surpasses both highlights: - Systemic custodial risk in centralized venues. - The persistent "tainted coin" problem — stolen BTC circulates but is hard to legitimize. - The need for real-time Proof-of-Reserves and on-chain transparency.
Implications for users in Central Asia & CIS Binance dominates P2P and spot trading in Uzbekistan, Kazakhstan, and Russia. Takeaways: 1. Self-custody for significant holdings — hardware wallets (Ledger, Trezor) or multisig. 2. Enable TOTP 2FA, anti-phishing code, and withdrawal address whitelisting. 3. Regulators (NAPMI Uzbekistan, NBK Kazakhstan, CBR Russia) are drafting VASP licensing rules — this precedent will accelerate audit and reserve requirements.
Source: CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data
