Binance Historical Risk Review (2017-2024): The 7 Events You Should Know

1. Why read this review

Before registering on any financial or quasi-financial platform, you should look at more than the fees and features — you should look at its history. How a platform treated users in the past, how it responded to regulators, how it handled incidents, often says more about its risk shape than its current marketing. In crypto, platform risk has been shown over and over to be the most underestimated risk after market risk.

Looking back to 2017: Binance launched that summer and quickly grew into one of the largest centralized exchanges by volume. In the years that followed it experienced a hot-wallet breach, regulator warnings in multiple countries, parallel litigation by major U.S. enforcement agencies, the founder's personal guilty plea, and a leadership change. It also disclosed SAFU, Proof of Reserves and a new compliance structure as part of its response. We put both lines together — neither defending nor stoking panic.

The events here are drawn from public announcements by the U.S. SEC, CFTC and DOJ, the UK FCA, Japan's FSA, Hong Kong's SFC and others, along with Binance's own blog posts. Each section ends with verifiable links so you can read the originals rather than rely on second-hand summaries.

2. The 2019 hot-wallet hack

In May 2019, Binance disclosed that its hot wallet had been hit by a large-scale attack. The attackers used a mix of phishing, malware and other techniques to obtain a substantial set of API keys, 2FA codes and other sensitive information, and in a single transaction moved about 7,000 BTC out of the BTC hot wallet. The details Binance disclosed at the time included: only the hot wallet was affected, the cold wallets were untouched, and deposits and withdrawals were paused during investigation.

Two points from this event are most often discussed. First, Binance chose to fully absorb the loss using its SAFU (Secure Asset Fund for Users) fund, without passing it to retail users. Second, after the incident Binance upgraded its account security, API permission model and risk-control systems, and intensified internal discussions of risk alerts and the rollback of anomalous transactions. The event caused short-term price volatility, but the platform did not stop withdrawals and disappear with user funds — a fact frequently cited later when judging whether Binance has "exit-scammed".

For users, the lesson is that even top-tier exchanges expose a hot-wallet attack surface, and account-level security (API whitelist, withdrawal whitelist, 2FA, device management) is the user's own responsibility. See our account security checklist for what to set up during onboarding and routine maintenance.

3. 2021 derivatives and multi-country regulator pressure

By 2021, global regulators had clearly stepped up their focus on centralized exchanges. The UK Financial Conduct Authority (FCA) issued a notice stating that Binance Markets Limited was not authorized to conduct regulated activity in the UK. Japan's Financial Services Agency (FSA) issued a warning about Binance operating without registration locally. Hong Kong's SFC put out a risk warning regarding derivatives. Italy, the Netherlands, Malaysia, Thailand and others followed with similar warnings.

These warnings did not all point to the same violation; they reflected different jurisdictions' positions on crypto assets, security tokens, derivatives and custodial business. Binance subsequently adjusted some of its product strategy: lowering futures leverage caps in some regions, restricting derivatives access for certain users, and stopping or adjusting business in several countries. The most visible effect for everyday users was that which products you can access began to depend on where you are.

This was also when "regional availability" became a core variable in crypto use. A product available in one jurisdiction does not mean it is available where you live. The compliance and regional-restriction sections of Binance info and risk check walk through how to think about this.

4. The 2023 SEC lawsuit and USD 4.1 billion settlement

In June 2023, the U.S. Securities and Exchange Commission (SEC) filed a lawsuit against Binance Holdings, the Binance.US entity and founder Changpeng Zhao (CZ), bringing 13 charges that covered unregistered securities offerings and sales, operating as an unregistered exchange, broker-dealer and clearing agency, and issues around customer asset management and disclosure. It was one of the most-watched enforcement actions in crypto that year.

What followed was not a standalone SEC verdict; rather, it was a multi-agency settlement reached in November 2023 between Binance and the U.S. Department of Justice (DOJ), FinCEN, OFAC and the CFTC. Per the public announcements, the total settlement was around USD 4.3 billion (often shortened to "the 4.1 billion penalty"), with the core issues being anti-money-laundering compliance, sanctions screening and unregistered business. As part of the settlement, Binance accepted independent compliance monitors and committed to exit certain businesses and strengthen its compliance program.

It is worth emphasizing that a settlement is not the same as a criminal guilty plea, and some terms used neither-admit-nor-deny language. But its practical effect is this: Binance must accept external compliance oversight, must publicly demonstrate remediation progress, and must continue to face the possibility of follow-on litigation. That is why we treat this section as the starting point of the compliance rebuild.

5. The 2023 CFTC lawsuit and derivatives violations

In March 2023, the U.S. Commodity Futures Trading Commission (CFTC) filed suit against Binance, CZ and former CCO Samuel Lim. The core issues fell into three areas: offering derivatives to U.S. customers without registration, insufficient compliance screening of U.S. user identity, and internal communications suggesting attempts to evade regulation. The CFTC case ran in parallel with the SEC case, but the two focus on different legal branches — commodities derivatives versus securities markets.

This case ultimately rolled into the November 2023 multi-agency settlement. Binance agreed to pay penalties and accept derivatives-related compliance remediation. The most visible effect for users was that Binance applied stricter regional and identity screening to derivatives (especially USDT perpetual futures) in many countries. If you cannot access futures products in your region, this remediation is part of the reason.

In the compliance section of Binance info and risk check we include the relevant announcement links. Before making decisions about derivatives products, we suggest reading the original filings at least once, rather than relying on community summaries.

6. 2024: CZ's guilty plea, resignation and leadership transition

In November 2023, as part of the multi-agency settlement, CZ personally pleaded guilty to violating U.S. anti-money-laundering laws (specifically the failure to establish and maintain an effective AML program) and resigned as Binance's CEO. In 2024 a U.S. court sentenced CZ to about 4 months in prison, plus a fine. He completed the sentence in the second half of 2024. Binance also appointed Richard Teng, its former regional business head, as CEO, opening the "post-CZ era" of its management structure.

The implications for users sit on two levels. First, CZ's personal legal liability and the platform's compliance obligations are separate tracks — his departure does not mean platform-level remediation is complete. Second, the new leadership has placed stronger public emphasis on compliance, local licensing, an independent board, a Chief Compliance Officer and external audits. These are all factors users can fold into long-term decisions.

That said, we do not recommend reading any single personnel change as "risk reset to zero". The risk of a centralized exchange comes from architecture, rules, markets and regulation, and does not disappear because one person leaves or returns.

7. The compliance rebuild from 2024 onward

From 2024, Binance has noticeably increased its public emphasis on compliance rebuilding:

• Local licensing expansion: obtaining or renewing registrations and licenses in the UAE (Dubai VARA), Bahrain, France (PSAN), Spain, Italy, Poland, Sweden, Lithuania, Japan (via a local entity) and other jurisdictions.
• Independent compliance organization: appointing a CCO, updating the compliance org chart, introducing external review mechanisms, and accepting the independent compliance monitor required under the settlement.
• Proof of Reserves: continuing to publish Merkle Tree based reserve attestations, with discussion of liabilities, collateral ratios and related-party assets; users can self-verify whether their snapshot is included.
• SAFU disclosure: publishing on-chain addresses and valuations for SAFU, so the public can check balances via block explorers.
• Product and regional adjustments: closing higher-risk products, re-running KYC for some users, and applying stricter regional limits to derivatives access.

These actions cannot erase historical issues, and cannot guarantee no new issues, but they give users an objective basis to verify. In other words, the compliance rebuild is an observable process, not a promise.

8. Lessons you can take away

If we had to distill the takeaways into a short actionable checklist, we would suggest these five:

• Verify local rules: different countries treat crypto assets, derivatives and security tokens very differently. Before account, product or withdrawal decisions, confirm local compliance and tax obligations.
• Read official disclosures before use: Proof of Reserves, SAFU status, Binance Blog statements, and your region's Terms of Service. Do not rely solely on chat-group screenshots.
• Harden the account yourself: regardless of platform marketing, account-level security (device binding, 2FA, withdrawal whitelist, API whitelist, anti-phishing email code) is on you. See our account security checklist.
• Identify official entry points: phishing sites and fake support accounts spike around major events. Read verify Binance's official site first before clicking any "official" link.
• Don't keep everything on the exchange: history shows that extreme events at centralized platforms do not disappear with size. Keeping only what you can afford to lose on the exchange and self-custodying long-term holdings is structurally more robust.

9. FAQ

Has Binance ever exit-scammed?

Per public sources, Binance has had no instance of stopping withdrawals and disappearing with user funds since its founding in 2017. The 2019 hack caused a loss of about 7,000 BTC from the hot wallet, but Binance covered the entire loss with the SAFU fund and user assets were not affected. That is materially different from an "exit scam". See the side-by-side comparison in Is Binance a Scam?

Is Binance still safe now?

Safety is relative. Binance currently discloses Proof of Reserves, the SAFU fund size, the appointment of a CCO and independent compliance reforms. However, platform risk, regional regulatory risk and market risk all remain. Whether to use it depends on your local rules, your risk tolerance and your own verification — not on a single information source.

How does CZ's departure affect users?

CZ stepped down as CEO at the end of 2023, and Richard Teng, the former head of regional business, became CEO. Day-to-day operations, customer asset management and product features are run by the current management and compliance setup. CZ's personal legal liability and the platform's compliance remediation are two separate tracks, though a leadership change is a factor users should consider for long-term decisions.

Could Binance face more regulatory action?

In principle, any regulated or quasi-regulated business can continue to be reviewed. Binance has settled with the U.S. DOJ, FinCEN, OFAC and CFTC, parts of the SEC litigation are being resolved, and the company has applied for or obtained local licenses in multiple countries. Whether further enforcement comes depends on regulators' pace in different regions, Binance's remediation progress and the broader industry trend.

What is the SAFU fund and how does it protect me?

SAFU stands for Secure Asset Fund for Users, an emergency reserve Binance set up in 2018 to compensate users in extreme events. Binance has publicly disclosed the fund's asset composition and value, and users can check official on-chain addresses. However, SAFU is not statutory insurance — coverage scope, cap and trigger conditions are determined by Binance, and it should not be read as "guaranteed principal forever".