Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.
An independent record of the October 2026 Binance hack
Newest first. The raw hash is the SHA-256 of the stored copy exactly as fetched. We keep the copy privately and publish its hash. The text hash is of the text extracted from it, which is what is compared between captures.
| Captured (UTC) | Fetched via | HTTP | Raw sha256 | Text sha256 | Text changed |
|---|---|---|---|---|---|
| firecrawl-web08 | 200 | 3aeead3714128e6b21c2f8d0085fc37c88e11cbdbf18c1ce5c762ab831397ffe | 7a1983697fdc8cfc22a9130ad90502e06d698edda0e64c66765c2c1ebafc0c7f | No |
No text changes detected between captures of this source.
TRM cited similarities to previous North Korean operations, including Tornado Cash funding, advance staging and pre-signed authorizations.
Elliptic also cautioned that the onchain overlap with the Bitget incident involved only a small portion of the Binance funds and did not conclusively establish that the same attackers were responsible.