Binance founder discusses security considerations in post-breach incident management decisions

Binance founder CZ discussed his public recommendation for Bybit to pause withdrawals following a September 25, 2026 hack that compromised the exchange. CZ explained that pausing withdrawals could prevent further abnormal fund outflows during active security incidents, though he acknowledged the trade-offs between user convenience and security risk. Bybit ultimately chose not to implement the pause, and CZ stated the incident resolved without additional complications, noting there is no universally correct approach to such crises.

The September 2026 Bybit breach highlighted a fundamental dilemma in exchange operations during active security incidents. When systems are compromised, operators must rapidly decide whether restricting user access reduces risk or amplifies panic. CZ's public intervention suggested that temporary withdrawal freezes could contain losses during the critical window when attackers might exploit continued fund movement. His recommendation underscored how senior industry voices shape crisis response protocols across platforms.

Bybit's decision to maintain withdrawal services despite the breach represents an alternative risk calculation. The exchange evidently judged that preserving customer access and market confidence outweighed the threat of continued abnormal transactions. The incident's resolution without escalation suggests both approaches—pausing and continuing—carry legitimate operational logic depending on breach severity, detection speed, and user base composition.