Overview
- Binance reported that hot wallets linked to the exchange showed large unauthorized transfers on Thursday, October 29, and on‑chain forensics now estimate the total moved at about $6.3 billion.
- Stablecoin issuers and industry partners moved quickly to immobilize funds, with Tether and Circle alone freezing more than $1.5 billion in USDT and over $800 million in USDC respectively.
- Binance’s preliminary investigation points to a compromised DevOps engineer laptop that allowed access to a service container, and the company later said it found additional breach points indicating a complex intrusion.
- The exchange suspended withdrawals on affected networks, revoked authorizations for the impacted addresses, said user balances are protected, and pledged to cover any unrecovered losses using its SAFU reserve and corporate funds.
- Blockchain forensics firms and U.S. law enforcement are tracing flows and pursuing attribution, with some firms linking the operation to the TraderTraitor group but Binance has not confirmed that claim and recovering unfrozen decentralized assets will be difficult and time consuming.