Binance may have suffered a multibillion dollar hack

On 29 October 2026, billions of dollars in cryptocurrency moved from wallets attributed to Binance. Analysts reported suspicious transactions and estimates reached as high as $5.8 billion. If that amount was actually stolen, the incident would surpass the previously reported Bybit hack. But there is an important difference between billions of dollars in suspicious transactions and billions permanently lost.

Binance said it was investigating a potential security incident. The exchange stated that no impact on customer funds had been confirmed at that stage. What exactly happened, how much money was actually lost and why did the crypto market react so sharply?

Binance saw billions in suspicious transactions

On 29 October, reports emerged of large transfers from wallets attributed to Binance. Blockchain analysts followed the funds to newly created wallet addresses. Some estimates reached approximately $2.7 billion, while other analysts cited figures as high as $5.8 billion.

Those differences matter. Not every transfer from an exchange wallet means an attacker has stolen funds. Crypto exchanges also move assets between their own wallets. The transfers were suspicious enough to justify an investigation, but the final loss had not been established.

Binance said its security team was investigating the reports. Former chief executive Changpeng Zhao also wrote that the incident looked like a hack. He expected customer assets to remain fully covered.

That expectation is not the same as an independently verified outcome. Investigators must establish which transactions were unauthorized, how much money came under an attacker's control and how much could be frozen or recovered.

What was taken and how much can still be recovered?

The suspicious transactions involved several cryptocurrencies, including Ethereum and stablecoins such as USDT and USDC. A stablecoin is a digital token designed to maintain a stable value, usually linked to the US dollar.

According to reporting by The Block, analysts tracked billions of dollars in transfers. The precise amount varied between analyses and had not been officially confirmed by Binance.

Reuters reported on 29 October that Tether and Circle had frozen more than $2.38 billion in stablecoins combined. Binance co founder Yi He also said Ripple had frozen approximately $200 million. These figures should not simply be added together because reports did not always use the same transactions or reporting cut off.

What does that mean? A frozen stablecoin remains visible on the blockchain, but its issuer can prevent further transfers. This can make it harder for an attacker to spend the funds. It does not automatically mean the money has already been returned to Binance or its customers.

The distinction is essential. A transaction may be visible, funds may be temporarily frozen and the final financial loss may still be unknown. Only a complete reconstruction of transactions and recovery efforts will show how much has actually disappeared.

How a potential hack works in simple terms

Cryptocurrencies are not stored like ordinary computer files. The blockchain records which addresses hold assets and which transactions have taken place. Moving cryptocurrency requires a valid digital signature.

An attacker who gains access to the required authorization or exploits a security flaw may be able to initiate a transaction the owner never intended. Once the network accepts the transaction, reversing it through ordinary customer support is generally not possible.

The suspicious Binance transactions involved newly created wallet addresses. Analysts also examined the role of a relayer, an intermediary that submits a transaction to the network on behalf of another party.

The exact attack method had not been conclusively established in the initial reporting. It is therefore too early to claim that a particular private key, employee or software flaw caused the incident.

Watch out: A wallet hack does not automatically mean every customer account has been compromised. The incident may involve a specific wallet or part of the exchange's infrastructure. The impact depends on the affected systems, the amount of unauthorized transfers and the ability to freeze the assets.

Is this the biggest crypto hack ever?

The previous record holder was the Bybit attack in February 2025. Approximately $1.5 billion in Ethereum was stolen, according to Reuters. The US Federal Bureau of Investigation attributed that attack to North Korea.

The comparison puts the potential scale into perspective.

The Binance estimate is far above the Bybit figure. But a ranking of hacks must use confirmed thefts, not every suspicious transaction. Until the final loss is known, potential largest crypto hack is more accurate than largest crypto hack ever.

The comparison still shows what is at stake. An incident at a major exchange affects not only the company involved, but also the confidence of millions of users in the infrastructure that holds their digital assets.

Markets reacted immediately to the news

The initial reaction was negative. CoinDesk reported on 29 October that Bitcoin fell approximately 2 percent during the news and Ethereum about 3 percent. BNB, the token associated with the Binance ecosystem, fell approximately 6 percent at that point.

Liquidations also increased. In leveraged trading, investors effectively borrow additional trading exposure. When the price moves sharply against their position, a trading platform may automatically close it. This realizes losses and can add further selling pressure.

In numbers: Suppose you hold $1,000 worth of Bitcoin. A 2 percent price decline reduces its value to $980. Your paper loss is $20. After a 10 percent decline, the holding is worth $900. This example only reflects the price change and excludes trading costs and taxes.

The initial price reaction does not tell us the market's final loss. Prices change continuously with liquidity, news and trading positions. Prices may also recover if customer assets prove unaffected or a large portion of the suspicious funds is secured.

The main market risks therefore extend beyond direct financial damage. They include a potential loss of confidence, increased withdrawals from exchanges and forced selling by leveraged traders.

Binance holds large reserves, but that does not prove everything

According to CoinMarketCap Research's September exchange report, published in October 2026, Binance's tracked reserves were approximately $165.12 billion using valuations as of 1 October. This provides important context for a reported incident involving several billion dollars.

A figure of $5.8 billion represents approximately 3.5 percent of those reported reserves. This comparison helps explain why a major incident does not automatically mean the entire exchange is insolvent.

There are two important qualifications. The $5.8 billion figure is an early estimate of suspicious transfers, not a confirmed loss. And reserves are not the same as freely available corporate capital. Most of these assets are held to cover customer balances.

Binance publishes its own Proof of Reserves, allowing users to check whether certain customer balances are backed by assets. This helps assess the exchange's financial position, but does not by itself prove that all operational risks are covered or that every reported reserve is immediately available.

It is therefore too early to conclude that Binance is in financial trouble based on the transactions alone. It is equally unwise to dismiss all concerns solely because the exchange reports substantial reserves.

What does this mean for customers and crypto markets?

The next verified facts matter more than the initial sensational estimates. Users should pay attention to official updates about withdrawals, the final amount of unauthorized transactions and the coverage of any losses.

Four developments matter most to the market:

• The final amount lost and the value of assets actually recovered.
• Whether customer balances were affected and how Binance covers any shortfall.
• How Bitcoin, Ethereum and BNB trade after the initial panic subsides.
• The effect on confidence, trading volumes and capital flows at other crypto exchanges.

A hack involving a major exchange shows that crypto risks go beyond price volatility. Wallet security, transaction controls and an exchange's financial position also matter.

Questions worth asking

• How much was actually stolen and how much was merely transferred?
• How much of the suspicious funds has been frozen or recovered?
• Were customer assets affected and how will any losses be covered?
• What impact did the news have on Bitcoin, Ethereum and BNB?
• What independent evidence confirms Binance's financial position after the incident?

This article is for educational purposes only and is not financial advice.

Sources

• Reuters, Tether, Circle freeze $2.38 billion after Binance reports security incident, 29 October 2026
• The Block, Binance investigating hack as suspicious outflows reach up to $5.8 billion, 29 October 2026
• CoinDesk, Potential multi billion Binance hack hitting crypto markets, 29 October 2026
• Reuters, Crypto's biggest hacks and heists, 25 September 2026
• Binance, Proof of Reserves
• CoinMarketCap Research, September Exchange Monthly Report, October 2026