The world’s largest cryptocurrency exchange, Binance, has been hit by a massive security breach, with on-chain data and blockchain security firms indicating that between $2 billion and $5.8 billion in digital assets have been drained. The incident, which unfolded on October 29–30, 2026, marks the largest cryptocurrency heist in global history, eclipsing the previous $1.5 billion record theft from Bybit in 2025.
Binance has officially suspended all crypto deposits and withdrawals globally. However, the company, co-led by Yi He, has formally pledged that Binance will cover all financial losses resulting from the breach and that "user funds remain safe" under its protections.
Anatomy of the Attack
According to forensic data published by blockchain security firm Blockaid, the breach heavily targeted two internet-connected hot wallets designated as "Binance 14" and "Binance 16".
On-chain analysts noted the exploit utilized a feature called EIP-7702, which allowed the unauthorized execution of delegated software code. This granted the hacker the ability to siphon funds across multiple connected infrastructure lines without needing to repeatedly generate fresh, manual keys.
Also, according to different crypto reports, the malicious entity rapidly drained high-value assets across the Ethereum, Arbitrum, Avalanche, and TRON blockchains. Drained capital included over $1.6 billion in USDT, $800 million in USDC, $450 million in Ethereum (ETH), and substantial reserves of Bitcoin (BTC) and other tokens.
The stolen assets were then reportedly transferred to an unlabelled, newly created recipient address that had been freshly funded via the privacy mixer Tornado Cash.
Industry Counter-Measures and Asset Freezes
While the upper bound of total outflows reached up to $5.8 billion, a massive, coordinated response from the broader crypto industry successfully contained a large portion of the capital.
By Friday morning, at least $2.54 billion of the stolen funds had been completely frozen by ecosystem partners, effectively reducing the net amount currently in the hacker's liquid control.
Tether CEO Paolo Ardoino confirmed that the firm acted in coordination with law enforcement to blacklist the hacker's addresses, freezing over $1.56 billion in USDT. Also Circle CEO Jeremy Allaire announced that his firm successfully froze more than $800 million in USDC tied directly to the exploit.
Likewise, decentralized finance giant Aave immediately froze its lending markets to prevent the hacker from depositing the stolen assets to borrow unfreezable alternative tokens.
Corporate Response and Backstop Commitments
Binance co-founder and largest shareholder Changpeng "CZ" Zhao publicly stated that the incident "does look like a hack on Binance". Although he no longer handles daily management, Zhao reiterated his expectation that the exchange's substantial capital balance sheet will absorb the blow.
To formally address customer anxiety, Binance leadership announced that the exchange will fully deploy its Secure Asset Fund for Users (SAFU). SAFU is an emergency insurance reserve established by Binance in 2018 precisely to act as a financial backstop for users in extreme breach scenarios.
All deposits and withdrawals remain temporarily frozen. Trading on its early-stage project platform, Binance Alpha, has also been paused as standard security measures.
However, independent regional entity like Binance.US issued an official update clarifying that its platforms, wallets, and user balances are entirely unaffected by the global parent site's exploit.
Market Reaction - Sell-off Across Digital Asset Platforms
The unprecedented scale of the heist immediately triggered a broad sell-off across the digital asset market, reducing the collective crypto market capitalization by over 3%.
Bitcoin (BTC) tumbled below $79,000, Ethereum dropped roughly 3.4%, and Binance's native ecosystem token, BNB, experienced the sharpest decline, dropping nearly 7% following the early morning disclosures.
Share Your Thoughts