Elliptic says the suspected Binance hacker laundered 28 BTC worth $2.2m through the CoinJoin mixing protocol WabiSabi between 1 Nov and 6:02 UTC today, using funds first stolen in TRX and then ETH swapped into BTC. It says 18,270 BTC taken from Binance is unmoved across 19 addresses.
Elliptic says Binance hacker laundered first funds, $2.2m in BTC, via CoinJoin
NewsFeeds update
The story so far: Binance hot wallet hack
Attackers drained a Binance hot wallet worth more than $2.5bn on 30 Oct; Binance says it recovered 95% of the stolen assets and is resuming withdrawals in phases. Binance now says withdrawals are being restored in stages and warned users about scammers posing as the exchange.
Yi He says Binance's emergency team works round the clock after hack reports
Yi He said on X that Binance's emergency-response departments operate 24-hour shifts and that colleagues spotted the anomaly and began handling it before she learned of the situation on X and joined the response.
Binance plans to restore first-phase withdrawals from 14:00 to 09:00 UTC on 1 Nov
Binance said it plans to restore first-phase withdrawals between 14:00 and 09:00 UTC (06:00-09:00 UTC) on 1 Nov, starting with networks and assets including BTC, ETH, BNB, TRX, SOL, XRP, ZEC, DOGE, TON, POL, AVAX, ARB, BASE, OP and SUI.
Binance hacker sells $5m of PROM for $71, Lookonchain says
A hacker linked to Binance sold 908,793 PROM tokens, worth about $5m, into a near-empty Uniswap V2 pool and received only 0.0316 ETH, roughly $71, according to Lookonchain.
Binance to resume withdrawals in phases after security issue
Binance said it will resume withdrawals in phases, with the first stage due to begin between 6:00 and 9:00 UTC today. The exchange had said on 30 Oct that it was temporarily suspending withdrawals until a security issue was resolved.
Binance to resume first-phase withdrawals between 14:00 and 17:00 on 1 November
Binance plans to resume first-phase withdrawal services between 14:00 and 09:00 UTC on 1 November, gradually reopening withdrawals for a list of networks and assets.
Zhao Changpeng says US agencies helped track and freeze stolen Binance funds
Binance co-founder Zhao Changpeng says the FBI, US Secret Service and IRS helped track and freeze funds from the Binance theft, which he credits as a key reason Bitcoin did not fall further. The FBI has said North Korea was responsible for the theft of more than $6bn in virtual assets from Binance, with attackers mainly converting the funds to ETH.
Binance says Bitcoin network is first restored for withdrawals after security incident
Binance says the Bitcoin network is the first to have withdrawals restored in phases after a security incident, with the first stage running from 14:00 to 09:00 UTC on 1 November and other networks and assets to follow after safety checks.
Binance says withdrawals on 15 networks will resume in phases, starting with Bitcoin
Binance staff member Eowyn said withdrawals would resume in phases across 15 networks, with the Bitcoin network first. Early delays are likely to reflect traffic congestion rather than a system failure, she said.
Binance updates proof-of-reserves address list, moves withdrawals to new wallets
Binance says it has updated its proof-of-reserves address list to include newly generated wallet addresses, and that all future withdrawal transactions will be processed through these new wallets as part of its security response.
Binance attacker sells over 130 altcoins on EVM chains, Lookonchain says
Lookonchain says the Binance attacker sold more than 130 altcoins on EVM chains alone, obtaining 123,400 ETH ($277m) and $1.69m in USDC, a total of about $279m.
He Yi says Binance withdrawals are running smoothly for now
He Yi said on X that Binance withdrawals are generally running smoothly, though heavy demand could cause congestion before service returns to normal. She urged users to check addresses and confirm the safety of new devices and environments before withdrawing.
Binance restores some withdrawals on Ethereum and BNB Smart Chain
Binance says it has restored withdrawals of USDC, USDT and ETH on Ethereum and of USDC, USDT and BNB on BNB Smart Chain. It will keep bringing back other assets and networks in stages as security checks are completed, with updates through official channels.
Binance says it has recovered 95% of assets stolen in hack
Binance says it has covered 95% of the assets stolen in a hack and warned of temporary withdrawal delays once services resume.
Yi He says Binance is working with US firms and law enforcement to recover stolen assets
Binance co-founder Yi He said the exchange needs to work with US companies to freeze and recover assets, and that US law enforcement has acted with high efficiency, with information in globally watched cases strictly verified and evidence-based.
Address tagged as Binance hacker moves 485,270 SOL worth about $46.2m
Arkham monitoring shows an address tagged as the Binance hacker transferred 485,270 SOL, worth about $46.2m, to another address.
Binance restores withdrawals on DOGE and Optimism networks
Binance says withdrawals are working again on the DOGE network and the OP (Optimism) network, where ETH, USDT and USDC can be taken out. That brings partial-asset withdrawals back on seven networks, with more to follow in phases.
Symbiosis says it spotted attempt to move Binance hack funds through its protocol
Cross-chain protocol Symbiosis says it detected an attempt to move funds linked to a recent Binance security incident through its platform and is working to block it, having contacted Binance. BlockSec analysis had earlier shown some stolen TRX bridged to Ethereum via channels including Symbiosis.
Binance restores POL, USDT and USDC withdrawals on Polygon
Binance has restored withdrawals of POL, USDT and USDC on the Polygon network and of AVAX, USDT and USDC on the Avalanche C-Chain. The exchange says it will bring back more assets and networks in phases once security checks are complete.
Binance says withdrawal levels stabilising at normal, expected on-chain activity
A Binance spokesperson said withdrawal levels are stabilising back to what the exchange considers normal and expected on-chain activity, with withdrawals a very small share of assets under management.
SomaXBT says Binance attacker laundered about $242m via Tron in two days
SomaXBT, a chain analyst and SEAL contributor, said the attacker behind the Binance theft moved about $242m through Tron in two days. Of roughly $6.28bn of the stolen assets on Tron, about $249m remained movable after Tether froze 378.7m USDT, with about $194m bridged or swapped out.
Binance processes $4.65bn of withdrawals after resuming service following $6.3bn hack
Binance processed $4.65bn of withdrawals after resuming service following a $6.3bn hack, with net outflows reaching $3.64bn.
South Korea's FSC calls emergency meeting with crypto exchanges after Binance hack
South Korea's Financial Services Commission convened an emergency meeting with crypto exchanges following the Binance hack, and is looking at requiring higher cold-wallet holdings.
Fu Sheng says Binance hack shows AI-era security weakness
Cheetah Mobile chairman and CEO Fu Sheng said the large theft from Binance reflects the fragility of traditional security strategies in the AI era rather than poor security at the exchange. Binance co-founder Yi He replied that fire precautions from the candle era cannot stop fires in the electric-light era.
Suspected Binance hacker deposits $250,000 to Gate over 12 hours
Lookonchain monitoring shows an address linked to the alleged Binance hacker (TTra...Ybr) deposited $250,000 to Gate over the past 12 hours.
Gate says it has identified and frozen two accounts tied to Binance hacker
Gate said it has identified and frozen two accounts linked to the Binance hacker, with the information now in due diligence and the exchange pledging full cooperation with law enforcement. Lookonchain had reported that the hacker deposited $250,000 to Gate over the previous 12 hours.
Yi Lihua says Binance profit can cover hack losses
Liquid Capital founder Yi Lihua said Binance's earnings are enough to cover the losses from the recent hack, with asset safety and liquidity intact, unlike the FTX collapse. He said exchanges must show users a detailed security plan and stop repeat breaches.
Address linked to Binance attacker moves 40m XRP
An address linked to the Binance attacker moved 40 million XRP, worth about $50.5m, to an unknown wallet.
RUNE falls 20% as hackers are said to have routed Binance hack funds through Thorchain
RUNE, the token of cross-chain exchange Thorchain, fell about 20% in 24 hours and briefly dropped below $0.50. BlockBeats linked the decline to security and regulatory concerns after hackers reportedly moved part of last week's Binance hack proceeds through Thorchain, swapping about $48.3m across 2,697 transactions.
China's Mao Ning says she has no information on Binance attack or Trump's North Korea remarks
Chinese foreign ministry spokesperson Mao Ning said she was not aware of the matter when asked about the FBI's 31 October statement blaming North Korea for the Binance hack, in which about $6.3bn of assets were stolen, and about Donald Trump's remarks on it.
Binance Bitcoin wallet balance falls for fourth day, down over 23,000 BTC since hack
CoinGlass data shows Binance's Bitcoin wallet balance at about 652,300 BTC, down roughly 23,200 BTC from about 675,500 BTC on 30 October, when the exchange was hacked. The balance fell about 15,894 BTC in the past 24 hours, possibly as withdrawals opened.
Arkham says Binance hacker moved $4m to three Binance deposit addresses
Arkham says the Binance hacker transferred $4m to three Binance deposit addresses that may belong to nested services, third-party platforms using Binance for liquidity and custody. The transfer does not necessarily mean a direct deposit to Binance, Arkham says.
Elliptic says Binance hacker laundered first funds, $2.2m in BTC, via CoinJoin
Elliptic says the suspected Binance hacker laundered 28 BTC worth $2.2m through the CoinJoin mixing protocol WabiSabi between 1 Nov and 6:02 UTC today, using funds first stolen in TRX and then ETH swapped into BTC. It says 18,270 BTC taken from Binance is unmoved across 19 addresses.
Elliptic says about $3.24bn of stolen Binance assets remains in linked addresses
Elliptic says about $3.24bn of assets stolen from Binance, mainly ETH and BTC, remained in related addresses as of 07:30 UTC on 2 Nov, while about $2.85bn had been frozen or seized. It says laundering spanned roughly 12,000 wallets on 11 blockchains and over 40,000 transactions in under four days, with about 28 BTC put through 18 CoinJoin transactions.
Elliptic says no evidence North Korean hackers used AI in Binance theft
Elliptic says it has found no evidence that North Korean hackers accused of the $6.4bn Binance theft used AI to launder funds. Tom Robinson says the automated transfers resembled human-written scripts; about $3.28bn remains in more than 950 wallets.
Axel Adler Jr says Bitcoin fell again in October but market reaction stayed restrained
CryptoQuant analyst Axel Adler Jr says Bitcoin fell 7.2% in October, its second straight losing October, after the theft of about $6.3bn from Binance's hot wallet on 29 Oct. He says Bitcoin is still near its yearly moving average, unlike the 23% weekly drop after FTX's 2022 collapse.
Binance generates ZK proof for 31 Oct reserve snapshot as replenishment reaches 95%
Binance said the zero-knowledge proof for its proof-of-reserves snapshot taken at 00:00 UTC on 31 Oct 2026 is fully generated, letting holders of BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC confirm at least 1:1 backing. About 95% of assets affected by the security incident have been replenished, with a broader snapshot due 4 Nov and withdrawals for more networks restored in stages tomorrow.
Suspected North Korean hackers make errors moving Binance stolen funds
Suspected North Korean hackers behind the Binance attack made errors moving stolen assets, on-chain analyst Ai Yi said: about $3.5m of tokens went to a NEWT contract address and about $5m of PROM sold for just $71. Gate froze two accounts after a deposit of about $250,000.
Darkfost says Lazarus crypto thefts total $11.9bn, 45% of North Korea's GDP
On-chain analyst Darkfost says North Korea's Lazarus group has stolen about $11.9bn of cryptocurrency in total, including a recent $6.3bn Binance hack, equal to roughly 45% of North Korea's GDP.
SomaXBT says Arkham mislabelled Thorchain vault as Binance hacker
SomaXBT says Arkham wrongly identified a Thorchain Asgard Vault address as the Binance hacker's, and that the Binance deposits were paid by Thorchain accounts. SomaXBT published two related Thorchain account addresses.
Binance warns of scammers as withdrawals resume in stages
Binance said withdrawals are being restored in stages and warned users that fraudsters may pose as the exchange to offer faster withdrawals, priority processing or compensation, and that it never asks for passwords, 2FA codes or seed phrases.
More Bitcoin updates
Every update is a short rewrite, by AI in our own words, of a flash from the outlet named on it, credited and linked. Updates are joined into one story by AI; our editors can change a story’s name or take an update out. Not investment advice.
Breaking news and our own Originals on your phone or desktop, the moment they are out. A few alerts a day at most.