Oct 30, 2026

Updated

• LiveCritical◐Partly patched

  Binance says it will cover all hacking losses after billions leave its hot wallets; about $3B frozen so far

  On Oct 29 2026 at about 20:24 UTC, more than $2B in ETH and tokens left Binance hot wallets (labeled Binance 14 and Binance 16 on Etherscan) for an address created that day, according to Etherscan data reported by BeInCrypto. The transfer was triggered by a wallet funded only through Tornado Cash, and the receiving address quickly forwarded about 195,460 ETH (around $450M) to another fresh address. Binance says it is aware of reports of a potential security issue, is actively investigating and that user funds are completely safe; it has not confirmed a breach or a loss total. Founder CZ, who no longer runs Binance, said it does look like a hack and that he expects all user funds to be fully covered. Tether CEO Paolo Ardoino said Tether froze more than 1.567B USDT tied to a potential Binance exchange hack, and Circle CEO Jeremy Allaire said Circle froze more than 800M USDC in coordination with law enforcement; Binance co-founder Yi He later thanked Ripple for freezing about 200 million more. Blockaid says the attacker used an EIP-7702 authorization to turn the Binance 14 hot wallet into a sweeper contract only the attacker can drain. Binance later paused withdrawals, saying they will resume once the security issue is fully resolved, and CZ said the loss might be a bit higher than the roughly $1B left after freezes but will be covered. World Liberty Financial froze $27M in USD1 linked to the hack. Binance.US says it is a separate platform and is not affected. If confirmed, it would be the largest exchange hack on record. Binance then said the current verified total frozen is $2.54 billion and suspended Binance Alpha trading, and co-founder Yi He said Binance will cover all hacking losses, that deposits and withdrawals are temporarily suspended during security checks, and that a full post-mortem will follow; Binance's official account repeated that Binance will cover all losses and that all deposits and withdrawals are suspended. The Arbitrum Security Council moved 74,559,805 ARB and 8,425 ETH held by an exploit-linked Arbitrum One address into a frozen wallet. Binance later updated its verified total frozen to around $3 billion. Chainalysis estimates about $5.912B was stolen at the time of theft, nearly four times the 2025 Bybit heist, which would make it the largest crypto theft on record. Binance users have nothing to patch: watch for official updates only through Binance's own channels and ignore unofficial links or requests for account details, which Binance warns are circulating.

  Binance (exchange hot wallets)·Since Oct 29, 2026·updated Oct 30, 2026, 01:43 UTC