{"id":695263,"date":"2026-10-29T23:00:00","date_gmt":"2026-10-29T23:00:00","guid":{"rendered":"https:\/\/buglecall.org\/?p=695263"},"modified":"2026-10-29T23:00:00","modified_gmt":"2026-10-29T23:00:00","slug":"binance-investigates-possible-hack-after-billions-transferred-out-tether-and-circle-freeze-stablecoins","status":"publish","type":"post","link":"https:\/\/buglecall.org\/?p=695263","title":{"rendered":"Binance Investigates Possible Hack After Billions Transferred Out; Tether And Circle Freeze Stablecoins"},"content":{"rendered":"<p><span class=\"field field--name-title field--type-string field--label-hidden\">Binance Investigates Possible Hack After Billions Transferred Out; Tether And Circle Freeze Stablecoins<\/span><\/p>\n<div class=\"clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item\">\n<article>\n<p><strong>Binance said Thursday it is investigating a &#8220;potential security issue&#8221; after billions of dollars in crypto left its exchange wallets<\/strong>, and the issuers of the two largest dollar stablecoins say they have frozen well over $1 billion of it. The exchange has not said how much was taken, how, or whether it was a hack.<\/p>\n<p><a href=\"https:\/\/cms.zerohedge.com\/sites\/default\/files\/inline-images\/Binance_80_1793313972422.jpg\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cms.zerohedge.com\/sites\/default\/files\/inline-images\/Binance_80_1793313972422.jpg\" data-entity-uuid=\"0c249aad-8b0d-4424-b37a-a52b2f39a7fe\" data-entity-type=\"file\" alt width=\"500\" height=\"300\" loading=\"lazy\" \/><\/a><\/p>\n<p>&#8220;<strong>Our teams are aware of reports of a potential security issue and are actively investigating<\/strong>,&#8221; Binance said in a <a href=\"https:\/\/x.com\/binance\/status\/2115918888429133902\">post on X<\/a>. &#8220;User funds are completely safe.&#8221; <a href=\"https:\/\/financefeeds.com\/binance-hack-statement-edited-user-funds-safe\/\">FinanceFeeds<\/a>, which reviewed the post&#8217;s edit history, reports that Binance changed it twice. The first version said the exchange had &#8220;not confirmed any impact to user funds&#8221;; at 21:24 UTC that sentence came out, and at 21:29 UTC &#8220;User funds are completely safe&#8221; went in.<\/p>\n<figure class=\"media\">\n<div class=\"embed-media embed-media--rich-x\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Our teams are aware of reports of a potential security issue and are actively investigating. User funds are completely safe.<\/p>\n<p>Our security teams are reviewing all relevant information with urgency, and we will provide updates through official Binance channels as soon as we have\u2026 <a href=\"https:\/\/t.co\/ATR4YdzmHV\">pic.twitter.com\/ATR4YdzmHV<\/a><\/p>\n<p>\u2014 Binance (@binance) <a href=\"https:\/\/x.com\/binance\/status\/2115918888429133902?ref_src=twsrc%5Etfw\">October 29, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Binance&#8217;s founder was less guarded. <a href=\"https:\/\/x.com\/cz_binance\/status\/2115915423174853077\">Changpeng Zhao<\/a>, who says he no longer manages the exchange, wrote: <strong>&#8220;It does look like a hack on Binance.&#8221;<\/strong> As a shareholder, he said, he expects &#8220;all user funds will be fully covered.&#8221;<\/p>\n<figure class=\"media\">\n<div class=\"embed-media embed-media--rich-x\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">User funds are safe!<\/p>\n<p>It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m).<\/p>\n<p>I don&#8217;t manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered. <a href=\"https:\/\/t.co\/oufpyNChxI\">https:\/\/t.co\/oufpyNChxI<\/a><\/p>\n<p>\u2014 CZ \ud83d\udd36 BNB (@cz_binance) <a href=\"https:\/\/x.com\/cz_binance\/status\/2115915423174853077?ref_src=twsrc%5Etfw\">October 29, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<h2>The freezes came from the stablecoin issuers.\u00a0<\/h2>\n<p>Tether CEO <a href=\"https:\/\/x.com\/paoloardoino\/status\/2115918000373346709\">Paolo Ardoino<\/a> said the company froze more than 1.567 billion USDT &#8220;related to a potential Binance exchange hack.&#8221; Circle CEO <a href=\"https:\/\/x.com\/jerallaire\/status\/2115916207463481846\">Jeremy Allaire<\/a> said Circle froze more than 800 million USDC &#8220;in coordination with law enforcement.&#8221; Those are the issuers&#8217; own figures. <strong>Zhao thanked Tether for about $971 million and Circle for about $823 million<\/strong>, and <a href=\"https:\/\/decrypt.co\/382191\/binance-suspected-hack-5-billion-tether-circle-freeze-crypto\">Decrypt<\/a> counts 975.1 million USDT and 823 million USDC frozen in the main receiving wallet, about $1.8 billion. The posts do not say which addresses were frozen, so the totals do not reconcile.<\/p>\n<figure class=\"media\">\n<div class=\"embed-media embed-media--rich-x\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Tether froze more than 1.567B USDT related to a potential Binance exchange hack. <\/p>\n<p>Protecting the industry and our partners is our main priority.<\/p>\n<p>Stay safe everyone.<\/p>\n<p>\u2014 Paolo Ardoino \ud83e\udd16 (@paoloardoino) <a href=\"https:\/\/x.com\/paoloardoino\/status\/2115918000373346709?ref_src=twsrc%5Etfw\">October 29, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<figure class=\"media\">\n<div class=\"embed-media embed-media--rich-x\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Circle is closely tracking reports of a potential exploit involving Binance. In coordination with law enforcement, we have frozen more than 800M USDC associated with the incident and will continue supporting the investigation.<\/p>\n<p>\u2014 Jeremy Allaire (@jerallaire) <a href=\"https:\/\/x.com\/jerallaire\/status\/2115916207463481846?ref_src=twsrc%5Etfw\">October 29, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<h2>Billions?!<\/h2>\n<p><strong>Nobody has a confirmed loss figure<\/strong>. Decrypt&#8217;s on-chain tally is <strong>at least $5.57 billion across Ethereum, Bitcoin and Tron<\/strong>: $3.51 billion on Ethereum, $1.44 billion in 18,270 BTC and $630 million on Tron. <a href=\"https:\/\/www.theblock.co\/news\/markets\/2026-10-29-binance-investigating-hack-suspicious-outflows-5-billion-432171\">The Block<\/a> reports that Conor Grogan, a Coinbase senior director, put the total at up to $5.8 billion, while the security firm Blockaid is looking at about $3.3 billion in suspicious outflows from Binance hot wallets on Ethereum, Arbitrum and Avalanche. The tallies come from different trackers and may overlap, and Binance has confirmed none of them.<\/p>\n<p>Glassnode also suggested over $5 billion worth of crypto assets moved.<\/p>\n<figure class=\"media\">\n<div class=\"embed-media embed-media--rich-x\">\n<blockquote class=\"twitter-tweet\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">It looks like Binance was just hacked for around $5.3 billion worth of assets.<\/p>\n<p>The largest pieces:<br \/>$1.66 billion in USDT<br \/>17,985 <a href=\"https:\/\/x.com\/search?q=%24BTC&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$BTC<\/a>, about $1.45 billion<br \/>$767m in USDC<\/p>\n<p>ETH and dozens of smaller tokens follow. <\/p>\n<p>The total is still a small part of what Binance holds on-chain. <a href=\"https:\/\/t.co\/qaQUybMMlm\">pic.twitter.com\/qaQUybMMlm<\/a><\/p>\n<p>\u2014 glassnode (@glassnode) <a href=\"https:\/\/x.com\/glassnode\/status\/2115926432631410795?ref_src=twsrc%5Etfw\">October 29, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>Decrypt says the first Ethereum transfer, at 20:24 UTC, moved 167,464 ETH and 63 token transfers, including 1.615 billion USDT, to a new address. About three minutes earlier, an address funded through the Tornado Cash mixer had submitted an EIP-7702 delegation for a Binance hot wallet, a mechanism that lets a wallet hand its execution to outside contract code. <strong>Decrypt does not establish that as the cause, and how the attacker got the required signature is unknown.<\/strong><\/p>\n<h2>Markets reacted.\u00a0<\/h2>\n<p>Bitcoin tumbled back below $80,000&#8230;<\/p>\n<p><a href=\"https:\/\/cms.zerohedge.com\/sites\/default\/files\/inline-images\/image_1793314462385.png\"><img loading=\"lazy\" decoding=\"async\" alt width=\"500\" data-entity-uuid=\"a97d9c7f-a68f-4436-a27a-b9df5834e7b3\" data-entity-type=\"file\" src=\"https:\/\/cms.zerohedge.com\/sites\/default\/files\/inline-images\/image_1793314462385.png\" height=\"260\" loading=\"lazy\" \/><\/a><\/p>\n<p>Decrypt has BNB down about 7% to roughly $699 and bitcoin below $79,000, and The Block says on-chain data shows Aave froze lending markets to stop the suspected hacker from borrowing, though Aave has issued no statement.<\/p>\n<p><strong>If confirmed at anything near Decrypt&#8217;s figure, it would be more than triple the roughly $1.5 billion Bybit theft of February 2025, the previous record.<\/strong> Binance lost 7,000 BTC, about $40 million at the time, in a 2019 hack. It has promised updates &#8220;through official Binance channels.&#8221;<\/p>\n<\/article>\n<\/div>\n<p>      <span class=\"field field--name-uid field--type-entity-reference field--label-hidden\"><a title=\"View user profile.\" href=\"https:\/\/cms.zerohedge.com\/users\/tyler-durden\" lang class=\"username\">Tyler Durden<\/a><\/span><br \/>\n<span class=\"field field--name-created field--type-created field--label-hidden\"><time datetime=\"2026-10-29T19:00:00-04:00\" title=\"Thursday, October 29, 2026 - 19:00\" class=\"datetime\">Thu, 10\/29\/2026 &#8211; 19:00<\/time><br \/>\n<\/span><img decoding=\"async\" src=\"https:\/\/cms.zerohedge.com\/sites\/default\/files\/inline-images\/Binance_80_1793313972422.jpg\" title=\"Binance Investigates Possible Hack After Billions Transferred Out; Tether And Circle Freeze Stablecoins\" \/><\/p>","protected":false},"excerpt":{"rendered":"<p>Binance Investigates Possible Hack After Billions Transferred Out; Tether And Circle Freeze Stablecoins Binance said Thursday it is investigating a &#8220;potential security issue&#8221; after billions of dollars in crypto left its exchange wallets, and the issuers of the two largest dollar stablecoins say they have frozen well over $1 billion of it. The exchange has&hellip; <a class=\"more-link\" href=\"https:\/\/buglecall.org\/?p=695263\">Continue reading <span class=\"screen-reader-text\">Binance Investigates Possible Hack After Billions Transferred Out; Tether And Circle Freeze Stablecoins<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[17,22,13],"tags":[],"class_list":["post-695263","post","type-post","status-publish","format-standard","hentry","category-border-security","category-immigration","category-immigration-reform","entry"],"_links":{"self":[{"href":"https:\/\/buglecall.org\/index.php?rest_route=\/wp\/v2\/posts\/695263","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buglecall.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buglecall.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buglecall.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buglecall.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=695263"}],"version-history":[{"count":0,"href":"https:\/\/buglecall.org\/index.php?rest_route=\/wp\/v2\/posts\/695263\/revisions"}],"wp:attachment":[{"href":"https:\/\/buglecall.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=695263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buglecall.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=695263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buglecall.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=695263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}