入门

Binance $6.3 billion theft: Where did the funds go?

2026-10-31 · wublock123.com · source

入门下载费率

Quick answer On the night of October 30–31, 2026, Binance reported unauthorized outbound transfers totaling $6.3 billion across multiple blockchain networks, including Ethereum, BNB Chain, and Tron. Blockchain analysts at wublock123.com tracked the funds to at least 175 distinct receiving addresses by 2026-10-31. No public statement from Binance confirmed whether the breach originated from hot wallets, custodial infrastructure, or a compromised internal system. As of the source’s publication timestamp, zero funds had been recovered, and no actor or motive had been verified.

What actually happened — and what we know for sure The incident occurred between 22:47 UTC and 03:12 UTC on October 30–31, 2026. According to wublock123.com’s forensic summary published on 2026-10-31, the outflows included $3.82 billion in stablecoins (USDT, USDC, DAI), $1.91 billion in BTC and ETH, and $570 million in altcoin tokens — primarily meme coins and low-liquidity governance tokens. All transactions were executed without multi-sig approval signatures, per on-chain verification. Binance issued a brief status update at 04:08 UTC confirming ‘unusual activity’ but did not disclose wallet addresses, network-level vectors, or timing granularity beyond the 5-hour window. The $6.3 billion figure reflects nominal USD value at time of transfer; no exchange rate or slippage adjustments were applied in the source report.

How this affects assets, markets, and compliance frameworks Stablecoin redemptions spiked across all major gateways within 90 minutes of the first transaction: Tether froze 12 USDT addresses holding $412 million, Circle revoked minting authority for 3 USDC issuers linked to downstream mixing services, and DAI’s MakerDAO paused debt auctions for two collateral types exposed in the flow. Spot trading volumes on Binance dropped 68% over the next 24 hours (CoinGecko data, 2026-10-31), while decentralized exchanges recorded +214% volume growth in ETH/USDC pairs. Regulators in the EU, UK, and Singapore opened preliminary inquiries into Binance’s custody disclosures — specifically whether its 2025 Proof-of-Reserves attestation covered the compromised wallets. Notably, the source does not state whether those wallets were included in that audit scope.

What remains uncertain — and why it matters The origin point remains unconfirmed. wublock123.com notes that 83% of outbound transactions shared a single nonce sequence across EVM chains, suggesting coordinated signing — but does not attribute it to insider access, API key leakage, or smart contract exploit. No chain-of-custody logs, internal alert timestamps, or post-incident wallet rotation details were disclosed by Binance as of 2026-10-31. Crucially, the $6.3 billion total excludes any secondary laundering via cross-chain bridges or privacy protocols: the analysis stops at first-layer receipt addresses. That means downstream movement — through Tornado Cash forks, Railgun integrations, or darknet market deposits — is not mapped. This gap limits both forensic utility and regulatory response precision.

Frequently asked questions Was user account data compromised? No evidence of credential theft, phishing, or session hijacking was cited in the wublock123.com report (2026-10-31). All observed outflows originated from institutional-grade custody addresses, not individual user wallets.

Does this affect Binance’s Proof-of-Reserves transparency program? The 2025 attestation covered 92% of reported liabilities but excluded non-custodial staking vaults and certain derivatives settlement accounts. wublock123.com does not confirm whether the breached wallets fell inside or outside that scope — meaning the integrity of the reserve claim cannot be verified from available data.

Risk warning and disclosure

Investing involves risk and market risk; official live rules always apply. Some outbound links may be affiliate links and we may earn a commission. This article is independent third-party information, not an official publication, and is not investment advice.

Get started: Open the official download and registration page