Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.
An independent record of the October 2026 Binance hack
Statements
Each statement is one attributed line with a verbatim quote from a stored copy of the source. Only approved statements are shown.
Official means the party said it, not that it is true.
Verified on-chain. Reproduced by us from raw chain data kept in our own storage. The method is shown.
Official. Stated by the party concerned (an exchange, an agency, a token issuer or similar), attributed to them. Official means the party said it, not that it is true.
Reported. Stated by news media or an analytics firm, attributed to them.
Disputed. Credible sources conflict. The statement links the sources that disagree.
Debunked. Contradicted by primary evidence, which is linked.
Theory. Speculation, attributed to whoever proposed it, shown with the evidence for and against.
At 20:41:23 the operator used the still-delegated Binance 14, which owns the Circle smart account Binance Hot Wallet 34 , to move 780M USDC from that account to the collection address, followed by another 43M USDC.
At 20:24:23, three minutes and 24 seconds later, the operator called sweep on Binance 14 (transaction ), sending 167,464 ETH, 1.615B USDT, and about 60 other tokens to a collection address with no prior history, 0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c . Binance 14 was left with 1 ETH. At prices at the time, the basket was worth about $2.5B.
| Ethereum | About 3.79 billion dollars: 200,630 ETH and 185 tokens, including 1.875 billion USDT, 823 million USDC and 88.5 million RLUSD | EIP-7702 delegation on Binance 14; nine plain signed transfers from Binance 16 | 20:20 to 23:56 |
Around 4:20 p.m. ET on October 29, 2026, funds began leaving Binance hot wallets across multiple blockchains. Unauthorized transfers totaled approximately $6.4 billion, the largest theft in crypto history.
At 20:20 UTC, a Binance Bitcoin hot wallet sent 18,270 BTC to an attacker address, which began splitting the funds into round 1,000 BTC and 100 BTC pieces inside the same block.
Between 20:05 and 20:09 UTC, five Binance wallets sent 233.46 million XRP to a single attacker address, leaving each wallet with only its minimum balance.
Blockchain analytics firm Arkham put the haul at $6.01 billion, taken from Binance hot wallets on nine blockchains between 4:10 p.m. and 7:05 p.m. ET on Thursday, it said in a tweet
Onchain data flagged by analyst Spreek shows about $3.55 billion in incoming transfers to the unlabeled wallet, with nearly $900 million subsequently moved across other wallets.
According to Glassnode, Thursday’s Binance breach was the largest cryptocurrency hack on record, with around $6.3 billion affected, exceeding the combined losses from the next nine largest hacks. The previous record was the $1.5 billion Bybit exploit in February 2025.
It could be the biggest heist of any kind in history, according to Elliptic, a consultancy specialising in crypto-related crime. The incident, which took place late on Thursday, is more than four times bigger than the previous largest crypto hack, the $1.5bn one targeting the Bybit exchange last year . Elliptic says there does not appear to be anything comparable in the pre-crypto era.
Attacks on signing infrastructure, where an attacker makes an organization’s own keys sign for them, remain the largest source of losses onchain, and at Binance’s estimate of $6.3B this is the largest theft on record, more than four times the roughly $1.5B taken from Bybit in February 2025.
Elliptic's analysis shows that $6.43 billion in cryptoassets was stolen from Binance on October 29, 2026, more than four times the $1.46 billion stolen from Bybit in 2025.