Security

Safe

Nano

<p><strong>Storing crypto safely</strong> has, since October 29, 2026, mainly meant one thing: knowing who holds the keys to your coins. That evening, according to the exchange, around $6.3 billion flowed out of Binance; <a href="https://www.chainalysis.com/blog/binance-exploit-latest-findings-and-response/" rel="noopener noreferrer nofollow">Chainalysis counts $6.4 billion</a>. It is the biggest crypto hack in history, and the trail leads to North Korea. Binance is covering its customers' losses. If you hold your coins yourself, you do not depend on such promises, but you bear the responsibility yourself. This is how to secure your cryptocurrencies: with a hardware wallet, a wallet scanner and the right settings on your exchange account.</p>
<p><strong>Key points at a glance</strong></p>
<ul>
 <li><strong>Binance hack:</strong> around $6.3 billion according to Binance, $6.4 billion according to Chainalysis, drained on the evening of October 29, 2026.</li>
 <li><strong>Scale:</strong> more than three times what North Korea's hackers stole in the whole of 2025, namely $2.02 billion according to Chainalysis.</li>
 <li><strong>Hardware wallet:</strong> from €59 (Ledger Nano S Plus, Trezor Safe 3), manufacturer prices as of October 16, 2026.</li>
 <li><strong>Wallet scanner:</strong> MetaMask checks transactions and signatures with security alerts by default, Revoke.cash shows old approvals.</li>
 <li><strong>Exchange account:</strong> two-factor protection via an app or security key instead of SMS, plus a withdrawal whitelist.</li>
 <li><strong>Tactics:</strong> North Korea's hackers gain access through fake job offers and recruitment tests, according to Chainalysis in its report of December 18, 2025.</li>
</ul>
<h2 id="how-to-store-crypto-safely-what-the-binance-hack-means-for-you">How to store crypto safely: what the Binance hack means for you</h2>
<p>The key lesson from the Binance hack is that a balance on an exchange is a claim against the exchange, not a coin in your own hands. As long as the exchange can and will pay, you notice nothing. Binance has promised to cover all losses from its own funds and its SAFU emergency fund.</p>
<p>Binance describes how it happened in an <a href="https://www.binance.com/en/support/announcement/c5a8729a97ac486d963784d96c5642d7" rel="noopener noreferrer nofollow">announcement of October 30</a>. The entry point was probably the compromised laptop of a DevOps engineer, through which the attackers reached a service container and withdrawals. Binance sees no leak of private wallet keys, and around $3 billion has been frozen on the blockchain. TRM Labs and Chainalysis attribute the attack to the North Korean group TraderTraitor; the full background is in our overview of whether North Korea is behind the Binance hack.</p>
<p>What counts for you as an investor is the scale. According to the <a href="https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2026/" rel="noopener noreferrer nofollow">Chainalysis annual report</a>, North Korea's hackers stole at least $2.02 billion in the whole of 2025, more than ever before. The Binance hack alone is more than three times as large. Binance can absorb such a loss: according to DefiLlama, the exchange's known wallets held almost $145 billion before the hack, not counting its own tokens such as BNB. At FTX, the outflow on the day of its insolvency in November 2022 ended differently, and customers there waited years for their money. We collect all cases in our <a href="https://cryptoticker.io/en/crypto-hacks/" rel="noopener noreferrer nofollow">crypto hacks and security</a> section.</p>
<figure><img src="https://cryptoticker-strapi-media.s3.eu-central-1.amazonaws.com/ct_uploadprobe_chart_2026_10_30_05b587953e.webp" alt="Bar chart of the largest crypto hacks in millions of dollars: Binance 6,300, Bybit 1,500, Ronin 620, Poly Network 610, Coincheck 530, FTX 477, Bitget 352; for comparison, North Korea's haul in 2025: 2,020" width="1920" height="1080">
 <figcaption>
  Sources: Binance, FBI, Chainalysis, company figures; as of October 30, 2026
 </figcaption>
</figure>
<p>What you can do with your Binance account after the hack is covered in our article <a href="https://cryptoticker.io/en/binance-hack-cause-devops-laptop/" rel="noopener noreferrer nofollow">Binance puts the hack at $6.3 billion</a>, and whether the exchange could fail because of it in <a href="https://cryptoticker.io/en/how-much-would-bankrupt-binance-6-billion-hack/" rel="noopener noreferrer nofollow">How much would it take to bankrupt Binance?</a> The following steps apply to every exchange and every wallet.</p>
<h2 id="exchange-software-wallet-or-hardware-wallet-where-your-crypto-is-safest">Exchange, software wallet or hardware wallet: where your crypto is safest</h2>
<p>Crypto is safest on a hardware wallet whose recovery phrase only you know. For money you trade with, a regulated exchange is the more convenient place. A software wallet on your phone or computer sits in between: you hold the keys yourself, but on a device that is constantly online.</p>
<table>
 <thead>
  <tr>
   <th>Storage</th>
   <th>Who holds the key</th>
   <th>Typical attack</th>
   <th>Most important protection</th>
   <th>Cost</th>
  </tr>
 </thead>
 <tbody>
  <tr>
   <td>Exchange (Binance, Coinbase, Bitpanda)</td>
   <td>the exchange</td>
   <td>Hack of the exchange, account takeover via phishing or SIM swapping</td>
   <td>Two-factor protection via app or security key, withdrawal whitelist, exchange with a MiCA licence</td>
   <td>no custody fee, trading fees</td>
  </tr>
  <tr>
   <td>Software wallet (MetaMask, Trust Wallet)</td>
   <td>you, on an online device</td>
   <td>Malware, fake websites, malicious approvals</td>
   <td>Wallet scanner, revoke approvals regularly, dedicated device</td>
   <td>free</td>
  </tr>
  <tr>
   <td>Hardware wallet (Ledger, Trezor, BitBox)</td>
   <td>you, offline on the device</td>
   <td>Tampered devices from third-party sellers, phishing for the recovery phrase</td>
   <td>Buy directly from the manufacturer, never store the phrase digitally</td>
   <td>from €59, one-off</td>
  </tr>
 </tbody>
</table>
<p>A proven split: what you actively trade sits on an exchange licensed under the EU's MiCA regulation; we compare providers under <a href="https://cryptoticker.io/en/comparison/best-regulated-exchange/" rel="noopener noreferrer nofollow">regulated crypto exchanges</a>. What you hold for the long term moves to a hardware wallet. That way, an exchange hack hits at most the smaller part.</p>
<h2 id="hardware-wallet-the-safest-way-to-store-crypto">Hardware wallet: the safest way to store crypto</h2>
<p>A hardware wallet generates the private key on the device and never releases it. You confirm every transfer there, not on your computer. A laptop infected with malware, the entry point in the Binance hack, is then not enough to move your coins. Even the best hardware wallet has one limit, though: it protects the key, not every signature. Whatever you confirm on the device is valid, which is why a wallet scanner belongs alongside it.</p>
<table>
 <thead>
  <tr>
   <th>Feature</th>
   <th>Tangem Wallet</th>
   <th>Ledger Nano S Plus</th>
   <th>Trezor Safe 3</th>
  </tr>
 </thead>
 <tbody>
  <tr>
   <td>Manufacturer price (Oct 16, 2026)</td>
   <td>$59.90 (2 cards)</td>
   <td>€59</td>
   <td>€59</td>
  </tr>
  <tr>
   <td>Form factor</td>
   <td>Card or ring</td>
   <td>USB stick with display</td>
   <td>Device with display</td>
  </tr>
  <tr>
   <td>Connection</td>
   <td>NFC with your smartphone</td>
   <td>Cable</td>
   <td>Cable</td>
  </tr>
  <tr>
   <td>Backup</td>
   <td>Second and third card, seed phrase optional</td>
   <td>Recovery phrase</td>
   <td>Recovery phrase</td>
  </tr>
  <tr>
   <td>Battery</td>
   <td>not needed</td>
   <td>not needed</td>
   <td>not needed</td>
  </tr>
 </tbody>
</table>
<p><strong>Tangem</strong> is a card the size of a bank card, with no battery and no cable. To confirm, you hold it against your smartphone, and the key sits in a secure element rated EAL6+. By default, Tangem works without a seed phrase; the backup is the second and third card in the set. There is no screen of its own, so you check recipient and amount only in the app, and the firmware is not open source. In December 2024 the app wrote the private keys of seed-phrase wallets into support logs (fixed), and in 2025 and 2026 Donjon, the security lab of manufacturer Ledger, showed attacks on the access code that cannot be fixed by an update on cards already shipped. For larger amounts we therefore recommend a device with its own screen such as the Trezor Safe 3 or Ledger Nano S Plus. Cost, security and everyday use are covered in our review <a href="https://cryptoticker.io/en/tangem-wallet-cost-security/" rel="noopener noreferrer nofollow">Tangem Wallet: cost and security</a>.</p>
<p><strong>Ledger and Trezor</strong> work with a display and cable. You see the recipient address and amount on the device before you confirm, and you secure the wallet with a recovery phrase of 12 or 24 words. Trezor makes its firmware open source.</p>
<p>Buy a hardware wallet directly from the manufacturer and never second-hand. In October 2026, Ledger confirmed an implant in tampered devices that read the recovery phrase during setup and sent it to attackers via mobile network; MediaMarkt and Saturn then pulled Ledger from sale. The background is in our report on the <a href="https://cryptoticker.io/en/ledger-hack-cryptobilis-86-million-hardware-wallet/" rel="noopener noreferrer nofollow">Ledger hack</a>. Never use a phrase that comes enclosed or pre-filled. We compare all models with prices and features in our <a href="https://cryptoticker.io/en/comparison/hardware-wallets/" rel="noopener noreferrer nofollow">hardware wallet comparison</a>.</p>
<figure><img src="https://cryptoticker-strapi-media.s3.eu-central-1.amazonaws.com/kryptowaehrungen_sicher_aufbewahren_2_3f313790f3.webp" alt="Illustration: a hand holds a black card against a smartphone, showing how a card-format hardware wallet works" width="1920" height="1080">
 <figcaption>
  Illustration, AI-generated
 </figcaption>
</figure>
<h2 id="wallet-scanner-how-to-check-transactions-before-you-sign">Wallet scanner: how to check transactions before you sign</h2>
<p>A wallet scanner checks a transaction or signature before you confirm it and warns you about known fraud patterns, much like a virus scanner. Many retail investors lose their coins not through a cracked key but through a single signature on a fake website. That is exactly where the scanner comes in.</p>
<h3 id="metamask-security-alerts">MetaMask Security Alerts</h3>
<p>MetaMask has such a scanner built in. According to the <a href="https://support.metamask.io/de/configure/wallet/security-alerts/" rel="noopener noreferrer nofollow">MetaMask help pages</a>, security alerts are switched on by default in the browser extension and the app. They check transactions and signature requests using data from Blockaid and other providers, and have two levels: a warning when there is a possible risk and a prominent alert when a request is classified as malicious. The warning blocks nothing, and you could still confirm. In that case, cancel. More on the wallet is in our <a href="https://cryptoticker.io/en/metamask/reviews/" rel="noopener noreferrer nofollow">MetaMask review</a>.</p>
<h3 id="revoke-cash-find-and-revoke-old-approvals">Revoke.cash: find and revoke old approvals</h3>
<p>Every approval you have ever granted to an app remains in place until you revoke it. <a href="https://revoke.cash/" rel="noopener noreferrer nofollow">Revoke.cash</a> shows all open token approvals for an address across many blockchains. Your address is enough to view them; to revoke, you connect your wallet and pay only the network fee. How to do this step by step is explained in <a href="https://cryptoticker.io/en/ethereum-revoke-token-approvals/" rel="noopener noreferrer nofollow">Revoking token approvals on Ethereum</a>, and how to recognise a dangerous signature in our guide to <a href="https://cryptoticker.io/en/wallet-drainer-token-approval-signature/" rel="noopener noreferrer nofollow">wallet drainers</a>. You can find an overview of all software wallets in our <a href="https://cryptoticker.io/en/comparison/software-wallets/" rel="noopener noreferrer nofollow">software wallet comparison</a>.</p>
<h2 id="storing-crypto-safely-on-an-exchange-the-settings-that-protect-your-account">Storing crypto safely on an exchange: the settings that protect your account</h2>
<p>If part of your coins sits on an exchange, five settings decide whether an attacker can do anything with your password alone.</p>
<ul>
 <li><strong>Two-factor protection via app or security key:</strong> an authenticator app, passkey or hardware key instead of SMS. SMS codes can be intercepted through SIM swapping, as described in our guide to <a href="https://cryptoticker.io/en/sim-swapping-protect-crypto-exchange-account/" rel="noopener noreferrer nofollow">SIM swapping protection</a>.</li>
 <li><strong>Withdrawal whitelist:</strong> withdrawals only go to addresses you have saved in advance. At many exchanges, a new address comes with a waiting period during which you can spot an attack.</li>
 <li><strong>Anti-phishing code:</strong> a word of your choice that appears in every genuine email from the exchange. If it is missing, the email did not come from the exchange.</li>
 <li><strong>Dedicated email address:</strong> an address used only for exchange accounts that you give out nowhere else.</li>
 <li><strong>Licensed exchange:</strong> providers with a MiCA licence must hold client funds separately from their own assets and are under supervision.</li>
</ul>
<p>How Binance performs on security, fees and licences is set out in our <a href="https://cryptoticker.io/en/binance/reviews/" rel="noopener noreferrer nofollow">Binance review</a>.</p>
<h2 id="how-to-store-your-seed-phrase-safely-the-backup-decides">How to store your seed phrase safely: the backup decides</h2>
<p>Whoever knows a wallet's recovery phrase owns the coins. The rule is therefore: never photograph it, never store it in a cloud or notes app, never type it into a website. Write it on paper or, better, on a steel plate, keep it in a place that fire and water cannot reach, and store a second copy somewhere else. No wallet or exchange support team will ever ask for your phrase.</p>
<p>How long paper lasts, what a passphrase adds as a 25th word and when multisig is worthwhile are covered in our guide <a href="https://cryptoticker.io/en/store-seed-phrase-safely/" rel="noopener noreferrer nofollow">How to store your seed phrase safely</a>.</p>
<h2 id="how-north-korea-s-hackers-operate-and-how-to-recognise-their-tactics">How North Korea's hackers operate and how to recognise their tactics</h2>
<p>North Korea's hackers mainly target people, not technology. According to Chainalysis, they place IT workers as employees in crypto firms and increasingly pose as recruiters for well-known Web3 and AI companies. At the end of a supposed recruitment process comes a "technical test" that harvests credentials and access to the candidate's current employer. Executives receive approaches from supposed investors or buyers asking about systems and access.</p>
<p>For retail investors this means: do not install software sent to you by a recruiter, an investor or a contact from Telegram or LinkedIn, and do not open a coding task on the computer that runs your wallet. A dedicated computer, or at least a separate user account just for crypto, lowers the risk considerably. How one such campaign emptied thousands of wallets is described in our report on <a href="https://cryptoticker.io/en/north-korea-hackers-crypto-wallets-job-offers/" rel="noopener noreferrer nofollow">North Korean hackers and job offers</a>.</p>
<h2 id="checklist-how-to-store-crypto-safely-in-seven-steps">Checklist: how to store crypto safely in seven steps</h2>
<ol>
 <li><strong>Split your holdings:</strong> trading money on an exchange with a MiCA licence, the rest on a hardware wallet.</li>
 <li><strong>Buy correctly:</strong> hardware wallet directly from the manufacturer, check the packaging, generate the phrase yourself.</li>
 <li><strong>Offline backup:</strong> recovery phrase on paper or steel, two locations, never digital.</li>
 <li><strong>Harden your exchange account:</strong> two-factor protection via app or security key, withdrawal whitelist, anti-phishing code.</li>
 <li><strong>Leave the scanner on:</strong> keep MetaMask Security Alerts switched on and take every warning seriously.</li>
 <li><strong>Clean up approvals:</strong> check with Revoke.cash once a month and revoke anything unnecessary.</li>
 <li><strong>Act fast in an emergency:</strong> move any remaining balance immediately to a new wallet with a new phrase, revoke approvals, and inform the exchange and the police.</li>
</ol>
<p>The Binance hack shows how much money can vanish in a single evening. Binance can cover the loss. With a hardware wallet and these seven steps, you do not have to rely on that in the first place.</p>

How to store crypto safely: protect yourself from hacks like the one at Binance

Table of Contents

CryptoTicker ENG

Other articles published on Nov 2, 2026

Join our free newsletter for daily crypto updates!