SAFU, Crypto Insurance and FDIC: What Covers Your Coins
SAFU is an exchange reserve paid out at the exchange's discretion. What SAFU, exchange crime policies, FDIC and SIPC cover in 2026, and which losses stay with you.
SAFU, Binance’s Secure Asset Fund for Users, is a reserve the exchange pays out at its own discretion, and very little else on an exchange is insured: crime policies cover the venue’s storage, FDIC and SIPC exclude crypto. Packed Capital works on the one layer a holder controls, trading through a sub-account that can never withdraw.
A holder who has read about venue risk usually asks one follow-up question: if the exchange fails or gets hacked, does anything pay out? The word “insurance” appears in exchange marketing and in the names of funds, so it is easy to assume the answer is yes.
The documents give a narrower answer. This article works through what each kind of crypto insurance covers according to its own published terms, and the February 2026 change to SAFU that makes the question live. The wider map of who can lose your money sits in our pillar on counterparty risk in crypto, and how exchanges pool deposits is covered in omnibus vs segregated accounts. This page stays on one question: who pays, and who decides.
What is SAFU, and is it insurance?
SAFU stands for Secure Asset Fund for Users. Binance set it up in 2018 as an emergency reserve, described by The Block as designed “to protect users in the event of security breaches or other unforeseen incidents affecting the exchange” (The Block). When it launched, Binance began allocating 10% of all trading fees to it (Binance).
The fund has been used. On 7 May 2019 attackers took 7,000 bitcoin, then worth more than $40 million and about 2% of the exchange’s bitcoin holdings, and Binance said the loss would be covered by SAFU with no user funds affected (Newsweek).
What SAFU lacks is the legal machinery of insurance: no policy in the user’s name, no claims process, no regulator behind the payout. A September 2026 explainer on HackerNoon puts it directly: SAFU “should not be described as the crypto equivalent of FDIC deposit insurance,” and is instead “an exchange-established emergency reserve operating under a different legal and governance framework” (HackerNoon). The 2019 payout happened because Binance decided to make it, and that decision stays with Binance every time.
What did Binance change about SAFU in 2026?
On 30 January 2026 Binance announced it would move SAFU out of its previous mix of stablecoins and other assets and into bitcoin. The conversion finished on 12 February, when Binance bought a final tranche of 4,545 BTC and brought the fund to 15,000 BTC, “valued at roughly $1.005 billion at a bitcoin price of $67,000 at the time of completion” (CoinDesk).
The same announcement carried a pledge. If the market value of the fund falls below $800 million because of bitcoin’s price, Binance says it will rebalance the fund back to $1 billion (The Block).
At the time of writing, the fund is worth more than it was in February. Bitcoin traded at $84,553 at 9:50 a.m. Eastern on 30 September 2026 (Fortune), which puts 15,000 BTC at about $1.27 billion, roughly 26% above its value at completion.
The arithmetic runs the other way too. The $800 million floor corresponds to a bitcoin price of about $53,300 (800 million divided by 15,000). From the 30 September price, that is a fall of about 37%. Drawdowns of that size are part of bitcoin’s history, including the 2022 cycle below.
Why does a bitcoin-denominated SAFU fund shrink when it is needed most?
A protection fund held in the same asset as the deposits it protects moves with those deposits. When bitcoin rises, the fund grows alongside customer balances. When bitcoin falls hard, it shrinks in dollar terms at the same moment. That is arithmetic, and says nothing about anyone’s intentions.
Venue failures tend to arrive in falling markets. Withdrawals accelerate when prices drop, weak balance sheets get exposed, and attackers do not wait for a calm week. FTX filed for bankruptcy in November 2022 with bitcoin around $16,664 (Bitcoin.com News). A fund of 15,000 BTC at that price would have been worth about $250 million.
The $800 million pledge exists to cover exactly this gap, and Binance made it publicly. It is still a corporate commitment with no reserve requirement behind it. A rebalance at the floor would mean buying roughly 3,750 BTC (the $200 million needed to return to $1 billion, at about $53,300 per coin) in the kind of market where exchanges guard their own liquidity. The pledge is a real improvement on no pledge, and it remains a different instrument from an insured deposit.
Stablecoin backing had the opposite profile: its dollar value held roughly flat as prices fell. The February conversion traded that stability for upside, which has paid off through September.
What does exchange crime insurance actually cover?
Some venues buy commercial insurance instead of, or alongside, a reserve fund. Coinbase publishes its terms. Coinbase Global’s crime insurance “protects a portion of digital currencies held across our storage systems against losses from theft, including cybersecurity breaches” (Coinbase).
Three details in that page do most of the work:
- “A portion.” The policy covers part of the assets in storage. The page does not say which part, and it states that “total losses may exceed insurance recoveries so funds may still be at risk.”
- Your credentials are excluded. The policy “does not cover any losses resulting from unauthorized access to your personal or business Coinbase account(s) due to a breach or loss of your credentials.” A phished password or a leaked API key sits outside it.
- The policyholder is Coinbase. In a covered event, the page says Coinbase “will endeavor to make you whole.” The contract is between the exchange and its insurer, and the customer benefits through the exchange.
That structure is typical of custodial crime and specie policies. They insure the custodian’s storage against theft, and they leave out the scenario most holders actually fear, the venue itself becoming insolvent. Insolvency is a credit loss rather than a theft, and a crime policy is written for theft.
Is crypto FDIC insured?
No. The FDIC’s own fact sheet is unusually blunt: “FDIC deposit insurance does not apply to financial products such as stocks, bonds, money market mutual funds, other types of securities, commodities, or crypto assets,” and “FDIC insurance does not protect against the default, insolvency, or bankruptcy of any non-bank entity, including crypto custodians, exchanges, brokers, wallet providers, and neobanks” (FDIC).
Where FDIC does appear on an exchange is the dollar side. Coinbase says that, to the extent US customers’ dollar balances are held as cash, they sit in pooled custodial accounts at FDIC-insured banks such as JPMorgan Chase and Cross River Bank, set up to allow a claim for pass-through insurance up to $250,000 per depositor (Coinbase). Three conditions sit on that. The coverage protects against the partner bank failing, which is a separate event from the exchange failing. It depends on Coinbase “maintaining accurate records.” And Coinbase may instead invest customer dollars in Treasuries or money market funds, outside bank deposit insurance. The same page states that “digital currency is not insured or guaranteed” by the FDIC, the NCUSIF or SIPC.
So “FDIC insured crypto” describes nothing that exists. At most, the cash in a crypto account can carry pass-through bank coverage.
Does SIPC protect crypto held at a broker?
SIPC covers customers of member broker-dealers when the firm fails, up to $500,000 per customer including a $250,000 limit for cash. It restores missing securities and cash, and it “does not protect against the decline in value of your securities” (SIPC).
Bitcoin falls outside it. SIPC’s own page lists Bitcoin, Ether, Solana, XRP and other tokens as examples of digital commodities, drawing on SEC and CFTC guidance, and states that digital asset securities that are unregistered investment contracts do not qualify as securities for protection. A bitcoin ETF share held at a SIPC-member broker is a registered security, so the share itself sits inside the regime (its price still does not). Bitcoin held on an exchange is a commodity balance with a private company and sits outside it.
How do the main kinds of crypto insurance compare?
Whether a page calls it bitcoin insurance, cryptocurrency insurance or digital asset insurance, it is describing one of the layers below. The table uses each provider’s own terms, and adds derivatives insurance funds, whose name causes the most confusion.
| Layer | Example | Covers | Who decides a payout | Covers venue insolvency? |
|---|---|---|---|---|
| Exchange reserve fund | Binance SAFU, 15,000 BTC | Losses from hacks and “unforeseen incidents” | The exchange, at its discretion | No stated commitment |
| Crime or custody policy | Coinbase Global crime insurance | Theft from a portion of the venue’s storage; excludes user credential loss | The insurer pays the exchange | No, theft only |
| Derivatives insurance fund | Deribit insurance fund | Negative equity of bankrupt traders, so winners get paid | Exchange rulebook, published in real time | No |
| Bank deposit insurance | FDIC pass-through on USD cash | Partner bank failure, up to $250,000 | Federal regulator as receiver | No, non-bank failures excluded |
| Broker insurance | SIPC | Missing securities and cash at a failed member broker, up to $500,000 | SIPC trustee process | Only for securities; bitcoin excluded |
Deribit’s fund does a narrow job. It “covers the negative equity of bankrupt traders,” is fed by an extra fee charged on liquidation orders, and Deribit reports no socialized loss event to date (Deribit). It protects the winning side of a contract from a counterparty’s blow-up, and has no bearing on deposits if an exchange stops operating.
If exchanges are not insured, what can a large holder control?
The grid above has one column where the holder carries the risk directly: a compromised login or key. It is also the column a holder can do the most about, because permissions decide it.
Every credential that can move money is a route to losing it, and a manager holding a key with withdrawal rights becomes a counterparty in their own right. The fix is structural. On Deribit, a key granted trading scope and denied the wallet scope can place and cancel orders while the exchange itself rejects withdrawal calls, and our restricted sub-account setup guide walks through the exact settings. Binance offers comparable controls: its API key guidance recommends enabling only the permissions an application needs, and notes that a key cannot be used to initiate withdrawals without IP whitelisting. Copy trading raises the same question from the other side, with the platform holding the controls instead of a manager; see crypto copy trading vs a managed account.
This insures nothing, and it leaves the exchange in place as a counterparty. Our pillar on counterparty risk sets out why venue risk stays with anyone trading on a venue, and not your keys, not your coins covers what that phrase concedes for managed accounts. What permission scope does is remove the one counterparty a holder is free to remove entirely: whoever else has access.
Does a non-custodial managed account make your crypto insured?
It does not, and Packed Capital’s clients carry venue risk like anyone else trading on an exchange. If a venue were hacked or failed, the protection available to a Packed client would be whatever that venue offers every other customer: SAFU on Binance, the insurance fund’s narrower role on Deribit, and the venue’s own solvency.
What the structure changes is the list of people who can move the money. Packed Capital runs its strategies inside a restricted, trade-only sub-account in the client’s own exchange account, so Packed can place trades and has no technical way to withdraw. The assets never move to Packed or into a pool. The rules behind it date back to 2018 and were proven on house capital before any client joined; trading through them now tops $100 million a month. The Option Wheel starts at $100,000 and the Hedged Grid at $1,000,000, each with a target of 20–25% a year. That is a target. Options strategies have losing months, a volatile asset offers no floor, and the venue risk described on this page stays with the client. How it works sets out the setup in full.
The takeaway
Most of what gets called crypto insurance is either a reserve an exchange may choose to use or a policy that protects the exchange’s own storage. SAFU has paid out before and now sits at about $1.27 billion in bitcoin, and both facts can be true alongside a third: its size in a crash depends on the bitcoin price and on a promise. FDIC and SIPC, the two schemes people have in mind when they say “insured,” do not reach bitcoin on an exchange at all.
A large holder cannot buy their way out of venue risk. They can size it, spread it across venues, and make sure no key they issue can withdraw, the one protection on this page the holder controls completely.
FAQ
What does SAFU stand for, and what is the SAFU fund? SAFU stands for Secure Asset Fund for Users. It is an emergency reserve Binance created in 2018 from a share of trading fees. Since February 2026 SAFU holds 15,000 BTC, worth about $1.27 billion at bitcoin’s $84,553 price on 30 September 2026, and payouts are at Binance’s discretion.
Is crypto FDIC insured? Crypto assets are not FDIC insured. The FDIC states that deposit insurance does not apply to crypto assets and does not protect against the insolvency of crypto exchanges, custodians or wallet providers. Dollar cash an exchange holds at a partner bank may carry pass-through coverage up to $250,000 against that bank failing.
Are crypto exchanges insured? Some crypto exchanges carry crime insurance on part of their storage. Coinbase, for example, says its crime policy protects a portion of digital currencies in its storage systems against theft, and excludes losses from a customer’s own compromised credentials. No exchange insurance described here covers the exchange’s own insolvency, and SIPC does not protect bitcoin, which it lists as a digital commodity.
Does SAFU guarantee I get my money back if Binance is hacked? SAFU gives users no legal claim. Binance used it after the May 2019 theft of 7,000 BTC and said no user funds were affected. Each payout remains Binance’s decision, and the fund’s dollar value moves with bitcoin, backed by a pledge to rebalance to $1 billion below $800 million.
What is the difference between SAFU and an exchange insurance fund on a derivatives venue? SAFU is a user-protection reserve for incidents such as hacks. A derivatives insurance fund, like Deribit’s, covers the negative equity of traders whose accounts go bankrupt in liquidation, so traders on the winning side still get paid. Neither protects deposits if an exchange stops operating.
Does a trade-only sub-account make my crypto insured? A trade-only sub-account insures nothing. It removes the manager’s ability to withdraw, since the exchange rejects withdrawals on a key without that permission, and Packed Capital runs every mandate this way on Deribit and Binance. The exchange remains a counterparty, so venue insolvency and hacks are still the client’s risk. To talk through the setup on your own holdings, reach us via contact.
Sources: CoinDesk: Binance converts its $1 billion SAFU fund into 15,000 BTC · The Block: Binance finalizes SAFU conversion · Fortune: Bitcoin price, 30 September 2026 · Newsweek: Binance loses 7,000 bitcoin · Coinbase: Insurance · FDIC: Deposit insurance and crypto companies · SIPC: What SIPC protects · Deribit: Insurance Fund · HackerNoon: Protection funds, insurance and FDIC/SIPC