When a cloud company raises capex guidance, the headline number often travels farther than the explanation. Investors, suppliers, and data-center developers want to know whether the increase means more servers, more buildings, more leases, or simply a faster payment schedule.

The answer is usually a combination. Hyperscaler capex can include servers, networking, land, building construction, power equipment, data-center fit-outs, and facilities that will not be placed in service for months or years. A good reader separates spending from capacity, capacity from revenue, and revenue from cash return.

Start with the filing, not the headline

Public companies describe capital expenditures in quarterly releases, earnings calls, 10-Q filings, and annual reports. The filing is the best place to find the accounting definition and timing.

Alphabet said in its 2025 second-quarter results that it was increasing 2025 capex to approximately $85 billion. Its filing also explained that technical infrastructure includes servers and network equipment as well as data-center land and buildings, and that the period from purchase to placement in service can extend from months to years.

Meta reported $69.69 billion of property and equipment purchases in 2025 and expected approximately $115 billion to $135 billion of 2026 capital expenditures for AI and core business. Alphabet’s 2025 annual report later reported $91.4 billion in capital expenditures, primarily technical infrastructure. These numbers are large, but they do not map one-for-one to energized megawatts.

Guidance is a range with conditions

Companies usually provide a range or a directional statement. The range expresses management’s current plan under assumptions about demand, supply, product road maps, and construction timing.

The number can change because a chip shipment moves from one quarter to another, a project is delayed, a lease is signed, or a new customer demand forecast changes. A higher capex figure is not automatically bullish. It may signal strong demand, but it can also signal an expensive race to stay current.

The reader should record the date of the guidance, the fiscal period it covers, and whether it is a new plan or an update to a prior one. Comparing a 2026 annual range with a 2025 nine-month spending total without matching periods creates false precision.

Capex has at least four buckets

The first bucket is compute hardware: GPUs, custom accelerators, CPUs, memory, and servers. The second is networking and storage: switches, optics, storage systems, and interconnects. The third is site infrastructure: land, buildings, electrical systems, cooling, generators, and security. The fourth is lease and construction commitments that may not yet appear as current-period property purchases.

The accounting can blur the operating picture. A company may purchase equipment before it is installed. A building may be under construction while rent or interest is recorded separately. A lease may create future payment obligations even when the related capacity is not energized.

Alphabet disclosed $23.9 billion of future lease payments primarily related to data centers that had not yet commenced as of June 30, 2025. That is useful evidence of commitments, but it is not equivalent to current operating revenue.

What the guidance says about suppliers

Capex guidance is a demand signal for equipment makers, contractors, utilities, and landlords. But the signal passes through lead times. A server purchase can turn into near-term revenue for a manufacturer. A substation, transformer, or power plant may not create revenue or capacity for years.

The backlog question is therefore separate. A supplier can report orders that are contractually committed but not yet shipped. A cloud company can guide to more capex while equipment remains constrained. Conversely, a supplier can have a full order book while a customer delays the data center where the equipment was meant to operate.

Use physical milestones as a check

The strongest cross-checks are power and construction milestones: land acquired, permits issued, utility interconnection accepted, substation ordered, building topped out, switchgear installed, commissioning started, and racks energized.

A company may spend billions and still have less available compute than investors expect if power and facilities lag. The reverse can also happen: a leased building may be ready while accelerator supply is late.

Look at returns, not only growth

The final question is whether the spending creates productive capacity. Watch revenue growth, cloud backlog, utilization, gross margins, depreciation, power costs, and the useful life of the equipment.

Capex guidance is best used as a map of management’s intent. It becomes an investment thesis only when paired with evidence that hardware, power, buildings, customers, and software are arriving on compatible schedules.

There is a second timing issue: depreciation starts when equipment is placed in service, not when the headline announcement is made. If a company buys accelerators early but cannot energize the building, it may carry inventory, construction, and financing costs before the assets contribute revenue. If it delays purchases until power is ready, it may miss a product cycle. Management’s capex guidance is therefore also a statement about risk tolerance across procurement and construction. Investors should compare guidance with the company’s stated depreciation outlook, lease commitments, and expected capacity additions.

Guidance can also be compared with cash flow. A company may fund capex from operating cash, debt, equity, or a mix. Rising spending paired with strong operating cash flow is different from rising spending paired with heavy borrowing. The balance sheet does not determine whether AI investment succeeds, but it determines how long management can sustain a capacity race before returns must appear.

One final check is the difference between a spending plan and a capacity plan. Management can guide to $100 billion of capex while a smaller amount of equipment is installed and usable in the near term. The gap is not necessarily a problem; it is the normal timing of construction. It becomes a problem when valuation assumes all spending is immediately productive.

Late on Thursday, October 29, 2026, money started leaving Binance. Not a little. Blockchain forensics firm TRM Labs says an attacker moved roughly $6.36 billion out of Binance wallets on ten blockchains, most of it in about twenty minutes. By Friday morning the world’s largest cryptocurrency exchange had suspended deposits and withdrawals, three separate analytics firms had pointed at North Korea, and the industry was in a race to freeze whatever it could before the money disappeared into mixers and over-the-counter desks.

It is, by a wide margin, the largest theft in the history of digital assets. The previous record, the $1.5 billion taken from Bybit in February 2025, is now a footnote at roughly a quarter of the size.

What happened, as far as anyone knows

Binance’s first statement, posted late Thursday, said an initial investigation pointed to an engineer’s laptop. Access to that machine let the attacker reach a service container and submit unauthorized withdrawal transactions. By Friday the company said its investigation had found additional points of breach, which is a careful way of saying the laptop was a door, not the whole story.

Mark Karpeles, who ran the Mt. Gox exchange before its 2014 collapse, told Reuters the attackers most likely obtained signing keys for at least two Binance wallets. That squares with what the forensics firms describe: signatures gathered in advance, staging that began well before the theft, and then everything executed in a single burst. Funds left wallets on Ethereum, Bitcoin, Tron, Solana, the XRP Ledger and others at nearly the same moment.

Binance CEO Richard Teng said the company’s technology and security teams were still deep in the investigation on Friday. Changpeng Zhao, the co-founder who stepped down as CEO in 2023, said he expected user funds to be protected.

Who did it

TRM Labs attributes the attack, with what it calls high confidence, to TraderTraitor, a North Korean state-sponsored unit that focuses almost entirely on stealing cryptocurrency from large companies and exchanges. Chainalysis reached the same conclusion independently. Elliptic noted that some of the stolen funds landed in a wallet used in a $351 million attack on the exchange Bitget earlier this year.

The pattern matters because it is a pattern. The FBI named the same group for the Bybit theft. TRM points to a KelpDAO hack in April 2026 with matching fingerprints: small Tornado Cash withdrawals used to fund an operator wallet, long preparation, then a fast exit. North Korea has been running this playbook since at least 2017, when its hackers hit four South Korean exchanges. Chainalysis and Elliptic estimate the regime’s hackers had stolen around $6 billion in total from 2017 through 2025. In one night they roughly doubled it.

How much is actually gone

Less than the headline, and this is the part worth watching. Security researchers say about half the stolen value was frozen as it moved across chains, because issuers of stablecoins and other centrally controlled tokens can and did blacklist addresses in real time. Binance said Friday it had begun recovering affected assets and was working with law enforcement and the forensics firms to trace more.

The other half is the hard part. Bitcoin and Ether cannot be frozen by an issuer. The attackers will try to split it, mix it, bridge it and eventually convert it through over-the-counter brokers in jurisdictions that do not ask questions. That process took the Bybit thieves weeks, and a large share of that money was never recovered.

What this means for exchanges, custody and the people who use them

Three things, in order of how directly they touch you.

Not your keys, not your coins, again. Every large exchange theft produces the same lesson and most people ignore it because exchanges are convenient. Assets you leave on a platform are an unsecured claim on that platform. Binance says user funds are safe, and its size makes that plausible, but the statement is a promise from a company, not a property of the asset.

Insurance will not save anyone. Most crime and cyber policies exclude stolen cryptocurrency outright. Crypto-specific coverage exists but is small, expensive and written by a handful of specialist underwriters. Exchanges self-insure through reserve funds, and a reserve fund sized for a $100 million incident is not sized for $6 billion.

The attack surface was a person, not a protocol. This was not a flaw in a blockchain. It was a compromised employee device, obtained signing keys and an internal service that trusted them. That is a corporate security failure of the kind that hits banks, hospitals and defense contractors, and it will push exchanges toward the same controls those industries adopted after their own breaches: hardware-isolated signing, multi-party approval with human delays, and treating every engineer’s laptop as hostile.

The BOSSTOX view

We cover the AI build-out: power, cooling, chips, networks and the capital behind them. This story belongs here for a simple reason. Both industries are racing to move enormous value through systems built faster than they have been hardened, and both are discovering that the weakest component is almost always operational, not technical. The forensics and security firms that traced this money in real time, TRM, Chainalysis, Elliptic and their peers, are the picks-and-shovels of digital finance in the same way the cooling and power companies are for AI. When the headline is a disaster, the quiet businesses that make the disaster survivable are where the durable demand sits.

Hackers stole roughly $2.7 billion in crypto across all of 2025, according to TRM’s 2026 Crypto Crime Report. One exchange lost more than twice that in a single evening. Whatever you believe about digital assets, the arithmetic of this week deserves your attention.

BOSSTOX publishes research and explainers. Nothing here is investment advice. Figures are drawn from public statements by Binance and from TRM Labs, Chainalysis and Elliptic as reported October 30–31, 2026, and may change as the investigation continues.

A data center is built with a large amount of money up front and pays off over many years. That basic shape, spend now and earn later, makes the economics of data centers highly sensitive to interest rates. Understanding why helps explain a good deal of the financial commentary about the build-out.

The cost of capital

Every company pays for the money it uses. Lenders expect interest. Shareholders expect a return, even if it is not written in a contract. The blended cost of all those sources is called the cost of capital, often estimated as a weighted average of the cost of debt and the cost of equity.

A project makes economic sense, in broad terms, when the returns it is expected to generate exceed the cost of the capital used to build it. When the cost of capital rises, the bar a project must clear rises with it.

Why long-lived assets are especially sensitive

Money received in the future is worth less than money received today, partly because today’s money could earn interest in the meantime. Finance captures this through a process called discounting. The higher the interest rate used to discount future cash flows, the less those future cash flows are worth today.

Because data centers and power plants produce cash over many years, a change in rates has a large effect on their present value. A modest rise in rates can noticeably reduce what a long-term stream of rent is worth.

Where rates show up

Interest rates affect the build-out in several ways:

• Borrowing costs for construction loans, bonds and project finance
• The returns investors demand from real estate and infrastructure, often discussed as capitalization rates
• The prices of existing data center properties in sales and sale-leasebacks
• The relative attractiveness of building versus leasing capacity
• REIT funding, since REITs rely heavily on raising outside capital

Not the only factor

Rates are important, but they are not destiny. Very large technology companies may fund much of their spending from operating cash flow, making them less dependent on borrowing. Strong demand can support projects even when financing costs are higher. And contracts with built-in rent escalations can help offset some of the impact. Interest rates shift the math; they do not settle it on their own.

Following the connection

When reading about data center financing, it helps to notice whether a deal involves fixed or floating rates, how long the financing lasts and whether it is backed by long-term leases. Central bank decisions and bond market moves often appear in coverage of infrastructure for exactly these reasons. Understanding the link between rates and long-lived assets is useful literacy, not a guide to any individual decision.

This article is general education about how the industry and financial reporting work. It is not investment advice and does not recommend buying or selling any security. For decisions about your own money, talk to a licensed financial advisor.

Going Deeper: A Worked Discounting Example

Round numbers make the sensitivity easy to see. Suppose a hypothetical data center lease pays 10 a year for 15 years. What is that stream worth today?

• At a 5 percent discount rate, the present value is roughly 104.
• At a 7 percent discount rate, it falls to roughly 91.
• At a 9 percent discount rate, it drops to roughly 81.

The rent itself never changes. Only the rate used to value it does. A four-point rise in the discount rate cuts the present value by about a fifth. For a stream lasting 25 or 30 years, the effect would be larger still, because more of the value sits far in the future, where discounting bites hardest.

Now picture a developer deciding whether to build. If construction costs 90, the project clears the bar comfortably at a 5 percent cost of capital, roughly breaks even at 7 percent and falls short at 9 percent. Same building, same tenant, same rent, three different answers.

Capitalization rates in plain terms

Real estate investors often express value through a capitalization rate, which is annual net operating income divided by property value. A property producing 10 of net income and valued at 160 has a cap rate of 6.25 percent. If buyers begin demanding a 7 percent cap rate, perhaps because interest rates have risen, the same income supports a value of only about 143. That is why higher rates can lower property values even when rents hold steady.

How Rate Changes Ripple Through a Project

1. Construction financing. Floating-rate construction loans become more expensive immediately, raising the total cost of building.
2. Capitalized interest. Higher interest during construction adds to the asset’s recorded cost, which later raises depreciation.
3. Permanent financing. When a finished project is refinanced with long-term debt, higher rates reduce how much can be borrowed against the same rent.
4. Exit value. Developers that plan to sell completed facilities may receive lower prices if buyers apply higher cap rates.
5. Tenant decisions. Higher rates can make leasing more attractive than owning for some tenants, and the reverse when rates fall.

Common Misreadings

• “Higher rates stop all building.” Strong demand and well-funded buyers can keep projects moving, though the economics may tighten.
• “Rent escalators remove rate risk.” Fixed annual increases help, but if rates rise faster than rents, value can still decline.
• “Only borrowers care about rates.” Companies funding projects with cash also face an opportunity cost, since that cash could earn interest elsewhere.
• “Short-term and long-term rates move together.” They often do not. Long-lived assets are usually more affected by long-term rates.

Questions Readers Ask

Why do REIT shares often react to interest rate news? REITs rely on outside capital and are valued on long-term income streams, both of which are sensitive to rates.

What is a “spread” over the cost of capital? It is the difference between a project’s expected return and its cost of capital. A wider spread provides more cushion against rising rates or disappointing results.

Where can I see how a company is exposed? The debt footnote in annual and quarterly filings shows interest rates, maturities and how much debt is fixed versus floating. Many companies also include a section on market risk that describes how a change in rates would affect interest expense.

Can falling rates cause problems? They can encourage a rush of building if many developers see the same improved math at once, which may lead to oversupply in some markets. For decisions about your own money, consult a licensed financial professional.