Five days after the Binance hack, the biggest exchange rankings had not changed: why, and how Takame differs

On 3 November 2026, five days after attackers took an estimated $6.36 billion from Binance, Binance was still rated 10 out of 10 on CoinGecko's Trust Score, in 4th place, and ranked first on CoinMarketCap. Neither page showed any notice about the hack. That is not a mistake by either site: they measure other things. This page explains what each ranking measures, what that means if you read it as a safety ranking, and how the hack entered Binance's Takame score.

What happened, in brief

• 29 October: Attackers moved funds out of Binance's hot wallets. TRM Labs and the DefiLlama hacks dataset put the loss at $6.36 billion. Binance suspended deposits and withdrawals.
• 31 October: The FBI said North Korea was "responsible for the theft of more than $6 billion USD in virtual assets from cryptocurrency exchange Binance, on or about October 29, 2026", and named the activity "TraderTraitor". With the US Secret Service and IRS Criminal Investigation, it published the addresses involved and asked services to block them.
• 1 November: Binance began restoring withdrawals in phases at 06:00 UTC. By 12:36 UTC, withdrawals had resumed for the 15 networks and assets in the first phase. Binance says that between 06:00 and 15:30 UTC it processed $4.649 billion in withdrawals and $1.01 billion in deposits, a net outflow of about $3.64 billion. That is 2.1% of the $171 billion in assets in its 28 October proof of reserves.

What the two largest rankings showed on 3 November

These rankings answer a different question: is this exchange's reported trading real, and how big is it? By that measure, a hack that the exchange says it will fully cover changes little. Binance kept trading, and its volume stayed the largest. CoinGecko lists a cybersecurity score among its inputs, but its page does not say whether a hack changes that score, or when.

The problem is how the rankings get read. Many people treat the top of these tables as a list of exchanges that are safe to use. Five days after the largest crypto theft on record, nothing on either page told a reader it had happened.

How the hack entered Binance's Takame score

• Takame's score has an Incidents part worth 20 of its 100 points. Each hack or enforcement outcome of $50 million or more in the last three years removes 10 points. Binance had already lost 10 points for its November 2023 resolution with US authorities. The October 2026 hack removed the other 10, so Binance's Incidents part is 0 of 20.
• The hack has counted since 31 October. DefiLlama listed it by 00:10 UTC on 30 October. We matched DefiLlama's entry to Binance on 31 October, about a day later than we should have, because DefiLlama used a new spelling of the name. We have since changed how names are matched.
• On 3 November, Binance's overall Takame score was 5.9 out of 10. Binance's page shows the hack, its source, and each update since: the FBI attribution, the withdrawal restart and the outflows.

Since 1 November 2026, a hack at a major exchange follows a fixed rule:

1. 1.Reported. People who watch that exchange are notified within minutes of the first report. The score does not change.
2. 2.Confirmed. DefiLlama lists it, the exchange confirms it, or two independent major outlets report it. It then counts in the score.
3. 3.Withdrawn. A report not confirmed within 72 hours is withdrawn, and the exchange page says so.

Takame does not use other sites' ratings, scores or ranks in its own score. The figures above appear only in this comparison, with the screenshots and the date they were read.