Suspected Binance Hack: About $5.6bn in Reported Outflows as Crypto Markets Slide
A suspected Binance hack shook crypto markets late on 29 October 2026. On-chain tallies put outflows from Binance-labelled wallets at about $5.6bn across several blockchains, according to BWEnews and Decrypt. Bitcoin briefly slipped below $79,000 and BNB fell close to 7% over 24 hours, according to Crypto News Flash. This article reflects information available as of 21:50 UTC on 29 October 2026 (21:50 UK time, 17:50 ET).
Binance has not confirmed a hack. In a post on X at 21:15 UTC, edited at 21:29 UTC, it said it was investigating "a potential security issue" and that "user funds are completely safe". The chief executives of Tether and Circle said on X they had frozen more than 1.567bn USDT and 800m USDC linked to the incident. Every figure below may change as the story develops.
The information in this article is provided for educational purposes only and does not constitute financial advice. Consult a financial advisor before making investment decisions.
Table of Contents
- What We Know About the Suspected Binance Hack So Far
- Timeline of the Suspected Binance Hot Wallet Hack
- What Is Confirmed and What Is Only Reported
- Has Binance Confirmed the Hack?
- Tether and Circle Freezes: What Was Reported
- Binance SAFU Fund: Can It Cover the Gap?
- Would This Be the Largest Crypto Hack Ever?
- Market Reaction: Why Is Crypto Falling Today?
- Crypto Liquidations After the Binance News
- The Macro Backdrop: A Hawkish Fed
- Bitcoin Technical Levels to Watch
- Five-Year Performance in Context
- Bitcoin Forecasts Before and After the Event
- Three Illustrative Scenarios
- What Traders Often Watch After an Exchange Hack Report
- Key Dates Ahead
- Hot Wallet vs Cold Wallet
- Frequently Asked Questions
Cryptoassets such as Bitcoin and Ether are highly volatile, and you could lose all the money you invest. Investor protection schemes may not apply to them.
What We Know About the Suspected Binance Hack So Far
The short answer is that large sums moved, and the reason is still officially unexplained. The table below sums up the key points at the cut-off time. Each figure comes from the source named in the caption.
Key Numbers at a Glance
Sources: PANews tracker, Etherscan, Odaily, PANews (CoinGlass data), Tether CEO on X, Circle CEO on X, Binance on X, BWEnews on X. Figures as of 21:50 UTC, 29 October 2026. All figures are provisional. The frozen stablecoins are part of the outflows, so the two totals should not be added together.
The highest tally at the cut-off was about $5.64bn from BWEnews, published at 21:31 UTC. Decrypt reported at least $5.57bn on three main blockchains, citing an on-chain tally, in an article at 21:36 UTC. Earlier estimates were $2.77bn from Walter Bloomberg and "almost $3bn" from SolanaFloor, as cited by Coindoo. These estimates overlap and should not be added together.
Timeline of the Suspected Binance Hot Wallet Hack
The events unfolded quickly during the late US session. That was already the early morning of 30 October in Asia. All times below are UTC, which is also UK time this week.
Sources: Etherscan, PANews, PANews (liquidations), Odaily (first report), Odaily (BTC below 79,000), Odaily (Tether), Odaily (Circle), Yi He on X, Binance on X, BWEnews on X, Decrypt, Odaily (EIP-7702), CZ on X, Circle CEO on X, Tether CEO on X, Odaily (Tron freeze). Times converted from UTC+8 and UTC+2 where needed.
What Is Confirmed and What Is Only Reported
Breaking stories mix hard data with early interpretation. Separating the two matters here. The transfers themselves are public on the Ethereum blockchain. The reason for them has not been confirmed by Binance.
What On-Chain Data Shows
Data checked on Etherscan between 21:10 and 21:20 UTC on 29 October 2026. An Etherscan name tag is a label applied by the block explorer. It is not a statement by Binance.
What Remains Unconfirmed
Sources: PANews, Coindoo, Binance on X, Odaily (BWEnews tally), Decrypt, Odaily (EIP-7702).
Why the Totals Differ
- BWEnews covers six networks and arrives at about $5.64bn after removing change outputs and repeated transfers.
- PANews counts two Ethereum transactions and arrives at about $3.3bn.
- Walter Bloomberg's $2.77bn covers five blockchains and may already include the USDC transfer.
- SolanaFloor's "almost $3bn" is a rounded estimate.
- Coindoo warned that adding these figures together would double-count the same funds.
### Reported Outflows by Blockchain
Sources: BWEnews on X, Odaily, Decrypt. Reported tallies, not confirmed by Binance. The frozen stablecoins sit inside these totals.
Binance ran scheduled wallet maintenance on the Ethereum network on 28 October, according to PANews. We did not find a maintenance notice for 29 October. Binance had not said whether the 29 October transfers were linked to any maintenance.
Has Binance Confirmed the Hack?
As of 21:50 UTC, Binance had not confirmed a breach. It said user funds were completely safe, without explaining the transfers. Three statements appeared shortly before the cut-off.
Binance's Official Statement
Binance said on its official X account at 21:15 UTC that its teams were "actively investigating" reports of a potential security issue. At 21:29 UTC it edited the post to add that "user funds are completely safe". It said updates would follow through official Binance channels once information was verified. The post did not say whether a hack had taken place or how much had left its wallets.
We did not find a post on the incident from chief executive Richard Teng by 21:50 UTC.
Yi He's Statement
Yi He wrote in a post on X at 21:17 UTC that Binance was "aware of reports of a potential security issue" and was investigating. She said updates would come through official Binance channels. She also warned users to be wary of scams and unofficial links.
What CZ Said
Former chief executive Changpeng Zhao (CZ) wrote in a post on X at 21:15 UTC that user funds were safe. He wrote that "it does look like a hack on Binance". CZ also said he does not manage Binance.com today. He added that, as a shareholder, he expects all user funds to be fully covered. These are his views and are distinct from an official company confirmation.
Binance Withdrawals Status
We did not find an official notice about suspended deposits or withdrawals at the cut-off. The status of Binance withdrawals is therefore unconfirmed in either direction. Users who need certainty usually rely on Binance's own announcements page and status updates.
Tether and Circle Freezes: What Was Reported
Stablecoin issuers can block tokens at specific addresses. That tool matters for the size of any final loss. The figures below come from Odaily's newsflash feed and from posts by the two issuers' chief executives.
Sources: Odaily (Tether), Odaily (Circle), Circle CEO on X, Tether CEO on X, Odaily (Tron freeze). Status at 21:35 UTC, 29 October 2026.
The Tether figure matches the 971.1m USDT that Etherscan showed at the receiving address around 21:10 UTC. The Circle figure is slightly larger than the 780m USDC transfer. That gap has not been explained.
Tether's own figure is larger than the sum of Odaily's two USDT items, and Tether did not give a split by blockchain. Part of the USDT freeze is on Tron, and the frozen stablecoins are counted inside the $5.64bn outflow tally. Subtracting the freezes from the outflows would therefore not give a confirmed loss. The ETH forwarded to a second address cannot be frozen by an issuer.
A Tether freeze can limit what an attacker is able to move. Even so, a freeze does not return funds by itself. Any recovery usually needs further legal or technical steps. Readers who want background on the stablecoin itself can see our guide to Tether against the US dollar.
Binance SAFU Fund: Can It Cover the Gap?
Binance holds an emergency reserve called SAFU, short for Secure Asset Fund for Users. In February 2026 it finished converting the fund into 15,000 BTC, reported The Block. Binance pledged to top it back up to $1bn if its value dropped below $800m.
Sources: The Block, CoinGecko, BWEnews on X, Tether CEO on X, Circle CEO on X. Illustrative arithmetic only. The real loss, if any, is unknown.
On these numbers, the Binance SAFU fund is worth about a fifth of the reported outflows. The stablecoin freezes could reduce any final loss, although the size of that effect is unknown. Binance had not said by the cut-off how any shortfall above SAFU would be covered.
The 2019 Precedent
Binance has been hacked before. In May 2019 attackers stole about 7,000 BTC from a hot wallet, reported Decrypt. Binance said at the time that SAFU would cover the loss in full. The amount was about $40m then, far smaller than the sums tracked today.
Would This Be the Largest Crypto Hack Ever?
If a theft of this size were confirmed, it would exceed the previous record. That record is the roughly $1.5bn Bybit theft of February 2025. The FBI attributed it to North Korea's Lazarus Group, reported BleepingComputer.
Sources: Decrypt, BleepingComputer, BWEnews on X.
The North Korea Question
Two days earlier, Binance said it had blocked several North Korea-linked attack attempts with zero asset losses. We covered that in our BNB price update. Any link between those attempts and today's transfers is speculation. Security firms had not published an attribution by the cut-off.
Market Reaction: Why Is Crypto Falling Today?
Prices fell within minutes of the first reports. Leveraged long positions were forced shut, which added to the selling. The snapshots below come from the times shown.
Bitcoin Price
Sources: Odaily, Crypto News Flash, Odaily ticker, CoinGecko. Snapshots on 29 October 2026. Past performance is not a reliable indicator of future results.
The Bitcoin price had already eased below $80,000 in Asian trading on a tech-stock sell-off, according to Crypto News Flash. After the Binance reports, it dipped below $78,500, according to Coindoo. For more background on the week, see our Bitcoin price analysis after the Fed decision.
Ethereum Price
Ether was hit harder than Bitcoin. About 167,500 ETH was among the moved tokens, and about 195,460 ETH has already been forwarded to a second address. Whether that ETH reaches exchanges or swap services remains an open question.
Sources: Odaily, Crypto News Flash, Etherscan, CoinGecko. Past performance is not a reliable indicator of future results.
BNB Price
BNB is the token most closely tied to Binance itself. It was the weakest of the ten largest coins at about $699.85, down 6.95% over 24 hours, according to Crypto News Flash at around 21:04 UTC. The Odaily ticker showed about $713.43 at around 21:30 UTC. At 21:46 UTC BNB was at $705.35, down 6.73% over 24 hours, according to CoinGecko.
Altcoins and the Hyperliquid Move
Source: Crypto News Flash, snapshot around 21:04 UTC on 29 October 2026. Past performance is not a reliable indicator of future results.
HYPE, the token of the decentralised venue Hyperliquid, was the main gainer. One possible reading is money moving away from centralised exchanges. That reading is an interpretation, and one evening of data is a thin basis for it.
Crypto Liquidations After the Binance News
Forced closures of leveraged positions sped up the fall. Most of them hit traders who had bet on higher prices.
Source: CoinGlass data as published by PANews. Crypto News Flash showed a slightly different print of $620.41m at a later moment. Past performance is not a reliable indicator of future results.
Crypto liquidations of this size often deepen short-term moves in both directions. Long-heavy positioning can mean further forced selling if prices drop again. It can also mean sharp rebounds once the forced selling is exhausted.
Liquidation Clusters on the Bitcoin Map
Source: CoinGlass data via ChainCatcher, published before the transfers at 18:30 UTC. Levels shift as positions change. Past performance is not a reliable indicator of future results.
An unconfirmed event can move prices as much as a confirmed one. Until Binance publishes its findings, every figure in this story is provisional, and markets may react sharply to the next official update.
The Macro Backdrop: A Hawkish Fed
The market was fragile before the transfers. On 28 October the Federal Reserve held rates at 3.75% to 4.00% in a 10-2 vote, reported Fortune. Two officials dissented in favour of a hike.
Source: Fortune. Market-implied odds change daily. Forecasts are not a reliable indicator of future performance.
Higher rates tend to weigh on speculative assets. For more on that meeting, see our note on the Fed's hawkish hold.
Bitcoin Technical Levels to Watch
The levels below come from liquidation data and from the price action of the day. They are indicative only.
Sources: ChainCatcher (CoinGlass data), Odaily, Coindoo. Past performance is not a reliable indicator of future results.
The five-year table below puts the day's moves in context.
Five-Year Performance in Context
Crypto prices have swung widely over the past five years. The table shows annual changes and year-end closes for each full calendar year from 2021 to 2025.
Period: calendar years 2021 to 2025, plus 2026 to 21:46 UTC on 29 October. Sources: ChartRow (Bitcoin), ChartRow (Ethereum), WalletInvestor (BNB), CoinGecko. 2026 changes are our calculation. Year-end closes differ slightly between data vendors. Past performance is not a reliable indicator of future results.
Bitcoin closed 2025 with a 6% decline, its first negative year after a halving, reported Yahoo Finance. The large gains of 2023 and 2024 followed the deep falls of 2022. In 2022, all three assets lost more than half of their value.
Bitcoin Forecasts Before and After the Event
Published bank forecasts predate the transfers. We did not find a post-event price target from a major bank at the cut-off.
Forecasts are not a reliable indicator of future performance. Forecasts were made before the suspected Binance incident.
Three Illustrative Scenarios
The scenarios below are illustrative. They describe how markets could react to different outcomes. They are not predictions.
Illustrative scenarios based on the levels and data cited above. Forecasts are not a reliable indicator of future performance.
Hawkish US data could amplify any downside. US payrolls are due on 6 November and CPI on 10 November, according to FedRateCalc.
Upside and Downside Risks
Based on the data and sources cited in this article.
What Traders Often Watch After an Exchange Hack Report
Past exchange incidents suggest a few signals that markets have often reacted to. The list below describes them without recommending any action.
- An official statement from Binance on what happened.
- Further updates from Tether and Circle on the size of the freezes.
- Movements of the forwarded ETH towards exchanges or mixers.
- Notices about deposits or withdrawals on Binance's announcements page.
- Attribution reports from blockchain security firms.
- Changes in funding rates and open interest on derivatives venues.
Our guide to market volatility explains why sharp moves like these can reverse quickly. Our economic calendar lists the US data releases that may add to the swings.
Managing Risk When Crypto Is Volatile
Depending on the client's country and client category, Admirals offers CFDs on cryptocurrencies such as Bitcoin and Ether. Crypto CFDs are not available to retail clients in the UK, under FCA rules. The FCA confirmed in 2025 that this ban remains in place. A CFD on BNB was not listed in the contract specifications at the time of writing.
A crypto CFD is a contract on the price. It does not give ownership of the coin. Leverage magnifies losses as well as gains. In the EU, leverage on crypto CFDs for retail clients is capped at 1:2, a limit first set by ESMA. Conditions depend on the client's jurisdiction and entity.
CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. You should consider whether you understand how CFDs work and whether you can afford to take the high risk of losing your money.
Tools such as stop-loss orders can help manage risk. Gaps can still cause losses beyond the stop level. Our risk management guide covers position sizing in more detail. A demo account uses virtual funds, and results may differ from live trading.
Key Dates Ahead
Sources: FedRateCalc, Federal Reserve. Dates and times may change.
Hot Wallet vs Cold Wallet
A hot wallet is connected to the internet so an exchange can process withdrawals quickly. A cold wallet is kept offline. Exchanges usually keep most reserves in cold storage.
General description for educational purposes.
Keeping most reserves offline is why a breach of one hot wallet does not automatically mean the loss of all customer funds. Even so, the sums tracked today are very large for operating wallets.
Frequently Asked Questions
Was Binance hacked today?
Binance had not confirmed a hack by 21:50 UTC, though it said user funds were completely safe.
How much was taken in the suspected Binance hack?
On-chain tallies report about $5.6bn of outflows across several blockchains, though Binance has not confirmed any loss.
Did Tether freeze USDT linked to the transfers?
Yes. Tether's chief executive said on X that Tether had frozen more than 1.567bn USDT linked to the incident.
What is a hot wallet?
A hot wallet is an online crypto wallet that exchanges use to process withdrawals quickly for their customers.
What is the Binance SAFU fund?
SAFU is Binance's emergency reserve for users, holding 15,000 BTC, worth about $1.19bn at the 21:46 UTC Bitcoin price.
Why is crypto crashing today?
Reports of a suspected Binance breach added to selling, and $629m of positions were liquidated in one hour, mostly longs.
Has Binance been hacked before?
Yes. In May 2019 attackers stole about 7,000 BTC from a Binance hot wallet, later covered by SAFU.
Can retail clients in the UK trade crypto CFDs?
Crypto CFDs are not available to retail clients in the UK, and elsewhere access depends on jurisdiction.
Some of the content on this page was created with the help of automated tools. All final text has been reviewed by Admirals and is under its editorial responsibility.
The given data provides additional information regarding all analysis, estimates, prognosis, forecasts, market reviews, weekly outlooks or other similar assessments or information (hereinafter “Analysis”) published on the websites of Admirals investment firms operating under the Admirals trademark (hereinafter “Admirals”) Before making any investment decisions please pay close attention to the following:
- This is a marketing communication. The content is published for informative purposes only and is in no way to be construed as investment advice or recommendation. It has not been prepared in accordance with legal requirements designed to promote the independence of investment research, and that it is not subject to any prohibition on dealing ahead of the dissemination of investment research.
- Any investment decision is made by each client alone whereas Admirals shall not be responsible for any loss or damage arising from any such decision, whether or not based on the content.
- With view to protecting the interests of our clients and the objectivity of the Analysis, Admirals has established relevant internal procedures for prevention and management of conflicts of interest.
- The Analysis is prepared by an analyst (hereinafter “Author”). The Author Admirals is an employee /a contractor for Admirals. This content is a marketing communication and does not constitute independent financial research.
- Whilst every reasonable effort is taken to ensure that all sources of the content are reliable and that all information is presented, as much as possible, in an understandable, timely, precise and complete manner, Admirals does not guarantee the accuracy or completeness of any information contained within the Analysis.
- Any kind of past or modelled performance of financial instruments indicated within the content should not be construed as an express or implied promise, guarantee or implication by Admirals for any future performance. The value of the financial instrument may both increase and decrease and the preservation of the asset value is not guaranteed.
- Leveraged products (including contracts for difference) are speculative in nature and may result in losses or profit. Before you start trading, please ensure that you fully understand the risks involved.
Sources
- Binance Hot Wallet Reportedly Attacked, With About $2.5 Billion in Assets Transferred Out, PANews, accessed 29 October 2026.
- Binance Suspected Theft Tracker: Another 780 Million USDC Moved Out, Totaling About $3.3 Billion, PANews, accessed 29 October 2026.
- $629M Liquidated Across Crypto Market in Past Hour, $607M in Longs, PANews, accessed 29 October 2026.
- Binance to Conduct Wallet Maintenance on Ethereum (ETH) Network on October 28, PANews, accessed 29 October 2026.
- Binance Hack Fears Shake Crypto: $2.8B Outflows Reported, Coindoo, accessed 29 October 2026.
- Binance Hack Rumor Sinks Crypto Market, Wipes Out Longs, Crypto News Flash, accessed 29 October 2026.
- Address 0x5227f603...DfCCB2f8c, Etherscan, accessed 29 October 2026.
- Newsflash feed, Odaily, accessed 29 October 2026.
- Binance Hot Wallet Suspected of Being Attacked, Approximately $2.5 Billion in Assets Transferred Out, Odaily, accessed 29 October 2026.
- BTC falls below 79000 USDT, down 2.59% in 24H, Odaily, accessed 29 October 2026.
- Tether Freezes $971 Million in USDT Amid Suspected Binance Hack, Odaily, accessed 29 October 2026.
- Circle freezes $823 million in USDC amid suspected Binance hack, Odaily, accessed 29 October 2026.
- Stablecoin Freeze Amount Related to Binance Suspected Hack Rises to Approximately $2.107 Billion, Odaily, accessed 29 October 2026.
- Post on the potential security issue, edited at 21:29 UTC, Binance (@binance) on X, accessed 29 October 2026.
- Post on user funds and the freezes, Changpeng Zhao (@cz_binance) on X, accessed 29 October 2026.
- Post on the USDT freeze, Paolo Ardoino (@paoloardoino) on X, accessed 29 October 2026.
- Post on the USDC freeze, Jeremy Allaire (@jerallaire) on X, accessed 29 October 2026.
- Post on outflows from Binance-labelled wallets, BWEnews (@bwenews) on X, accessed 29 October 2026.
- Binance-labeled wallets saw over $5.6 billion in outflows amid suspected attack, Odaily, accessed 29 October 2026.
- EIP-7702 authorization exploited to move Binance wallet assets, Odaily, accessed 29 October 2026.
- Binance Drained of $5.5 Billion in Suspected Hack, Tether and Circle Freeze $1.8 Billion, Decrypt, accessed 29 October 2026.
- Post on the potential security issue, Yi He (@heyibinance) on X, accessed 29 October 2026.
- Bitcoin price, CoinGecko, accessed 29 October 2026.
- Ethereum price, CoinGecko, accessed 29 October 2026.
- BNB price, CoinGecko, accessed 29 October 2026.
- Data: If BTC falls below 76,707 USD, ChainCatcher, accessed 29 October 2026.
- Binance finalizes $1 billion SAFU reserve conversion into bitcoin, The Block, accessed 29 October 2026.
- Standard Chartered sees bitcoin falling to $50,000, ether to $1,400 before rebound, The Block, accessed 29 October 2026.
- Binance hacked for 7,000 Bitcoin in large scale security breach, Decrypt, accessed 29 October 2026.
- FBI confirms Lazarus hackers were behind $1.5B Bybit crypto heist, BleepingComputer, accessed 29 October 2026.
- Fed holds rates steady as a governor and president dissent together for the first time since 1992, Fortune, accessed 29 October 2026.
- Bitcoin Returns by Year, ChartRow, accessed 29 October 2026.
- Ethereum Returns by Year, ChartRow, accessed 29 October 2026.
- BNB price history, WalletInvestor, accessed 29 October 2026.
- Bitcoin Records First-Ever Negative Post-Halving Year, Yahoo Finance, accessed 29 October 2026.
- Standard Chartered Keeps $100K Bitcoin Forecast for End-2026, Logos Press, accessed 29 October 2026.
- November 2026 U.S. Economic Calendar, FedRateCalc, accessed 29 October 2026.
- Calendar: December 2026, Federal Reserve Board, accessed 29 October 2026.
- FCA bans the sale of crypto-derivatives to retail consumers, Financial Conduct Authority, accessed 29 October 2026.
- FCA to lift ban on crypto ETNs to support UK growth and competitiveness, Financial Conduct Authority, accessed 29 October 2026.
- ESMA adopts final product intervention measures on CFDs and binary options, ESMA, accessed 29 October 2026.