Bank supervisors at the Federal Reserve and the Office of the Comptroller of the Currency began calling US banks on Monday morning to ask whether their systems had held up, four days after the Binance hack. Reuters reported the calls on Thursday, citing several sources familiar with the matter.
Supervisors asked about any unusual activity or disruption in services, and the banks found nothing. The significance is that regulators asked at all, which makes the Binance hack the first crypto theft treated as a question for the banking system rather than for crypto alone. A fuller accounting of what was taken, frozen and replaced runs in the Binance hack one week on.
Eighteen months separate the last loosening of bank crypto oversight from the Binance hack week when supervisors picked up the phone. Source: Reuters, Jones Day · Chart: FinanceFeedsSupervisors Started Calling on Monday Morning
One source at a bank that regulators contacted said there were no disruptions in its services, according to Reuters. Staff at that bank prepared talking points for customers and have since fielded few questions.
Banks are running their own diagnostics on top of the supervisory calls from the two agencies. Two separate people told Reuters lenders are checking whether they could withstand a similar attack. The Fed and the OCC both declined to comment, and Binance said it was unaware of the conversations between bankers and regulators.
“We are in close contact with regulators all over the world, keeping them up to date on this security breach,” a Binance spokesperson said.
A Bank’s Cyber Team Called Binance Within Hours
Private sector response ran ahead of the supervisory one, according to the Reuters account. Within hours of the attack, a cybersecurity team at one of the largest US banks reached out to counterparts at Binance, Reuters reported.
That team is now writing an internal report that will trigger a review of the bank’s own systems and possibly a round of cybersecurity updates. The source said it is not yet clear whether the bank is exposed to the same tactics used in the Binance hack.
Investor Takeaway
A bank calling Binance within hours and supervisors calling banks within four days means the Binance hack is being treated as an operational risk question for lenders, so watch for supervisory guidance rather than enforcement.
The Binance Hack Vector Was AI Tooling
One person familiar with the bank reviews told Reuters the big concern is that artificial intelligence models are evolving quickly, making it hard for banks to keep pace with attackers. Banks are putting substantial resources into reviewing and patching cybersecurity code.
That worry is not an abstract one in the case of the Binance hack. Binance’s own incident report traces the breach to June, when a wallet engineer downloaded a tampered Homebrew installation while trying to install an AI coding tool, and to 20 October, when attackers used an internal AI tool to move laterally onto two more engineers’ machines. FinanceFeeds set out the full chain in how a fake job interview and an AI tool enabled the theft and in one fake interview opened $6.34 billion.
Supervisors are asking about a category of risk that this particular attack demonstrated end to end. Binance has also said it blocked 57 suspected North Korea-linked attacks before this one landed, and North Korea has denied involvement.
The Fed Removed This Guardrail 18 Months Ago
Regulators have spent two years making it easier for banks to touch crypto. The OCC withdrew from the 2023 interagency joint statements on 7 March 2025, and the Federal Reserve followed on 24 April 2025, per Jones Day.
Reuters describes the withdrawn 2022 supervisory letter as having advised banks to get permission before launching crypto activities. The letter was narrower than that. It required state member banks to give the Board advance notice of any crypto-asset activity, which is a notification duty rather than a consent regime, and the FDIC joined the Fed in a formal withdrawal on the same April date.
Eighteen months passed between the Fed dropping that requirement and supervisors phoning banks about a crypto theft, with no equivalent reporting channel in place when they wanted answers about the Binance hack.
Congress May Move the Other Way
Democrats took both chambers this week, and Reuters is already reporting that banks expect tighter oversight from the new Congress, with the Binance hack still unresolved. The market reaction to the sweep ran on FinanceFeeds on Wednesday.
The new Congress is not seated until 3 January, so the near-term question sits with the agencies. Supervisory expectations can change through guidance and examination priorities without a single vote, and the calls placed on Monday are how that usually starts.
Investor Takeaway
The Binance hack has moved crypto operational risk onto the bank examination agenda, so the signal to track is whether the Fed or OCC issues guidance before January.
