BTC
ETH
SOL
XRP
BNB
TON
DOT
LTC
POL
HBAR
NEAR
ARB
UNIA hacker linked to the Binance breach moved 18,270.2 BTC into 19 wallets, split as 17 wallets of 1,000 BTC each plus two holding 832.5 BTC and 437.7 BTC. All the wallets still held the funds at the latest check, with no further transfers identified.
The story so far: Binance hot wallet hack
On-chain data showed abnormal outflows from a Binance hot wallet worth more than $2.5bn, and Tether froze $971m in USDT linked to the suspected hack. SlowMist's CISO said the probe should focus on a private-key leak or compromised signing machine. Binance says the attack began with a compromised employee computer…
Tree News says signs emerge of possible theft from Binance hot wallet
Tree News says signs point to possible theft from a Binance hot wallet, with more than 60 tokens moved to an address previously known to have received funds via Tornado Cash. About $2.77bn moved across five blockchains; whether it was a hack is unconfirmed.
Binance hot wallet suspected of losing more than $2.5bn in assets
On-chain data indicates abnormal outflows from a Binance hot wallet to newly created addresses initially funded from Tornado Cash, with the assets involved worth more than $2.5bn.
Binance ethereum hot wallet suspected of large abnormal outflow of about $2.53bn
Market reports and on-chain data point to a suspected large abnormal outflow from a Binance ethereum hot wallet involving more than 60 tokens and about $2.53bn in assets. The claim has not been officially confirmed and is still being verified.
Ethereum
ChainCatcherAIBearish
Tether freezes $971m in USDT in suspected Binance hack
Tether has frozen $971m in USDT linked to a suspected hack of Binance, according to on-chain reports.
Stablecoins
OdailyAIBearishCircle freezes $823m in USDC amid suspected Binance hack
Circle has frozen $823m in USDC in connection with a suspected hack at Binance, on-chain reports say.
Stablecoins
OdailyAIBearishHe Yi says Binance investigating reports of potential security issue
He Yi said on X that Binance has noted reports of a potential security problem and is actively investigating, with its security team urgently reviewing the information. She said verified updates will come through official Binance channels and warned users against scams and unofficial links.
CZ says Binance user funds are safe as about $1.79bn in stablecoins is frozen
CZ said user funds are safe and that the incident looks like a hack targeting Binance, thanking Tether and Circle for quickly freezing about $971m and $823m respectively. He no longer manages Binance.com but, as a shareholder, expects all user funds to be fully covered.
Stablecoins
OdailyAIBearishTether has frozen more than 1.567bn USDT
Tether has frozen more than 1.567bn USDT, Bloomberg reported.
Stablecoins
OdailyAIBearishArkham links suspected Binance hacker to 50 wallets holding $5.61bn
Arkham says a hacker suspected of stealing billions of dollars in an overnight attack on Binance holds about $5.61bn across 50 wallets, led by about $1.57bn in USDT, $1.45bn in BTC and $879m in ETH. Tether has said it froze more than 1.567bn USDT tied to the hack.
Stablecoins
CoinNessAIBearishBinance says technical error is blocking some withdrawals
Binance said some users hit crypto withdrawal problems because of a technical error and its team is working to restore the service, adding that user funds are safe. On-chain data suggested outflows of up to $5.6bn after its hot wallet was suspected of being attacked.
Aave freezes lending market linked to stolen crypto tied to Binance
Aave said it urgently froze the relevant lending market to block attempts to borrow again using cryptocurrency leaked from Binance as collateral.
Binance co-CEO He Yi says Ripple froze $200m tied to hack
Binance co-CEO He Yi says the Ripple team quickly froze about $200m in funds tied to the Binance hack.
Address linked to suspected Binance hack borrows 19,762 ETH from Aave
Phylax Systems' Odysseus says an address tied to a suspected Binance hot wallet hack deposited about $60m in USDT into Aave and borrowed 19,762 ETH, worth about $44.7m. Etherscan has flagged the address as "Binance Hot Wallet Exploiter 3".
Attackers allegedly used EIP-7702 delegation to redirect Binance wallet to malicious code
Attackers allegedly used EIP-7702 delegation to point a Binance wallet at malicious code and move funds. How they obtained authorisation is still under investigation, with a stolen private key or a compromised signing flow both unconfirmed possibilities.
Yi He says Ripple and WLFI helped freeze assets as Binance halts withdrawals
Binance co-founder Yi He said Ripple froze about 200 million in related assets and World Liberty Financial froze $27m in USD1 and 48 million WLFI, worth about $2m. Binance has suspended withdrawals until conditions are confirmed safe, she said, adding that user funds are safe.
Binance said to still sweep new user deposits into compromised hot wallet
Bitcoin News monitoring indicates Binance is still running automatic deposit sweeping that moves new user deposits into the compromised hot wallet, with the attacker said to keep moving funds out as they arrive. Users are advised to avoid depositing until the incident is resolved.
Cointelegraph says Binance and Polymarket hacked on same day
Cointelegraph reported that Binance and Polymarket were hacked on 29 Oct, with estimated outflows of $5.7bn from Binance and $2.7m from Polymarket.
Address linked to suspected Binance breach sells about 4.7m UNI for ETH
An address tagged "Binance Hot Wallet Exploiter 15" is swapping UNI for ETH via Uniswap. It received about 7.02m UNI, has sold about 4.7m and holds about 2.32m UNI worth roughly $14.9m plus about 12,283.8 ETH worth about $27.9m.
Elon Musk says 'Everyday is Zeroday' on Binance hack
Elon Musk commented on the Binance hack, saying: "Everyday is Zeroday."
Binance hack of about $5.7bn may be largest crypto theft on record
About $5.7bn in cryptocurrency was stolen in the overnight Binance hack, which if officially confirmed would be the largest crypto hack ever, surpassing the $1.5bn taken from Bybit last year and $625m from Ronin Network in 2022.
Aave freezes DAO-run V3 and V4 markets after Binance wallet reports
Aave says its contracts are unaffected and positions remain overcollateralised, but all DAO-run V3 and V4 markets are frozen as a precaution, halting new deposits and borrowing while withdrawals and repayments continue.
Lookonchain says Binance hacker is selling PEPE, UNI and LINK for ETH
Lookonchain said the suspected Binance hacker is selling PEPE, UNI, LINK and other tokens on-chain for ETH, and still holds large altcoin positions including 217.5m ENA worth $39.5m and 7.58tn PEPE worth $34.4m.
Aave says it will keep monitoring and unfreeze DAO markets soon
Aave said it is continuing to monitor the situation and will unfreeze all previously frozen DAO-operated markets on V3 and V4 as soon as possible.
Binance reportedly recovers $823m in USDC after wallet exploit
On-chain analysis cited by Bitcoin News indicates attackers used a malicious EIP-7702 approval to control a Binance wallet, and Binance reportedly used a signing key to recover $823m in USDC. The attackers allegedly moved 65 assets, with a $200m USDT deposit transferred out 100 seconds after arriving.
Stablecoins
OdailyAIBearishZhao Changpeng says Binance loss may be slightly above $1bn and it will cover it
Binance founder Zhao Changpeng says the loss may be slightly above $1bn and that Binance will bear it, replying to DefiLlama founder 0xngmi, who estimated a final loss of about $1bn, or 0.69% of roughly $144bn in custodied assets, after USDT and USDC were frozen.
Stablecoins
Upbit warns users over Binance withdrawals and may restrict them
Upbit said a security incident at Binance and signs of stolen digital assets mean users should be extra cautious when withdrawing there. It is monitoring the situation and may restrict withdrawals to Binance if necessary.
Paxos freezes $7.66m in PAXG linked to suspected Binance hack
Paxos says it froze 1,906.67 PAXG, worth about $7.66m, in a wallet beginning 0x522 believed to belong to a hacker after PAXG was taken in the Binance hack. Paxos says PAXG, PYUSD and USDG reserves are intact, its systems were unaffected and redemptions continue normally.
Stablecoins
CoinNessAIBearishBinance hot wallets keep sending funds, with over $6.26bn moved
About $6.26bn in assets has moved from Binance wallets to addresses controlled by an attacker across nine chains, including Ethereum, Bitcoin, Tron, XRP, Solana, Arbitrum, Avalanche, Optimism and Base, on-chain data shows.
Bybit CEO Ben Zhou says platform unaffected and offers support to Binance
Bybit founder and CEO Ben Zhou said the exchange was unaffected by reported security incidents at several platforms, with trading and withdrawals operating normally and user assets safe. He said Bybit was willing to offer support to Binance.
Altcoins
Navi Protocol says user funds are safe after Binance incident
Navi Protocol said the Binance-related incident has not affected it and that user funds are safe, with deposits, withdrawals, borrowing and repayments running normally. The team said it is watching on-chain activity and urged users to check their positions amid possible volatility.
Wintermute's Evgeny Gaevoy says under 20% of net assets exposed to Binance
Wintermute founder Evgeny Gaevoy said less than 20% of the firm's net assets are exposed to Binance and that its market-making operations will not be disrupted. He said Binance can probably withstand the situation and user funds are likely safe, but advised against depositing until the issue is resolved.
Binance hack puts DeFi on alert as $5.5bn in stolen assets raises contagion risk
A Binance hack has put DeFi on alert, with $5.5bn in stolen assets raising the risk of contagion.
Altcoins
BloomingbitAIBearish
Binance moves funds from at-risk wallets to cold storage after major hack
Binance is shifting funds from every wallet exposed to hacking risk into cold wallets, after what Solid Intel called the largest hack on record overnight.
OKX founder Star calls for industry-wide real-time security and freezing system
OKX founder Star praised Circle and Tether's handling of the suspected Binance theft and called for exchanges and stablecoin issuers to build a shared security response mechanism. He proposed real-time alerts, information sharing and temporary freezing of suspect funds within minutes, with standardised procedures and clear roles.
Stablecoins
Crypto.com CEO says platform unaffected by Binance attack
Crypto.com CEO Kris Marszalek says the platform was not affected by the cybersecurity attack on Binance, is operating normally with all funds safe, and is blocking addresses linked to the incident while offering Binance assistance.
Developer 0xjustadev warned of EIP-7702 theft risk two years ago, X user says
X user 0xVEER said developer 0xjustadev warned during EIP-7702 discussions about two years ago that the proposal could enable attackers to control wallets. Whether the Binance incident involved EIP-7702 is unconfirmed by Binance.
Ethereum
Developer Justin Kalland says Binance hacker may have slipped up over MetaMask gas use
Smart-contract developer Justin Kalland said the suspected Binance hacker sent 175m USDT to a new wallet, which then received 2 ETH for gas and later used MetaMask's Gas Station service. He said MetaMask should preserve any Web2 logs it can obtain.
Ethereum
Binance says it is working to trace and freeze more stolen assets
Binance said it is working with law enforcement, asset issuers, blockchain intelligence firms and industry partners to trace and freeze more of the stolen assets, and expects the total frozen to rise.
Regulation
Ripple says it is freezing RLUSD tied to suspected Binance attack
Ripple stablecoin head Jack McDonald says Ripple is freezing affected RLUSD funds after reports of a possible attack on Binance in which the suspected attacker holds the token. Ripple says it is coordinating with relevant parties and is ready to assist the investigation.
Stablecoins
OdailyAIBearishArbitrum Security Council freezes about $30.5m linked to Binance exploit
The Arbitrum Security Council has executed a transaction freezing about $30.5m of funds tied to the Binance exploit.
Drained Binance wallet was a proof-of-reserves wallet, ETH ratio may fall to 94%
The wallet emptied in the attack was one Binance uses to prove 1:1 backing, holding about 1.26bn USDT and 89,475 ETH across 37 assets on 1 Oct, when its ETH reserve ratio was 100%. About 204,500 ETH was taken, or 5.6% of ETH reserves.
Ethereum
Hacker sells 7.77tn PEPE from Binance hot wallet for ETH, Ai Yi says
On-chain analyst Ai Yi says a hacker sold 7.77tn PEPE from a Binance hot wallet for 14,049 ETH at an average of about $0.0000041, pushing PEPE down 12.33%. The sale was worth over $31.9m.
Altcoins
Blockaid CEO Ido Ben-Natan says Binance hack may have abused signing system
Blockaid co-founder and CEO Ido Ben-Natan says the Binance hack may have abused transaction-signing infrastructure rather than stolen private keys, with 50 EIP-7702 approvals bundled into one transaction. He said the method resembled the 2025 Bybit hack.
Shenyu says Binance attackers moved about $5.8bn in three minutes
Cobo co-founder Shenyu said in a video that attackers broadcast a transaction with 50 approval requests at 4:20am Beijing time on 30 Oct and began moving assets about three minutes later across chains including Ethereum and Tron, worth about $5.8bn at then-prices. He said they used the EIP-7702 approval mechanism after rehearsing twice with a test wallet, and Tether has frozen 13...
Ethereum
Specter says Arbitrum froze $30.5m in ARB and Paxos $215,700 in USDP
On-chain sleuth Specter says Arbitrum has frozen $30.5m worth of ARB and Paxos has frozen $215,700 worth of USDP, bringing total frozen funds to $2.83bn.
Bonk Guy says Binance hack unlikely to trigger systemic risk
Bonk Guy says the Binance hack is unlikely to cause systemic risk, estimating unrecoverable funds at about $3.2bn against annual revenue of roughly $16bn-$17bn, or about two to 2.5 months of income. He says CZ and Yi He have pledged that user funds are safe and all losses will be covered, and warns against panic selling.
SlowMist's Cos says Binance hacker used EIP-7702 to sweep hot-wallet tokens
SlowMist's Cos says the attacker behind the Binance hack used Ethereum's EIP-7702 mechanism simply to sweep tokens from Binance-linked hot wallets in bulk, after several hours of rehearsal. The mechanism itself is not at fault, Cos said, as other methods exist.
Binance 14 hot wallet revokes EIP-7702 authorisation after alleged hack
One of the Binance hot wallets allegedly drained in a hack, Binance 14, revoked its EIP-7702 authorisation at 00:10 UTC on 30 Oct, on-chain data shows. The attack allegedly abused the mechanism to hand control of the wallet to a malicious sweeper contract.
Ethereum
Ai Yi links Binance hot wallet hacker to Kelp DAO attacker
On-chain analyst Ai Yi says the Binance hot wallet hacker moved all 74.56m ARB to an address Arkham labels Kelp DAO Hacker, and the tokens have not been moved or sold. Kelp DAO lost about $292m in rsETH in an attack on 18 April that the community speculated was the work of North Korea's Lazarus Group.
Arkham says it has verified 70 addresses linked to Binance hacker
Arkham says it has tagged the attacker behind the Binance hack and that its team has verified 70 on-chain addresses associated with the hacker.
Arkham says address tagged as Kelp DAO hacker is Arbitrum council custody address
Arkham has corrected its labelling, saying address 0x000...0DA0 is a vanity address used by Arbitrum's security council as a multisig or temporary custody address for frozen Kelp DAO assets, not a hacker address.
Arbitrageur made about $3.47m in two hours during Binance attack, user says
A community user said the Binance attacker swapped large USDT amounts for ETH on DEXs to dodge Tether freezes, pushing Uniswap ETH prices to $2,560-$2,750 against Aave oracle quotes of $2,250-$2,290. One address sold 12,289 ETH and bought back 12,314, making about $3.47m before gas fees.
Benson Sun says stolen Binance Bitcoin faces limited near-term selling pressure
Benson Sun, a former FTX community partner, said about $2.5bn of the assets stolen in the Binance hack has been frozen, roughly half the losses, and the rest is mostly BTC and ETH. He said cashing out the stolen Bitcoin would be hard under exchange and on-chain monitoring, while ETH could face more selling pressure.
Binance attacker sells UNI, ENA and five other tokens for 70,480 ETH
Lookonchain says the Binance attacker has sold UNI, ENA, PEPE, LINK, AAVE, ONDO and WLD, converting them into 70,480 ETH worth about $158m at current prices. The UNI sale raised $39.6m and the ENA sale $33.9m.
Aave freezes most markets after Binance hot wallet attack, plans phased unfreeze
LlamaRisk said it and Aave Labs had guardians freeze Aave markets after the Binance ethereum hot wallet attack, covering 175 reserve types across 16 networks on Aave V3 and 117 reserves in four Aave V4 spokes. Aave will monitor the attacker's wallets and unfreeze in stages once funds stop moving.
ZachXBT says Binance hack believed to be work of North Korea's Lazarus Group
On-chain analyst ZachXBT says the latest Binance hack is believed to have been carried out by Lazarus, the North Korean hacking group.
Chainalysis puts Binance hack loss at about $5.91bn
Chainalysis estimates about $5.91bn was stolen in the Binance hack, nearly four times the 2025 Bybit loss. Binance says roughly $3bn has been verified as frozen.
Derek Chiang says EIP-7702 has no flaw but aided Binance attacker
ZeroDev founder Derek Chiang says EIP-7702 itself has no vulnerability, but its transaction batching let the Binance attacker move ETH, USDT and 62 other tokens in one transaction. He says the attacker needed a private key or a signed authorisation.
Coinbase's Brian Armstrong says he has offered Binance help after hack
Coinbase chief executive Brian Armstrong said his team is blocking transfers to the compromised wallets and has contacted Binance to offer assistance. He said the industry should share information openly and protect customers.
Yi He says Binance is running security scans to protect user funds
Binance co-founder Yi He thanked the community for its support and said the exchange is carrying out security scans to keep user funds safe, reiterating the SAFU commitment.
Binance says it will cover all losses from the incident and pauses deposits and withdrawals
Binance said it will bear all losses from the incident and has temporarily suspended deposits and withdrawals as a precaution while it runs security checks, freezes funds and works with law enforcement, promising a full post-mortem once the investigation ends.
SlowMist CISO says Binance theft probe should focus on private-key leak and custom withdrawal tools
SlowMist's chief information security officer, 23pds, says how attackers bypassed Binance's risk controls still needs confirming, with a private-key leak or a compromised signing machine the lines to check. 23pds leans towards a private-key leak and says a custom withdrawal tool was probably used.
Hackers linked to Binance attack move over $1bn in ETH to new wallets
A hacker group allegedly tied to the $5.8bn Binance attack is moving more than $1bn of ETH into new wallets and may be preparing to launder it through Tornado and other mixers, Onchain Lens says.
OKX CEO Star urges exchanges to cooperate on security
OKX founder and CEO Star says security should not be a area of business competition but a shared responsibility across crypto, warning that a major breach at any exchange can damage industry trust. He calls for joint standards, extra checks and delays on large withdrawals to unknown addresses and smart contract approvals, and coordinated incident response.
Regulation
OdailyAIBullishBinance hacker starts selling STRK, Onchain Lens says
Onchain Lens says the Binance hacker has begun selling STRK. Two Hyperliquid traders holding STRK shorts show combined unrealised gains of $4.46m, at $1.61m and $2.85m.
Seven research says Binance hack may hit market makers and quant firms, rattling SOL and altcoins
Crypto KOL Seven research said most market makers and quant firms keep their main funds and margin accounts on Binance, so a withdrawal pause could force them to close positions elsewhere, which it said explains why Solana and many altcoins fell despite the stolen assets being Ethereum-based.
Binance.US CEO Steve Gregory says user funds are fully independent of Binance hack
Binance.US chief executive Steve Gregory said the exchange's user funds are completely separate and unaffected by the theft, and that Binance.US and Binance are independent entities with no shared custody arrangements.
Bitwise CEO says client assets are safe amid Binance situation
Bitwise's CEO said on X that client assets in its managed vaults, private funds and ETFs are safe, and that the team is monitoring the Binance situation. He said spot and lending markets may see short-term volatility and that Binance has industry support.
Binance says incident may involve compromised engineer laptop, losses about $6.3bn
Binance's preliminary investigation suggests a compromised DevOps engineer's laptop let attackers reach a service container and submit unauthorised withdrawals, with no private key leak found. It estimates losses at about $6.3bn, has frozen roughly $3bn on-chain and will cover losses through its SAFU and corporate funds.
Bonk Guy says Binance hack echoes 10.11 and warns of a second leg down
Crypto trader Bonk Guy, posting as Unipcs on X, said the market is not out of danger after the Binance hack, noting Bitcoin fell a further 21% in a week after earlier large exchange thefts. He advised caution on buying the dip and warned of a second decline.
Bitcoin
USDT0 restores USDT transfers between Ethereum and Tron
USDT0 said it has resumed USDT transfers between Ethereum and Tron after pausing them as a precaution during the Binance attack to stop stolen funds moving. Its own infrastructure was unaffected and remains fully secure, it said.
Stablecoins
CZ says Binance user funds are safe after security incident
Binance founder CZ said user funds are safe and thanked He Yi for working through the night on a security incident while pregnant, alongside hundreds of Binance staff. He said industry peers and competitors offered help and that Binance will recover.
The Sandbox says SAND in users' own wallets unaffected by Binance incident
The Sandbox said it is working closely with Binance on the security incident, and that SAND in users' own wallets is unaffected. It warned that any message asking users to claim tokens or click links is a scam.
Binance says SAFU fund and company money will cover all losses
Binance said its SAFU fund and company funds will absorb all losses from the hack, and that user funds are safe. It has paused deposits and withdrawals, revoked approvals on affected addresses and contacted law enforcement and blockchain intelligence partners to trace and recover funds.
Altcoins
First Digital's Vincent Chok says FDUSD stolen in Binance attack is frozen
Vincent Chok, chief executive of First Digital, said the FDUSD stolen in an attack on Binance has been frozen. He said the issuer is working with Binance and that protecting FDUSD holders is the top priority.
Stablecoins
PANewsAIBearishAltcoins fall harder than BNB after Binance security incident
Crypto markets fell after a security incident at Binance, with BNB briefly dropping below $700 and trading at $708, down about 5.34% in 24 hours. Altcoins fell further, with SUPER down 22.06%, RSR 21%, PHA 20.59%, IMX 17.89%, CRV 15.29% and LDO 13.97%.
Lagrange Foundation freezes LA tokens tied to Binance security incident
The Lagrange Foundation has frozen LA tokens linked to a security incident at Binance as a precaution, Lagrange says, leaving the attacker's LA untransferable. Users holding LA on Binance should watch Binance's official channels for notices.
He Yi says Binance deposits running normally and withdrawals due back within 48 hours
Binance co-founder He Yi said on X that deposit services are unaffected and running normally, and that the team is improving withdrawal services and address controls, with withdrawals expected to resume within 48 hours. Further updates will come through official Binance channels.
SlowMist's Yu Xian links Binance hacker funds to Phemex breach wallets
SlowMist's Yu Xian said funds from the Binance hacker are linked to wallet addresses tied to the hackers behind the early-2025 Phemex breach, which he said was traced to North Korean hackers.
1inch says Binance exploit addresses blocked, some stolen 1INCH cannot be frozen
1inch says it blocked exploit-related addresses on its dApp, wallet and API within an hour of the Binance incident, working with ZeroShadow, SEAL 911 and TRM Labs. Some stolen 1INCH cannot be frozen because the token has no freeze function.
Binance hacker moves $38.8m in ETH to new wallet, still holds $1.12bn
A hacker linked to the Binance incident moved $38.8m worth of ETH to a new wallet, possibly to send it to Tornado Cash, and still holds $1.12bn in ETH, Arkham monitoring shows.
Binance hacker moves 18,270 BTC into 19 wallets
A hacker linked to the Binance breach moved 18,270.2 BTC into 19 wallets, split as 17 wallets of 1,000 BTC each plus two holding 832.5 BTC and 437.7 BTC. All the wallets still held the funds at the latest check, with no further transfers identified.
Binance says no private key leak found yet after attack
Binance customer service representative sisi said the attack began with a compromised employee computer and was not something a single device could carry out. Binance said it has found important leads, has taken steps to contain the risk and is still investigating, with no individual blamed so far.
Altcoins
More Bitcoin updates
Every update is a short rewrite, by AI in our own words, of a flash from the outlet named on it, credited and linked. Updates are joined into one story by AI; our editors can change a story’s name or take an update out. Not investment advice.
Breaking news and our own Originals on your phone or desktop, the moment they are out. A few alerts a day at most.