The Binance hack forced the largest crypto exchange in the world to pause withdrawals on October 29, 2026, and set off the largest stablecoin freeze in the industry’s history. Binance confirmed to TechCrunch that it was dealing with a security incident after users reported funds draining from the exchange, while on-chain analysts put the outflow between roughly 2 billion dollars and about 5.9 billion dollars. Binance confirmed to TechCrunch on October 29, 2026 that it was dealing with a security incident after users reported funds draining from the exchange. The largest cryptocurrency exchange by trading volume paused withdrawals on several networks while its security team investigated, but it has not published a confirmed loss figure. Estimates circulating on October 29 ranged from roughly 2 billion dollars taken from hot wallets to about 5.9 billion dollars in total outflows, leaving the scale of the event unsettled.
The Binance hack arrived during a fragile market session. Bitcoin fell below 79,000 dollars after the reports spread, while Ethereum, XRP and BNB also declined. Stablecoin issuers froze assets within hours, and lending protocols moved to limit how stolen funds could be used. Those actions limited immediate damage, but they also showed how quickly a problem at one exchange can spread across market infrastructure.
What Binance Hack Estimates Show
Conor Grogan, a senior director at Coinbase, put the figure at 5.8 billion dollars. Glassnode, the blockchain analytics firm, said the suspected hack initially involved crypto worth 5.3 billion dollars. Blockaid said it was investigating 3.3 billion dollars in suspicious outflows from Binance hot wallets across Ethereum, Arbitrum and Avalanche. These are estimates from different researchers using different methods, not a loss figure confirmed by the exchange.
On-chain analysts described the largest transfers out of Binance-linked wallets as an estimated 1.66 billion dollars in Tether, 17,985 Bitcoin worth about 1.45 billion dollars and 767 million dollars in USDC. Ethereum, XRP, Solana and Tron were also involved. Glassnode said the suspicious transfers occurred sequentially across several blockchains, with XRP movements first, followed by Solana, Bitcoin and other assets. Its analysis also noted that Binance’s own BNB balance was not touched.
Blockchain researcher Spreek flagged activity that reportedly included a transfer through a contract call allegedly funded by Tornado Cash. That detail has not been publicly verified by Binance or law enforcement. It illustrates why researchers are careful about drawing conclusions from wallet movements alone. A transfer from an exchange-linked address may reflect theft, internal rebalancing or another legitimate activity until investigators have traced it fully.
One estimate put the realised loss near 0.7 percent of Binance customer assets, while other reports continued to revise totals. Binance has not explained the cause of the incident, identified the responsible party or released a post-mortem. It also has not said whether it received any communication from the attackers. Until those details emerge, the final number remains the largest open question surrounding the breach.
Stablecoin Freezes Limit the Immediate Damage
Stablecoin issuers moved unusually quickly. Tether chief executive Paolo Ardoino said the company froze more than 1.567 billion dollars of USDT, while Circle chief executive Jeremy Allaire confirmed a freeze of more than 800 million dollars in USDC in coordination with law enforcement. Binance later said the total frozen assets reached 2.54 billion dollars and warned that the figure could increase as the investigation continues.
Freezes work because major stablecoins operate on issuer-controlled systems that can block specific addresses. That gave exchanges and investigators time to trace funds without requiring every blockchain to change its base rules. The speed of the response also created a contrast with the slower task of measuring the original outflow. A freeze tells the market that action is being taken, while the gap between outflows and frozen assets remains uncertain.
Changpeng Zhao, Binance’s co-founder and former chief executive, who remains a shareholder but says he no longer manages the exchange, acknowledged that it looked like a hack. He said user funds were safe and expected all user funds to be fully covered. Zhao also noted that an analyst estimated roughly 1 billion dollars of exposure remained after the freezes. That statement represents his assessment of the situation, not a settlement or formal guarantee issued through Binance’s corporate structure.
Aave reportedly froze lending markets to stop a suspected attacker from borrowing against the stolen assets. Bybit said its systems were operating normally, with trading and withdrawals available. Those steps matter because stolen tokens can move quickly into lending markets, decentralised exchanges or other venues. Blocking the path can preserve options for recovery, although it cannot reverse a completed transaction.
Market Reaction Shows a Shift in Risk
Bitcoin traded near 78,800 dollars, down 2.89 percent over 24 hours, on volume of about 26.14 billion dollars and a market capitalisation of roughly 1.58 trillion dollars. It fell to a 24-hour low of 78,177.37 dollars after the reports circulated, compared with a high of 81,890 dollars around midday. Ethereum dropped below 2,300 dollars, XRP fell almost 7 percent and BNB lost about 7 percent.
More than 69 million dollars in bitcoin positions were liquidated over 24 hours, mostly longs. That reaction showed how traders responded to uncertainty rather than to a final accounting of losses. When a major exchange halts withdrawals, traders can reasonably question how exposed other venues are, whether funds are commingled and whether related institutions hold risky positions. The result was a rapid repricing across several assets within hours.
The backdrop was already tense. The Federal Reserve held its benchmark rate at 3.75 to 4 percent on October 28 in a 10 to 2 vote, with Governor Lisa Cook and Cleveland Fed President Beth Hammack both dissenting in favour of a quarter-point increase. Third-quarter growth came in at an annualised 3.4 percent, while annual headline PCE inflation reached 3.6 percent, up from 3.4 percent. Bitcoin briefly recovered above 80,000 dollars after the stronger gross domestic product figure before reversing lower.
Spot bitcoin exchange-traded funds took in 423.66 million dollars across three consecutive sessions. Even so, the underlying market had signs of narrowing participation. CryptoQuant analyst Darkfost reported on October 18 that just 51.6 percent of tracked Binance altcoins remained above their 200-day moving averages, down from more than 90 percent in early October and from 87 percent on September 28. The CoinMarketCap Altcoin Season Index sat near 54, below its 75-point confirmation threshold. The security incident landed on a market with less breadth beneath the surface than headline price charts suggested.
What a Full Post-Mortem Needs to Answer
If the highest estimates prove accurate, the incident would be the largest crypto theft on record, surpassing the February 2025 Bybit breach of roughly 1.5 billion dollars in Ethereum, which was attributed to North Korean hackers. That comparison raises the stakes for the investigation, but it also shows why precise accounting matters. Different estimates capture different parts of the movement, including transfers that may later be identified as internal activity or amounts that are recovered.
A credible review would need to explain which systems were accessed, how the initial access occurred and whether customer assets were separated from corporate holdings. It should also document the sequence of transfers, the role of any third-party vendors and the decisions made when withdrawals were paused. Regulators and customers will also want to know how much of the frozen total is available for reimbursement and how claims will be handled.
A separate incident unfolded on the same day. Prediction market operator Polymarket briefly halted trading after a third-party software vendor was compromised, which security researchers said resulted in roughly 2 million dollars in user funds being stolen. Although separate from the Binance incident, the episode illustrates how concentrated supply-chain risks remain across crypto infrastructure. A weak link outside an exchange can still affect customer balances and interrupt trading. Until Binance publishes a post-mortem and the freeze total settles, the size of the loss remains the largest open question, and the Binance hack will be judged by how much of the outflow the industry can actually recover.
For now, the market is operating on incomplete information. Binance has confirmed a security incident and paused withdrawals, but the exchange has not confirmed a loss total. The freeze of 2.54 billion dollars limits the immediate risk and signals a coordinated response, yet it does not settle how much remains exposed or when withdrawals will resume. Until Binance publishes a post-mortem and the freeze total stabilises, the Binance hack remains the defining uncertainty for the market and for the exchange’s users.