Binance is investigating a security incident after billions of dollars in crypto assets moved out of wallets linked to the exchange, with the large transfers first appearing on 29th October. Founder Changpeng Zhao said the event appeared to be a hack and the exchange temporarily suspended withdrawals on several networks while its security teams examined the transfers.
The full scale of the loss remains unclear. Binance has not confirmed how much was taken or whether customer balances were affected, saying only that user funds remain safe. Onchain researchers initially flagged billions of dollars in movements involving USDT, USDC, ETH and BTC. Estimates vary widely. Some blockchain analysts have traced more than $5 billion across addresses tied to the suspected attacker, while others put the confirmed suspicious transfers lower. Assets sitting in an attacker’s addresses are not the same as the final unrecoverable loss.
Stablecoin issuers moved quickly to limit the damage. Tether froze more than $1.5 billion in USDT connected to the incident, and Circle froze more than $800 million in USDC. Other companies also restricted assets linked to the transfers.
The transfers came from several Binance hot wallets. These stay connected to online systems so the exchange can process deposits and withdrawals, which makes them useful but also leaves an attack surface. Cold storage reduces that exposure by keeping private keys off internet-connected infrastructure, but no exchange can move every asset offline while users expect fast withdrawals. Some of the wallets involved had previously appeared in Binance’s proof of reserves disclosures.
The incident has already moved the wider market. Bitcoin fell below $78,000 during the initial reaction, Ether also declined and BNB dropped more sharply. Binance is the world’s largest centralised crypto exchange and a security problem at that scale can shake confidence across the market, prompting traders to cut leverage, users to withdraw assets and market makers to reduce exposure until the picture clears. The final financial impact may prove smaller than the largest onchain estimates if frozen assets are recovered.
