Stuck Coins, No Referee: Binance Freeze Hits Kenyans Five Days Before Crypto Licence DeadlineStuck Coins, No Referee: Binance Freeze Hits Kenyans Five Days Before Crypto Licence Deadline

The world's biggest crypto exchange paused withdrawals on 30 October after a security incident it estimates at about KSh 818B ($6.3B).

Kenya's Virtual Asset Service Providers Act was written for exactly this kind of moment: it orders exchanges to keep customers' coins apart from their own, run an office in Kenya and bank here. Yet no exchange has been licensed under it, and the one-year window for firms already operating closes on 4 November 2026.

For a Kenyan with coins stuck on a foreign platform, that gap matters more than the hack itself.

Binance's KSh 818B Freeze, Seen From Nairobi

In its security incident update, Binance says roughly KSh 390B ($3B) of affected assets has been frozen on-chain with partners, that initial findings point to a possibly compromised laptop belonging to one of its engineers, and that it has found no evidence that wallet private keys leaked. It pledges to cover all losses from its SAFU emergency fund and company money.

Mwenendo has already reported Binance's suspended withdrawals and the exchange's later statement that deposits run normally while withdrawals stay paused, with a restart expected within 48 hours.

Read from Nairobi, every one of those assurances is a promise from a company based outside Kenya. The figures suggest the only backstop a Kenyan holder can lean on this week is Binance's own balance sheet and goodwill. No Kenyan regulator has a supervisory hold over the platform, and no Kenyan fund stands behind its customers.

What Kenya's Crypto Law Promised Holders

The protections Kenyans lack today are written plainly into the Virtual Asset Service Providers Act, 2025. Section 31 requires a licensed provider to separate client holdings from its own and to keep those coins out of reach of its creditors. Section 24 demands "adequate measures" for the safekeeping of customer assets and a bank account in Kenya. Section 19 requires a physical office in the country.

The Treasury's regulations, gazetted on 22 July 2026 as Legal Notice No. 134, add the price of entry. An exchange needs at least KSh 100M (about $770,000) in paid-up capital, and a wallet provider KSh 150M (about $1.15M). The chief executive must live in Kenya. The Capital Markets Authority licenses exchanges, custodians and brokers, while the Central Bank of Kenya handles wallets, payment tokens and stablecoins.

One thing the Act does not contain is a compensation scheme. Even a fully licensed exchange that failed would leave its Kenyan customers relying on segregation rules and the courts, not on a pay-out fund. That is a design choice worth noting before the first licence is ever issued.

Zero Licences Against a 4 November Deadline

In a joint public notice dated 18 November 2025, the Central Bank and the Capital Markets Authority said they "have not licensed any VASPs under the Act to operate in or from Kenya", because licensing had to wait for the Treasury's regulations. Those regulations arrived eight and a half months into a twelve-month transition.

When Mwenendo checked the Capital Markets Authority's public licensee register on 30 October, it listed no virtual asset category at all. Neither regulator has published a list of licensed crypto firms or of applicants. In August, Binance told TechCabal it intended to apply for a Kenyan licence without naming which categories, and Yellow Card, VALR and Luno described similar plans.

Section 47 gives anyone already providing these services one year from commencement, which the Act puts at 4 November 2025, to comply. After that, section 8 makes carrying on the business without a licence an offence. Section 40 sets the penalty at up to KSh 10M (about $77,000) or five years in prison for an individual, and up to KSh 25M (about $192,000) for a company.

The regulations give the regulators up to 30 days to decide a complete application. On that timetable, the evidence suggests any firm that applied after August could still be waiting when the deadline passes, through no fault of its own.

Three Paths for Kenyan Crypto Holders After 4 November

The first path is a burst of licences to the largest platforms. That would bring segregation and local supervision for the future, but it would do nothing for coins already caught in this week's freeze, because the duties apply only to licence holders.

The second is strict enforcement against unlicensed exchanges. Mwenendo's reading is that this carries a real risk of pushing ordinary traders towards person-to-person deals and offshore apps the regulators can see even less of, the opposite of what the law was meant to achieve.

The third is quiet tolerance, with regulators letting the date pass without action. That would leave the criminal offence on the books but unused, and any formal extension would need a legal basis neither regulator has yet set out in public. Each path tells investors how seriously Kenya means its own rules.

A Week of Money Kenyans Could Not Reach

The Binance pause is not an isolated scare. Days earlier, KCB M-Pesa customers were locked out of savings and transfers, the failure Mwenendo said left KCB and Safaricom owing customers both their money and a full account.

The pattern points one way. Kenyan money is moving faster onto digital platforms than the safety rails beneath it are being built. Mwenendo's earlier explainer on how institutional crypto custody works set out the split keys and legal ring-fencing that protect large holders. Retail Kenyans on a foreign exchange have none of that today.

The tests to watch are concrete. Will the Capital Markets Authority and the Central Bank publish the names of applicants before 4 November? Will either say publicly whether Binance's Kenyan customers fall within reach of the Act? And will the first licence carry the segregation and local-office duties in full? Until those answers arrive, Kenya has a crypto law on paper and a crypto market running on trust.