Statements

LlamaRisk, an Aave risk service provider, said in its 1:00 am update that the attacker’s position subsequently held around $59.9 million in USDT collateral against $43.8 million in debt. Aave said the position remained overcollateralized and did not put protocol suppliers at risk.

The update came after the Arbitrum Security Council said it executed a transaction to freeze $30.5 million from the Binance exploit, involving 74.6 million Arbitrum (ARB) and 8,425 Ether (ETH). “The Security Council acted by weighing its commitment to the security and integrity of the Arbitrum community and Arbitrum governance without impacting any Arbitrum users or applications,” it said. “As of October 30, 2026 time, the funds have been successfully transferred to an intermediary frozen wallet,” it said.

Binance said the current verified amount of assets frozen from the hack is now $3 billion.

At 00:08 UTC, it used those powers to force two transfers out of the attacker's wallet on Arbitrum, moving 8,426 ETH and 74.6 million ARB, about USD 30 million, out of the attacker's reach.

Binance said customer funds were safe and it is working with industry partners to freeze some of the affected assets, with about $3 billion located so far.

Ripple is freezing holdings of its dollar-pegged RLUSD stablecoin linked to the Binance hack, according to Jack McDonald, the company’s senior vice president of stablecoins. McDonald said Ripple was “actively freezing affected funds” and coordinating with relevant parties to support the investigation. He did not disclose the amount frozen.

Binance said at 23:35 UTC that the verified total frozen had reached USD 2.54 billion.

Binance said the verified total of assets frozen in connection with the hack had reached $2.54 billion, clarifying differing figures circulating publicly, including references to $1.8 billion.

23:35 | Binance states that the verified frozen total is $2.54B.

World Liberty Financial has frozen $27 million in US-dollar-pegged stablecoin USD1 and $2 million worth of WLFI, according to Binance co-founder Yi He. “USD1 has taken proactive steps to freeze the $27 million in USD1 associated with the Binance hack,” said World Liberty Financial co-founder and CEO Zach Witkoff.

the Binance exploiter deposited 60 million USDT and borrowed 19,762 Wrapped Ether (WETH), worth about $44.6 million at the time.

Decentralized lending protocol Aave froze markets across its V3 and V4 deployments as a precaution following the Binance hack.

22:10 | World Liberty Financial freezes 27.8M USD1.

World Liberty Financial froze the 27.8 million USD1 in the main receiving wallet at 22:10 UTC, and froze USD1 in the compromised Binance hot wallet at 22:26 UTC.

* Tether: blacklisted Binance 14 itself at 22:06. * Ripple and World Liberty: froze RLUSD and USD1 in the hot wallet by 22:26. * Circle: froze Binance’s compromised wallets from 23:53.

Tether: blacklisted Binance 14 itself at 22:06.

22:01 | Ripple freezes 40.5M RLUSD.

Ripple froze the wallet holding the stolen RLUSD at 22:01 UTC, with 40.5 million of the 88.5 million RLUSD still inside.

Tether CEO Paolo Ardoino said the company had frozen more than $1.567 billion in USDT linked to the potential exploit.

Binance co-founder Changpeng Zhao said the activity appeared to be a hack, adding that Tether and Circle had frozen approximately $971 million and $823 million, respectively. Zhao said he expected all user funds to be fully covered.

Stablecoin issuers began freezing funds by 5:14 p.m. ET on October 29

But the industry caught up with them more quickly than they expected: by 5:14 pm eastern the freezes started.

Another count dates the first freezes at 21:14.

Tether froze 975.1 million USDT in the main receiving address, and Circle, issuer of the rival stablecoin USDC, froze 823 million USDC in the same wallet at 21:04 UTC, bringing the total frozen to about $1.8 billion.

Circle froze the 823 million USDC in the main receiving wallet at 21:04 UTC, in coordination with law enforcement.