On the evening of 29 October 2026, attackers drained about $6.3 billion from Binance's hot wallets. It is the largest theft in the history of digital assets. According to Binance's first findings, the way in wasn't an exotic cryptographic flaw. It was a compromised engineer's laptop, which was used to get the exchange's own systems to sign withdrawals.
No identifier, the LEI included, would have stopped that first step. Laptop security, signing controls and staff training are the defences there. But a heist doesn't end when the money leaves the wallet. Stolen funds are only worth something once they can be spent, and that takes counterparties: market makers, OTC desks, payment firms and shell companies. That is the point where knowing exactly who you're dealing with becomes a defence.
Within hours, stablecoin issuers had frozen around half of the stolen funds. That was possible because issuers and exchanges could act fast against known addresses. The rest of the money is now being laundered. Some of it was sold to market makers at a steep discount, and investigators expect the rest to go through bridges, swap services and OTC brokers.
Every one of those steps is a business deal between legal entities. A firm that accepts a large block of discounted stablecoins should be asking: who exactly is selling this to me? A trading name on a Telegram chat isn't an answer. A verified LEI is. It's a 20-character code tied to a registered legal entity, with its legal name, address and, in many cases, its parent companies, all checked against official registries and published openly by GLEIF.
That is why European rules already build it in. Under the EU Transfer of Funds Regulation (the "Travel Rule" for crypto), crypto-asset service providers must send information about the sender and recipient with each transfer. For legal entities, that includes the LEI where one exists. When every institutional counterparty can be identified to the same global standard, it gets much harder to move stolen money through a chain of anonymous companies.
Big hacks bring scams in their wake. Affected users are already being targeted with fake "compensation" portals, fake support agents and so-called recovery firms that ask for an upfront fee. Binance has stressed that it is not asking anyone to claim funds, connect a wallet or pay anything.
For businesses, the defence is the same idea: check the entity before you trust it. Is the "recovery law firm" a real registered company? Is the "exchange partner" emailing your treasury team the entity it says it is? An LEI lookup takes seconds and is free for anyone.
The next step, the verifiable LEI (vLEI), goes further. It lets an organisation cryptographically prove who it is, and even what role the person acting for it holds. Global FinReg already provides corporate entity verification for the Concordium blockchain, and we believe verified organisational identity will become a basic layer of digital-asset markets.
The Binance hack will be studied for years for what went wrong inside the exchange. The lesson for everyone else is simpler: in a market where money moves in minutes, knowing who is on the other side of the trade is part of your security.
Need a new LEI code, or need to renew or transfer one? Global FinReg serves companies worldwide, and LEI registration only takes a few minutes.
Corporate verification is normally a waiting game. Submit the documents, wait for someone to read them, and then wait for a decision. At most, this process takes a couple of days, while for a company whose paperwork is already in order, it is a matter of minutes.
An LEI code is a 20-character alphanumeric code that contains info about the company, including name, address and ownership. Here's everything you need to know.
GLEIF has conducted a survey of 102 salespeople within banking to find out which challenges they face with identifying legal entities and onboarding of customers.
We are here to help you!