Storyline
Binance mega-hack fallout
A ~$6B hack of Binance is triggering emergency freezes, DeFi contagion, regulatory calls, and a partial recovery effort across the crypto ecosystem.
Timeline
- Sat, Oct 31LatestVerified · 31 Oct 2026
The Thief’s Exchange Rate
Elliptic data cited by cryptoslate shows the Binance attackers converted roughly $786M of stolen stablecoins into ETH and TRX at 12–26% below market — ~$434M of USDT through Uniswap, 1inch and quote desks, ~$234M via SunSwap on Tron — accepting losses to beat issuer freezes. Chainalysis described automated laundering “patterns we have not seen before.” About 18,270 BTC sits split across 19 addresses, none yet touching an exchange.
- Sat, Oct 31Verified · 31 Oct 2026
Binance's Record $6.3B Hack
Binance set aside $6.34B to cover the record theft and targets a phased withdrawal restart this weekend, with its first post-hack reserve snapshot due within hours, per coverage. Binance claims ~80% of stolen funds recouped; on-chain analysis puts ~$2.8B frozen — including Arbitrum’s ~$30.5M council freeze — with ~$2.9B still in attacker addresses, and experts caution that frozen is not recovered. Binance now attributes entry to a compromised engineer’s laptop, “not leaked keys”; intelligence firms point to North Korea. On the response side, an unmerged Ethereum draft would let accounts irreversibly opt out of 7702 delegation — though it wouldn’t have protected funds once the key was compromised.
- Fri, Oct 30Verified · 30 Oct 2026
Binance Drained of ~$6 Billion in the Largest Crypto Theft on Record — Issuers Froze ~$3 Billion Within Hours
Binance’s hot wallets were drained on 29 October in what outlets call the largest crypto theft on record: Chainalysis puts stolen funds at ~$5.9B at the incident, Binance’s own impact estimate at ~$6.3B. Issuers led by Tether and Circle froze funds Binance verified at roughly $3B; withdrawals were suspended, with the SAFU fund and company money pledged to cover all losses. The attacker reportedly signed an EIP-7702 delegation with a compromised wallet key; Binance suspects a DevOps engineer’s laptop.