hack or exploit

Is Binance Being Hacked? $2 Billion Outflow Puts Customer Funds in Question

88Importance
no updates 6h+Status
31News media
126Pieces
Published
Updated
Since then
121 new reports
In
Exchanges
Also mentions
BTCETHUSDT +14

Binance disclosed a major hot-wallet security incident, while stablecoin issuers froze large amounts tied to the flows and the exchange said it would cover losses. In the days after, withdrawals restarted, net outflows remained heavy, and analysts tracked the stolen assets across multiple chains and services.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

Key claims & sources

✓
Binance said it was investigating a potential security breach after suspicious wallet transfers, and Changpeng Zhao said nearly $1.8 billion in stablecoins had been frozen.
Binance investigates potential multibillion-dollar hack
✓
Tether and Circle froze $1.79 billion in USDT and USDC after billions moved out of Binance hot wallets, while Binance said it was still investigating the incident.
Binance investigating hack as suspicious outflows reach up to $5.8 billion
✓
Binance said funds worth about $6.3 billion were moved from its hot wallets in the security incident it disclosed on its support announcement.
Binance Says Hot Wallet Funds Were Moved in $6.3 Billion Security Incident
✓
Aave froze 292 reserves across its V3 and V4 markets after the Binance breach, and the restrictions covered 16 blockchain networks.
Aave Freezes 292 Reserves Across V3 V4 Following Binance Breach
✓
Binance said it had restored backing for 90% of the assets stolen in the October 29 hack, with withdrawals planned for November 1 and full reserve proof expected on November 3.
Binance Restores 90% of Hacked Assets Ahead of Withdrawal Restart
✓
Binance processed $4.649 billion in withdrawals and $1.01 billion in deposits from 06:00 UTC to 15:30 UTC on November 1, leaving net outflows at $3.64 billion, or 2.1% of the assets it manages.
Binance Puts Net Outflow at 2.1% of Its $171 Billion in Assets as Withdrawals…
✓
Elliptic said it traced roughly 12,000 wallets across 11 blockchains and put remaining linked balances at $3.24 billion.
Elliptic Flags First Bitcoin Mixing of Binance Hack Proceeds
✓
Binance asked Arbitrum’s DAO on November 5 to release 8,425.997 ETH and 74.56 million ARB frozen after its hot-wallet exploit, starting a governance process the exchange expects to take seven weeks or longer.
Binance seeks return of 8,426 ETH and 74.56 million ARB after hack

What it means

Binance's hot-wallet system holds customer assets for instant trading and withdrawal, the same architecture that let North Korea's Lazarus Group drain $1.5 billion from Bybit in February 2025. Blockaid's chief executive suggested the October 29 incident may not be simple theft but misuse of Binance's transaction-signing infrastructure, a parallel to that earlier breach. Binance's own account points to a compromised DevOps engineer's laptop giving an attacker access to a service container. The exchange pledged its SAFU insurance fund and company revenue to cover every loss.

Binance customers who wanted their coins out queued through a brief suspension, then withdrew $4.649 billion against $1.01 billion in deposits once trading reopened, a net outflow equal to 2.1% of its $171 billion in reported assets. Rivals felt the shift: ten tracked competitors gained $564 million in net inflows over the same stretch. Traders who stayed now rely on a hastily built reserve page and a promised proof-of-reserves rather than Binance's routine disclosures. Smaller exchanges gain a visible, if temporary, credibility edge.

Tether and Circle's ability to freeze $1.8 billion shows how much control stablecoin issuers retain over tokens marketed as bearer assets, a power that saved Binance but underscores how centralized the system remains. The attacker's response, routing stolen USDT through Aave to borrow ETH before freezes landed, shows DeFi lending can double as a laundering rail once issuer freezes close other exits. Whether that makes decentralized protocols complicit or merely neutral infrastructure is a dispute among researchers, and it undercuts the claim that crypto transfers, once made, are final.

Market reaction i

BNBBNB it is the asset of the company or protocol in the event
first headline
-6.1% 2 h before
-0.4% 4 h after
$697.62price at publication
12data points

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 29 20:49
+14 min
Oct 29 21:02
BeInCrypto adds
Breaks the figures down; the largest, $628M, with quotes
+15 min
Oct 29 21:04
Crypto News Flash adds
Breaks the figures down; the largest, $2670B, with quotes
+18 min
Oct 29 21:07
+23 min
Oct 29 21:12
+33 min
Oct 29 21:22
The Defiant echo
No new facts: 971; with quotes
+34 min
Oct 29 21:23
Crypto Briefing adds
Sharpens the figure: $971M
+35 min
Oct 29 21:24
Cointelegraph adds
Adds $1.8B, with quotes
+46 min
Oct 29 21:35
+47 min
Oct 29 21:36
Crypto Briefing adds
Sharpens the figure: $1.6B
+47 min
Oct 29 21:36
+49 min
Oct 29 21:38
Crypto Briefing echo
No new facts: mitigating, critical, entities; with quotes
+51 min
Oct 29 21:40
Crypto News Flash adds
Adds $2.5B and $700M; brings into the story: CZ, with quotes
+55 min
Oct 29 21:44
+1 h
Oct 29 21:49
The Block adds
Sharpens the figure: $5.8B, with quotes
+1 h 17 m
Oct 29 22:06
Crypto Economy adds
Sharpens the figure: $620M, with quotes
+1 h 20 m
Oct 29 22:09
AMBCrypto echo
No new facts: examine, 567b; with quotes
+1 h 20 m
Oct 29 22:09
Crypto Briefing echo
No new facts: decentralization, accessibility, questions
+1 h 21 m
Oct 29 22:10
The Defiant echo
No new facts: accounts, widen
+1 h 25 m
Oct 29 22:14
+1 h 50 m
Oct 29 22:39
Crypto Economy echo
No new facts: characteristics, cyberattack, consecutive; with quotes
+2 h 1 m
Oct 29 22:50
+2 h 8 m
Oct 29 22:57
Decrypt echo
No new facts: freezable, swapping, hunts
+2 h 17 m
Oct 29 23:06
Bitcoin Magazine adds
Sharpens the figure: $3.5B, with quotes
+2 h 24 m
Oct 29 23:13
+2 h 35 m
Oct 29 23:24
Cointelegraph echo
No new facts: uncertainty, tumbled, fueling
+2 h 39 m
Oct 29 23:28
U.Today adds
Sharpens the figure: $6B; brings into the story: BTC, ETH, XRP
+3 h 2 m
Oct 29 23:51
The Coin Republic echo
No new facts: coverage, altcoins, sending; with quotes
+3 h 22 m
Oct 30 00:11
DefiLlama hacks adds our clock
Sharpens the figure: $5.8B
+3 h 22 m
Oct 30 00:11
Cointelegraph context
Its angle: infrastructure, manipulated, parallels
+3 h 28 m
Oct 30 00:17
CoinDesk echo
Picks up what was published, with no new facts
+3 h 29 m
Oct 30 00:18
Financial Times echo
No new facts: apparent
+3 h 40 m
Oct 30 00:29
Al Jazeera English adds
Sharpens the figure: $2.5B, with quotes
+3 h 57 m
Oct 30 00:46
BBC News — Business echo
No new facts: with quotes
+3 h 57 m
Oct 30 00:46
BBC News — World echo
No new facts: with quotes
+4 h 3 m
Oct 30 00:52
Protos adds
Brings into the story: LIVE, with quotes
+4 h 10 m
Oct 30 00:59
Aave governance forum adds
Breaks the figures down; the largest, $59.9M
+5 h 2 m
Oct 30 01:51
Crypto Economy adds
Adds $3.3B and $200M, with quotes
+5 h 18 m
Oct 30 02:07
Crypto News Australia adds
Adds $7.8B, with quotes
+5 h 33 m
Oct 30 02:22
The Block echo
No new facts: resulting
+6 h 27 m
Oct 30 03:15
The Crypto Guardian adds our clock
Adds the identifier eip-7702; sharpens the figure: $6.3B, with quotes
+6 h 44 m
Oct 30 03:33
CP CryptoPotato adds
Adds $3B, with quotes
+6 h 47 m
Oct 30 03:36
+7 h 11 m
Oct 30 04:00
+7 h 40 m
Oct 30 04:29
The Defiant echo
No new facts: resuming; with quotes
+7 h 42 m
Oct 30 04:30
+7 h 42 m
Oct 30 04:31
The Defiant echo
No new facts: corroborate, destination, misttrack
+7 h 44 m
Oct 30 04:33
The Defiant adds
Sharpens the figure: $2.8B; brings into the story: TRX
+7 h 47 m
Oct 30 04:36
+8 h 1 m
Oct 30 04:50
+8 h 2 m
Oct 30 04:51
The Defiant adds
Sharpens the figure: $6.4B, with quotes
+8 h 8 m
Oct 30 04:57
+8 h 9 m
Oct 30 04:58
CR Cryptopolitan echo
No new facts: unrecovered, equivalent, transpired; with quotes
+8 h 11 m
Oct 30 05:00
The Defiant echo
No new facts: unspent, option, trail
+8 h 19 m
Oct 30 05:08
+9 h 3 m
Oct 30 05:52
crypto.news echo
No new facts: millions, systems, obtain
+9 h 33 m
Oct 30 06:22
Coinpedia adds
Sharpens the figure: $6.4B, with quotes
+9 h 59 m
Oct 30 06:48
Coinpedia echo
No new facts: sliding, falling, $694
+10 h 5 m
Oct 30 06:54
+10 h 40 m
Oct 30 07:29
U.Today echo
No new facts: predicted, predicts, reacting
+11 h 56 m
Oct 30 08:45
CP CryptoPotato adds
Brings into the story: PI, with quotes
+12 h 43 m
Oct 30 09:31
Decrypt echo
No new facts: click; with quotes
+12 h 55 m
Oct 30 09:44
The Defiant echo
No new facts: reimbursements, spell
+12 h 56 m
Oct 30 09:45
+13 h 3 m
Oct 30 09:51
+13 h 9 m
Oct 30 09:58
Crypto Briefing adds
Sharpens the figure: $1B, with quotes
+13 h 37 m
Oct 30 10:26
crypto.news echo
No new facts: processes, involves, promised
+13 h 38 m
Oct 30 10:26
+13 h 48 m
Oct 30 10:37
Crypto Briefing echo
No new facts: intensify, ability; with quotes
+14 h 1 m
Oct 30 10:50
Financial Times echo
No new facts: wave
+14 h 5 m
Oct 30 10:54
Cointelegraph echo
No new facts: topping, stash, tops
+14 h 11 m
Oct 30 10:59
crypto.news echo
No new facts: fires, cites, asks; with quotes
+14 h 13 m
Oct 30 11:02
The Defiant adds
Sharpens the figure: $6.3B, with quotes
+14 h 22 m
Oct 30 11:11
Coinpedia echo
No new facts: yearly; with quotes
+14 h 33 m
Oct 30 11:21
NPR — Business echo
No new facts: explicitly, impacted, pilfered; with quotes
+14 h 36 m
Oct 30 11:25
MEXC echo
No new facts: necessarily, ledger, answer; with quotes
+14 h 41 m
Oct 30 11:30
+15 h 25 m
Oct 30 12:14
The Cryptocurrency Post echo
No new facts: description, commentary, researcher; with quotes
+17 h 24 m
Oct 30 14:13
Bitcoin Magazine echo
No new facts: converting, yesterday, deployed; with quotes
+17 h 35 m
Oct 30 14:24
CR Cryptopolitan echo
No new facts: operationalized, accelerating, expanding; with quotes
+17 h 56 m
Oct 30 14:45
Crypto Economy echo
No new facts: distributed, surpasses, exploited; with quotes
+18 h 23 m
Oct 30 15:12
Coinspeaker adds
Adds $10.9B and $1.1B; brings into the story: FI, with quotes
+18 h 42 m
Oct 30 15:31
Crypto Economy adds
Sharpens the figure: $60M; brings into the story: V3, V4
+19 h 6 m
Oct 30 15:55
Crypto Briefing echo
No new facts: collaboration, implications, emphasizing
+19 h 9 m
Oct 30 15:57
Crypto Economy echo
No new facts: responsible, transferred, previously; with quotes
+19 h 11 m
Oct 30 16:00
AMBCrypto echo
No new facts: alternatives, leverage, outsmart
+19 h 36 m
Oct 30 16:25
CP CryptoPotato echo
No new facts: surprisingly, rebounding, wednesday
+19 h 43 m
Oct 30 16:32
crypto.news echo
No new facts: intended, claimed, posting; with quotes
+20 h 11 m
Oct 30 17:00
The Coin Republic echo
No new facts: overcollateralized, repayments, borrowing; with quotes
+21 h 1 m
Oct 30 17:50
Decrypt echo
No new facts: probe, trace, join; with quotes
+21 h 18 m
Oct 30 18:07
Crypto Economy echo
No new facts: demonstrating, surrounding, sentiment
+21 h 23 m
Oct 30 18:12
Crypto Economy echo
No new facts: acquisition, reiterated, respected; with quotes
+23 h 26 m
Oct 30 20:15
Crypto Economy echo
No new facts: professionals, concurrently, personalized; with quotes
+1 d 5 h
Oct 31 02:12
BBC News — Business echo
Picks up what was published, with no new facts
+1 d 5 h
Oct 31 02:12
BBC News — World echo
Picks up what was published, with no new facts
+1 d 11 h
Oct 31 08:04
Coinpedia echo
No new facts: addressed, comments, press; with quotes
+1 d 17 h
Oct 31 14:40
The Defiant echo
No new facts: cryptographic, replenished, targets
+1 d 18 h
Oct 31 15:01
+1 d 19 h
Oct 31 15:55
Crypto News Flash adds
Sharpens the figure: $5.7B, with quotes
+2 d 8 h
Nov 1 05:43
Coinpedia echo
No new facts: temporary, delays, passes; with quotes
+2 d 10 h
Nov 1 06:50
U.Today echo
Picks up what was published, with no new facts
+2 d 11 h
Nov 1 08:44
+2 d 21 h
Nov 1 18:36
CP CryptoPotato adds
Breaks the figures down; the largest, $171B; brings into the story: FTX, with quotes
+3 d
Nov 1 21:28
+3 d 12 h
Nov 2 08:49
+3 d 12 h
Nov 2 08:56
+3 d 12 h
Nov 2 09:21
Crypto Briefing echo
No new facts: leadership, reshaping, shifting
+3 d 13 h
Nov 2 10:36
+3 d 14 h
Nov 2 11:00
+3 d 14 h
Nov 2 11:00
Unchained echo
No new facts: stabilising, generated, separate; with quotes
+3 d 14 h
Nov 2 11:15
Unchained adds
Adds $233.7M, with quotes
+3 d 14 h
Nov 2 11:19
The Defiant adds
Sharpens the figure: $3.2B
+3 d 14 h
Nov 2 11:20
crypto.news echo
No new facts: snapshot, narrows
+3 d 19 h
Nov 2 16:30
AMBCrypto echo
No new facts: lows, $78k, 900
+3 d 21 h
Nov 2 18:02
+4 d 2 h
Nov 2 23:05
Unchained echo
No new facts: administration, international, provocation; with quotes
+4 d 2 h
Nov 2 23:07
Cointelegraph echo
No new facts: politically, attribution, motivated
+4 d 2 h
Nov 2 23:32
Crypto Economy echo
No new facts: eliminating, illustrates, challenging; with quotes
+4 d 2 h
Nov 2 23:39
Crypto Briefing echo
No new facts: investigate, calls
+4 d 4 h
Nov 3 00:56
BBC News — Business echo
Picks up what was published, with no new facts
+4 d 4 h
Nov 3 00:56
BBC News — World echo
Picks up what was published, with no new facts
+4 d 23 h
Nov 3 20:00
NewsBTC echo
No new facts: recoverability, independently, establishes; with quotes
+5 d 9 h
Nov 4 06:14
Crypto News Australia echo
No new facts: cooperation, recruitment, possibility; with quotes
+6 d 19 h
Nov 5 16:07
crypto.news adds
Brings into the story: ARB
+7 d 21 h
Nov 6 18:06
+7 d 21 h
Nov 6 18:45
Crypto Economy adds
Sharpens the figure: $6.4B, with quotes

Thefts of a similar size

WhenWhat happenedFigure
10 days ago Binance CEX · Key Leaked via Infrastructure incident $6.4B
10 days ago Binance · DevOps Engineer’s laptop compromised incident $6.3B
5.9 years ago LuBian · Weak key generation incident $3.5B
5.6 years ago Thodex · Scam incident $2.5B
5.4 years ago Africrypt · Scam incident $2.3B

4284 incidents stored · 0 were as large as this one or larger ($171B)