Three firms say buy Coinbase after Binance's $6.3 billion hack; Armstrong's sale window opens November 16
After the record $6.3 billion Binance theft, Cantor Fitzgerald, TD Cowen and Compass Point told clients to buy listed crypto stocks as the safer way to own crypto. What that safety costs at Coinbase: a quarterly profit made of coin-price marks, falling earnings estimates, and executive sale plans that open on November 16.
Richard Tang · 4 min read
Crypto's largest theft has produced Wall Street's boldest buy note, aimed at a stock whose chief executive's selling window opens on November 16 7. A day after about $6.3 billion left Binance, the world's largest crypto exchange, on October 29, analysts at Cantor Fitzgerald, TD Cowen and Compass Point told clients to buy the selloff in Coinbase−9.79% — Coinbase, down 9.79 percent today, the Nasdaq-listed exchange, plus Robinhood−6.84% — Robinhood, down 6.84 percent today, the retail brokerage, and Strategy, the corporate bitcoin holder: listed shares, they argued, carry none of the custody risk the hack just exposed 1.
The custody argument is real: shares in a regulated, exchange-listed company cannot be drained the way Binance's wallets were. It is only half the trade, though, because those shares still run on coin prices, and the hack moved coin prices. Coinbase fell 10.6% on Friday and has lost 60% of its value in a year 2.
The break-in was Binance's, not bitcoin's
The thieves came through a compromised laptop belonging to an engineer on Binance's operations team, then submitted unauthorized withdrawals across ten blockchains; most of the money moved in about 20 minutes 3. Binance says it has found no leaked private key, and TD Cowen's case rests exactly there: a failure inside one exchange's operations is not a failure of the technology underneath it 31.
Cleanup came quickly, and only partway. Stablecoin issuers froze roughly $3 billion of the stolen money since the break-in, Tether alone more than $1.5 billion, but TRM Labs, a blockchain analytics firm, estimates the attacker still controls about $2.4 billion of bitcoin and ether no issuer can reach 13. Binance has set aside $6.34 billion to cover every loss, hence Cantor analyst Ramsey El-Assal's line that "this is not 2022": FTX, the exchange whose 2022 collapse took customer money down with it, had misused those funds, and Binance is paying 14.
What the dip buyer is actually paying for
The custody argument ends at the wallet. Of the $719 million of third-quarter net income anchoring the recovery case, $715 million was gains on the crypto Coinbase holds, struck with bitcoin at $83,576 on September 30; adjusted net income was $78 million 56. Bitcoin ended the week near $77,000, below that mark, low enough that, if it held to year-end, the same accounting could swap the gain for a steep loss 64.
$715 million of the $719 million profit is gains on Coinbase's own crypto
Data
| Q3 2026 | |
|---|---|
| Net income, GAAP | $719M |
| Gains on crypto held | $715M |
| Adjusted net income | $78M |
Away from the balance sheet the picture is mixed. Prediction markets, where users bet on event outcomes, crossed $200 million of annualized revenue 5. The estimates still point down: analysts cut their 2027 earnings forecast to $3.02 a share, from $4.21 three months ago 2.
Three losing quarters, then a profit made of balance-sheet marks
Data
| Net income | |
|---|---|
| Q3 '25 | $0.43B |
| Q4 '25 | -$0.67B |
| Q1 '26 | -$0.39B |
| Q2 '26 | -$0.36B |
| Q3 '26 | $0.72B |
Three firms said buy, five banks cut
El-Assal wrote "we would be buyers on weakness" 4. Compass Point expects business to migrate to rivals including Coinbase, and names $75,000 to $77,000 as the bitcoin level that decides it, a band the coin ended Friday just above 14. Moody's+1.04% — Moody's, up 1.04 percent today, the ratings agency, drew the opposite lesson, saying the hack illustrates risk concentrated in large, centralized intermediaries 1. After Thursday's earnings report, five banks cut their Coinbase targets, Barclays−3.55% — Barclays, down 3.55 percent today furthest to $120, while Canaccord Genuity kept its Buy at $275, about 120 times the earnings analysts expect over the next year 62.
Canaccord's $275 sits above a Street busy cutting targets
Data
| Value | |
|---|---|
| Lowest target | $110 |
| Barclays | $120 |
| Friday close | $141.66 |
| Consensus, 38 analysts | $211 |
| Canaccord, Buy kept | $275 |
| Highest target | $300 |
A selling window opens on November 16
The insider plans we reported on Friday now land in a different market 7. Chief executive Brian Armstrong, co-founder Fred Ehrsam and president Emilie Choi have filed schedules to sell up to 13.6 million shares through 2027; Armstrong's window opens on November 16, and his plan, adopted on August 12, is more than double the size of the one he filed a year ago 7.
These are Rule 10b5-1 programs, selling schedules insiders lock in while holding no material nonpublic information, so Armstrong's predates the hack 7. A $1.96 billion buyback authorization sits on the other side 7. It is still supply, arriving two weeks after three firms told clients to buy the dip.
Two dates will settle it
The notes are right that regulated shares remove the emptied-wallet risk, and that is worth something. It is not worth 70 times earnings, which is what Coinbase commanded at Thursday's close against a five-year average of 28 2.
A stock bought at that price is a leveraged bet on the very coins the hack just knocked down. The sales that follow November 16 will show whether the people running the exchange share the analysts' confidence, and the fourth-quarter report, expected in February 2, will show whether trading, not the balance sheet, is what recovered.
Get Economy by email, free
How AI moves rates, banks, payments and the wider economy. In our daily email, every weekday.
