Overview
Binance, the world's largest cryptocurrency exchange, is investigating a suspected security breach after billions of dollars moved out of wallets associated with the exchange on October 29, 2026. If confirmed at the upper estimate of $5.8 billion, it would be the largest cryptocurrency theft in history. Binance has not independently confirmed that figure, and tallies vary by source.
What We Know
| Detail | Reported figure |
|---|---|
| Date | October 29, 2026 |
| Suspicious outflows | About $3.3B (Blockaid, across Ethereum, Arbitrum, Avalanche); $5.3B (Glassnode); $5.57B (other onchain tallies); up to $5.8B |
| Tracked funds | Arkham is tracking 55 addresses labeled "binance-hacker-1029" holding about $5.78B |
| Frozen | Tether froze more than $1.567B in USDT and Circle more than $800M in USDC; Binance said on October 30 that about $3B is verified frozen |
| Platform status | Deposits and withdrawals temporarily suspended |
Binance has said it will cover all losses and publish a full post-mortem when the investigation concludes. Founder Changpeng Zhao said on X that it appeared to be a hack, that he no longer manages the exchange, and that he expects user funds to be fully covered. Lending protocol Aave froze its markets to stop the attacker borrowing against stolen assets.
How It Might Have Happened
The root cause is not confirmed. Two theories have been reported:
- Blockaid's CEO suspects attackers manipulated the exchange's transaction-signing process rather than stealing private keys outright.
- One outlet reports the attacker targeted an Ethereum-linked wallet using EIP-7702 smart contract code.
Treat both as unverified until Binance publishes its post-mortem.
Why It Matters
- Scale: the figure dwarfs prior record thefts, including the Bybit incident and this year's Drift and KelpDAO heists.
- Stablecoin freezes work: issuers froze billions within hours, showing how centralized issuers can limit laundering of USDT and USDC.
- Custodial concentration risk: exchange hot and warm wallets remain high-value targets, and signing-workflow compromises bypass key-storage protections.
Recommendations
- Users: watch Binance's official channels only; expect phishing emails and fake "recovery" sites using this incident as a lure.
- Do not click withdrawal or verification links sent by email or DMs.
- Enable anti-phishing codes and hardware-key 2FA on exchange accounts.
- Organizations holding crypto: review transaction-signing controls, enforce multi-party approval with out-of-band verification of transaction contents, and monitor for anomalous wallet activity.
This story is developing; figures may change as Binance and onchain analysts update their numbers.
Sources
- Binance probes potential $5.8 billion crypto-theft hack — BleepingComputer
- Binance investigating hack as suspicious outflows reach up to $5.8 billion — The Block
- Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion — Security Affairs
- Binance Probes Suspected $5.8 Billion Crypto Hack, $3 Billion Frozen — HackRead