hack or exploit

Is Binance Being Hacked? $2 Billion Outflow Puts Customer Funds in Question

94Importance
updatingStatus
31News media
124Pieces
Published
Updated
Since then
119 new reports
In
Exchanges
Also mentions
BTCETHUSDT +14

Binance said a potential security incident moved about $6.3 billion from its hot wallets on October 29, and stablecoin issuers later froze large amounts tied to the flows. In the days after, Binance said it would cover losses, restored backing for most affected assets, and resumed withdrawals while investigators and blockchain firms kept tracing the remaining funds.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

Key claims & sources

✓
Binance said it was investigating suspicious wallet transfers after reporting a potential security breach, and co-founder Changpeng Zhao said nearly $1.8 billion in stablecoins had been frozen.
Binance investigates potential multibillion-dollar hack
✓
Tether and Circle froze $1.79 billion in USDT and USDC after billions moved out of Binance hot wallets, and Binance said it was still investigating the incident.
Binance investigating hack as suspicious outflows reach up to $5.8 billion
✓
Binance said funds worth about $6.3 billion were moved from its hot wallets in the security incident it disclosed on its support announcement.
Binance Says Hot Wallet Funds Were Moved in $6.3 Billion Security Incident
✓
Aave froze 292 reserves across its V3 and V4 markets after a wallet linked to the attacker deposited $60 million in USDT and borrowed 19,762 WETH.
Aave Freezes 292 Reserves Across V3 V4 Following Binance Breach
✓
Binance said it had restored backing for 90% of the assets stolen in the October 29 hack, with withdrawals planned for November 1 and full reserve proof expected on November 3.
Binance Restores 90% of Hacked Assets Ahead of Withdrawal Restart
✓
Binance processed $4.649 billion in withdrawals and $1.01 billion in deposits from 06:00 UTC to 15:30 UTC on November 1, leaving net outflows at $3.64 billion, or 2.1% of the assets it manages.
Binance Puts Net Outflow at 2.1% of Its $171 Billion in Assets as Withdrawals…
✓
Elliptic said it traced roughly 12,000 wallets across 11 blockchains and put remaining linked balances at $3.24 billion.
Elliptic Flags First Bitcoin Mixing of Binance Hack Proceeds
✓
Binance asked Arbitrum’s DAO on November 5 to release 8,425.997 ETH and 74.56 million ARB frozen after its hot-wallet exploit, starting a governance process the exchange expects to take seven weeks or longer.
Binance seeks return of 8,426 ETH and 74.56 million ARB after hack

What it means

Binance's hot-wallet architecture has been a known weak point since Mt. Gox and the 2019 Binance hack that cost $40 million, but this breach dwarfs every prior exchange theft, including Bybit's $1.5 billion loss earlier in 2025. Investigators now describe a single compromised DevOps laptop, not a smart-contract flaw, opening the service container that signed withdrawal transactions across ten blockchains.

Traders who held BNB or kept balances on Binance watched withdrawals freeze for days while the exchange rebuilt reserves token by token; by November 1 users pulled $4.649 billion against $1.01 billion in deposits within hours of reopening. Rivals such as OKX picked up inflows as some depositors moved to self-custody or other venues, and borrowers on Aave found 292 reserves frozen mid-position after a hacker-linked wallet used stolen USDT as loan collateral.

Tether and Circle froze roughly $1.8 billion within hours, proof that stablecoin issuers, not courts, now act as the fastest circuit breaker in crypto when a hack this size hits. That speed is also the uncomfortable part: the same centralized blacklist that stopped the Binance hacker could just as easily be pointed at any other wallet, and depositors who think of USDT or USDC as bearer instruments are being shown otherwise in real time.

Binance's request to Arbitrum's DAO to release 8,425.997 ETH and 74.56 million ARB, filed November 5, starts a governance vote the exchange says could run seven weeks or longer, and will show whether a decentralized chain's token holders, not an exchange or an issuer, end up deciding what happens to frozen hack proceeds. A yes vote returns funds to Binance's reserve; a no, or a long stalemate, leaves Arbitrum holding assets tied to the largest theft in crypto history.

Market reaction i

BNBBNB it is the asset of the company or protocol in the event
first headline
-6.1% 2 h before
-0.4% 4 h after
$697.62price at publication
12data points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 29 20:49
+14 min
Oct 29 21:02
BeInCrypto adds
Breaks the figures down; the largest, $628M, with quotes
+15 min
Oct 29 21:04
Crypto News Flash adds
Breaks the figures down; the largest, $2670B, with quotes
+18 min
Oct 29 21:07
+23 min
Oct 29 21:12
+33 min
Oct 29 21:22
The Defiant echo
No new facts: 971; with quotes
+34 min
Oct 29 21:23
Crypto Briefing adds
Sharpens the figure: $971M
+35 min
Oct 29 21:24
Cointelegraph adds
Adds $1.8B, with quotes
+46 min
Oct 29 21:35
+47 min
Oct 29 21:36
Crypto Briefing adds
Sharpens the figure: $1.6B
+47 min
Oct 29 21:36
+49 min
Oct 29 21:38
Crypto Briefing echo
No new facts: mitigating, critical, entities; with quotes
+51 min
Oct 29 21:40
Crypto News Flash adds
Adds $2.5B and $700M; brings into the story: CZ, with quotes
+55 min
Oct 29 21:44
+1 h
Oct 29 21:49
The Block adds
Sharpens the figure: $5.8B, with quotes
+1 h 17 m
Oct 29 22:06
Crypto Economy adds
Sharpens the figure: $620M, with quotes
+1 h 20 m
Oct 29 22:09
AMBCrypto echo
No new facts: intervene, examine, 567b; with quotes
+1 h 20 m
Oct 29 22:09
Crypto Briefing echo
No new facts: decentralization, accessibility, questions
+1 h 21 m
Oct 29 22:10
The Defiant echo
No new facts: accounts, widen
+1 h 25 m
Oct 29 22:14
+1 h 50 m
Oct 29 22:39
Crypto Economy echo
No new facts: characteristics, consecutive, cyberattack; with quotes
+2 h 1 m
Oct 29 22:50
+2 h 8 m
Oct 29 22:57
Decrypt echo
No new facts: freezable, swapping, ramps
+2 h 17 m
Oct 29 23:06
Bitcoin Magazine adds
Sharpens the figure: $3.5B, with quotes
+2 h 24 m
Oct 29 23:13
+2 h 35 m
Oct 29 23:24
Cointelegraph echo
No new facts: uncertainty, tumbled, rattles
+2 h 39 m
Oct 29 23:28
U.Today adds
Sharpens the figure: $6B; brings into the story: BTC, ETH, XRP
+3 h 2 m
Oct 29 23:51
The Coin Republic echo
No new facts: coverage, altcoins, sending; with quotes
+3 h 22 m
Oct 30 00:11
DefiLlama hacks adds our clock
Sharpens the figure: $5.8B
+3 h 22 m
Oct 30 00:11
Cointelegraph context
Its angle: infrastructure, manipulated, parallels
+3 h 28 m
Oct 30 00:17
CoinDesk echo
Picks up what was published, with no new facts
+3 h 29 m
Oct 30 00:18
Financial Times echo
No new facts: apparent
+3 h 40 m
Oct 30 00:29
Al Jazeera English adds
Sharpens the figure: $2.5B, with quotes
+3 h 57 m
Oct 30 00:46
BBC News — Business echo
No new facts: with quotes
+3 h 57 m
Oct 30 00:46
BBC News — World echo
No new facts: with quotes
+4 h 3 m
Oct 30 00:52
Protos adds
Brings into the story: LIVE, with quotes
+4 h 10 m
Oct 30 00:59
Aave governance forum adds
Breaks the figures down; the largest, $59.9M
+5 h 2 m
Oct 30 01:51
Crypto Economy adds
Adds $3.3B and $200M, with quotes
+5 h 18 m
Oct 30 02:07
Crypto News Australia adds
Adds $7.8B, with quotes
+5 h 33 m
Oct 30 02:22
The Block echo
No new facts: resulting
+6 h 27 m
Oct 30 03:15
The Crypto Guardian adds our clock
Adds the identifier eip-7702; sharpens the figure: $6.3B, with quotes
+6 h 44 m
Oct 30 03:33
CP CryptoPotato adds
Adds $3B, with quotes
+6 h 47 m
Oct 30 03:36
+7 h 11 m
Oct 30 04:00
+7 h 40 m
Oct 30 04:29
The Defiant echo
No new facts: resuming; with quotes
+7 h 42 m
Oct 30 04:30
+7 h 42 m
Oct 30 04:31
The Defiant echo
No new facts: destination, corroborate, connected
+7 h 44 m
Oct 30 04:33
The Defiant adds
Sharpens the figure: $2.8B; brings into the story: TRX
+7 h 47 m
Oct 30 04:36
+8 h 1 m
Oct 30 04:50
+8 h 2 m
Oct 30 04:51
The Defiant adds
Sharpens the figure: $6.4B, with quotes
+8 h 8 m
Oct 30 04:57
+8 h 9 m
Oct 30 04:58
CR Cryptopolitan echo
No new facts: unrecovered, developing, 5rencai77y; with quotes
+8 h 11 m
Oct 30 05:00
The Defiant echo
No new facts: unspent, option, trail
+8 h 19 m
Oct 30 05:08
U.Today echo
No new facts: historic, reveals
+9 h 3 m
Oct 30 05:52
crypto.news echo
No new facts: millions, systems, obtain
+9 h 33 m
Oct 30 06:22
Coinpedia adds
Sharpens the figure: $6.4B, with quotes
+9 h 59 m
Oct 30 06:48
Coinpedia echo
No new facts: falling, sliding, $694
+10 h 5 m
Oct 30 06:54
+10 h 40 m
Oct 30 07:29
U.Today echo
No new facts: predicted, stealing, predicts
+11 h 56 m
Oct 30 08:45
CP CryptoPotato adds
Brings into the story: PI, with quotes
+12 h 43 m
Oct 30 09:31
Decrypt echo
No new facts: click; with quotes
+12 h 55 m
Oct 30 09:44
The Defiant echo
No new facts: reimbursements, spell
+12 h 56 m
Oct 30 09:45
+13 h 3 m
Oct 30 09:51
+13 h 9 m
Oct 30 09:58
Crypto Briefing adds
Sharpens the figure: $1B, with quotes
+13 h 37 m
Oct 30 10:26
crypto.news echo
No new facts: processes, different, involves
+13 h 38 m
Oct 30 10:26
+13 h 48 m
Oct 30 10:37
Crypto Briefing echo
No new facts: intensify, ability; with quotes
+14 h 1 m
Oct 30 10:50
Financial Times echo
No new facts: latest, wave
+14 h 5 m
Oct 30 10:54
Cointelegraph echo
No new facts: topping, stash, tops
+14 h 11 m
Oct 30 10:59
crypto.news echo
No new facts: fires, cites, asks; with quotes
+14 h 13 m
Oct 30 11:02
The Defiant adds
Sharpens the figure: $6.3B, with quotes
+14 h 22 m
Oct 30 11:11
Coinpedia echo
No new facts: yearly; with quotes
+14 h 33 m
Oct 30 11:21
NPR — Business echo
No new facts: explicitly, impacted, pilfered; with quotes
+14 h 36 m
Oct 30 11:25
MEXC echo
No new facts: necessarily, answer, ledger; with quotes
+14 h 41 m
Oct 30 11:30
+15 h 25 m
Oct 30 12:14
The Cryptocurrency Post echo
No new facts: description, researcher, commentary; with quotes
+17 h 24 m
Oct 30 14:13
Bitcoin Magazine echo
No new facts: associated, assessment, converting; with quotes
+17 h 35 m
Oct 30 14:24
CR Cryptopolitan echo
No new facts: operationalized, accelerating, operation; with quotes
+17 h 56 m
Oct 30 14:45
Crypto Economy echo
No new facts: distributed, conducted, surpasses; with quotes
+18 h 23 m
Oct 30 15:12
Coinspeaker adds
Adds $10.9B and $1.1B; brings into the story: FI, with quotes
+18 h 42 m
Oct 30 15:31
Crypto Economy adds
Sharpens the figure: $60M; brings into the story: V3, V4
+19 h 6 m
Oct 30 15:55
Crypto Briefing echo
No new facts: collaboration, implications, emphasizing
+19 h 9 m
Oct 30 15:57
Crypto Economy echo
No new facts: responsible, transferred, attributes; with quotes
+19 h 11 m
Oct 30 16:00
AMBCrypto echo
No new facts: alternatives, outsmart, leverage
+19 h 36 m
Oct 30 16:25
CP CryptoPotato echo
No new facts: surprisingly, rebounding, wednesday
+19 h 43 m
Oct 30 16:32
crypto.news echo
No new facts: intended, claimed, posting; with quotes
+20 h 11 m
Oct 30 17:00
The Coin Republic echo
No new facts: overcollateralized, repayments, borrowing; with quotes
+21 h 1 m
Oct 30 17:50
Decrypt echo
No new facts: probe, trace, join; with quotes
+21 h 18 m
Oct 30 18:07
Crypto Economy echo
No new facts: demonstrating, surrounding, sensitive
+21 h 23 m
Oct 30 18:12
Crypto Economy echo
No new facts: acquisition, reiterated, respected; with quotes
+23 h 26 m
Oct 30 20:15
Crypto Economy echo
No new facts: professionals, technologies, personalized; with quotes
+1 d 5 h
Oct 31 02:12
BBC News — Business echo
Picks up what was published, with no new facts
+1 d 5 h
Oct 31 02:12
BBC News — World echo
Picks up what was published, with no new facts
+1 d 11 h
Oct 31 08:04
Coinpedia echo
No new facts: addressed, comments, house; with quotes
+1 d 17 h
Oct 31 14:40
The Defiant echo
No new facts: cryptographic, replenished, targets
+1 d 18 h
Oct 31 15:01
+1 d 19 h
Oct 31 15:55
Crypto News Flash adds
Sharpens the figure: $5.7B, with quotes
+2 d 8 h
Nov 1 05:43
Coinpedia echo
No new facts: temporary, passes, delays; with quotes
+2 d 10 h
Nov 1 06:50
U.Today echo
Picks up what was published, with no new facts
+2 d 11 h
Nov 1 08:44
+2 d 21 h
Nov 1 18:36
CP CryptoPotato adds
Breaks the figures down; the largest, $171B; brings into the story: FTX, with quotes
+3 d
Nov 1 21:28
+3 d 12 h
Nov 2 08:49
+3 d 12 h
Nov 2 08:56
+3 d 12 h
Nov 2 09:21
Crypto Briefing echo
No new facts: leadership, reshaping, shifting
+3 d 13 h
Nov 2 10:36
+3 d 14 h
Nov 2 11:00
+3 d 14 h
Nov 2 11:00
Unchained echo
No new facts: stabilising, substantial, generated; with quotes
+3 d 14 h
Nov 2 11:15
Unchained adds
Adds $233.7M, with quotes
+3 d 14 h
Nov 2 11:19
The Defiant adds
Sharpens the figure: $3.2B
+3 d 14 h
Nov 2 11:20
crypto.news echo
No new facts: snapshot, narrows
+3 d 19 h
Nov 2 16:30
AMBCrypto echo
No new facts: $78k, lows, 900
+3 d 21 h
Nov 2 18:02
+4 d 2 h
Nov 2 23:05
Unchained echo
No new facts: administration, international, broadcaster; with quotes
+4 d 2 h
Nov 2 23:07
Cointelegraph echo
No new facts: politically, attribution, motivated
+4 d 2 h
Nov 2 23:32
Crypto Economy echo
No new facts: connections, illustrates, challenging; with quotes
+4 d 2 h
Nov 2 23:39
Crypto Briefing echo
No new facts: investigate, calls
+4 d 4 h
Nov 3 00:56
BBC News — Business echo
Picks up what was published, with no new facts
+4 d 4 h
Nov 3 00:56
BBC News — World echo
Picks up what was published, with no new facts
+4 d 23 h
Nov 3 20:00
NewsBTC echo
No new facts: recoverability, independently, establishes; with quotes
+5 d 9 h
Nov 4 06:14
Crypto News Australia echo
No new facts: recruitment, possibility, cooperation; with quotes
+6 d 19 h
Nov 5 16:07
crypto.news adds
Brings into the story: ARB

Thefts of a similar size

WhenWhat happenedFigure
8 days ago Binance CEX · Key Leaked via Infrastructure incident $6.4B
8 days ago Binance · DevOps Engineer’s laptop compromised incident $6.3B
5.9 years ago LuBian · Weak key generation incident $3.5B
5.5 years ago Thodex · Scam incident $2.5B
5.4 years ago Africrypt · Scam incident $2.3B

4280 incidents stored · 0 were as large as this one or larger ($171B)