Inside the $5.8B Binance Hack: What’s Confirmed and What Isn’t
Analysts track billions in suspicious transfers as Binance investigates a sophisticated wallet-delegation security breach.
1Massive Outflows Detected
On October 29, 2026, analysts identified suspicious transfers from Binance-linked wallets totaling approximately $5.8 billion. One Ethereum transaction alone swept away 167,464 ETH and 1.615 billion USDT. Within 40 minutes, a single receiving address accumulated $3.52 billion, triggering an emergency response from the exchange and major stablecoin issuers worldwide.
2Technical Vulnerability Analysis
Investigators suspect the breach utilized EIP-7702, an Ethereum feature allowing wallets to authorize smart contracts. Blockaid analysis shows a delegation transaction with 50 authorization attempts occurred at 4:20 p.m. Eastern time. This maneuver enabled the attacker to reprogram a major hot wallet, allowing a single operator to drain existing and incoming funds.
3Coordinated Asset Freezes
Stablecoin issuers acted rapidly to contain the fallout by freezing assets linked to the exploit. Tether reported freezing 1.567 billion USDT, while Circle blocked 800 million USDC. Additionally, Ripple and World Liberty Financial contributed to freezes totaling roughly $2.6 billion, though these figures remain preliminary and have not been independently reconciled by auditors.
4Cross-Chain Complexity
The incident extended beyond Ethereum, involving Bitcoin and Tron networks, which complicates recovery efforts. Unlike stablecoins, native assets like BTC and ETH lack issuer-controlled freeze mechanisms. Analysts observed the operator swapping tokens through decentralized infrastructure and borrowing against collateral, creating a race between investigators and the attacker to control the remaining assets.
5Binance Official Response
Binance suspended withdrawals on October 29 to conduct security checks and coordinate with law enforcement. Co-CEO Yi He confirmed the exchange will cover all hacking losses, asserting that customer funds remain safe. Founder Changpeng Zhao acknowledged the incident as a likely hack, emphasizing that he no longer manages daily operations at the exchange.
6Market and Liquidation Impact
The breach occurred during a volatile trading session, causing BNB to drop nearly 7.7% and Ethereum to decline 4.6%. Coinglass data indicates approximately $1.4 billion in leveraged positions were liquidated within 24 hours. While Bitcoin was already under pressure, the security incident exacerbated market instability and intensified scrutiny on exchange liquidity reserves.
7Attribution and Investigation
No official attribution has been established, though some researchers have speculated about potential North Korean involvement. Investigators are currently examining whether the attacker compromised private keys, tricked authorized signers, or breached internal signing infrastructure. The use of Tornado Cash to fund the operation suggests the attack was planned well in advance.
8Industry Security Implications
This event highlights critical risks associated with smart contract delegation features like EIP-7702. While these tools enhance functionality, they create significant attack vectors when security protocols fail. The industry now faces a fundamental challenge: balancing user-friendly wallet features with robust protection against sophisticated, multi-chain exploits that threaten even the largest global exchanges.
Original article: Bitcoin News — Inside the $5.8B Binance Hack: What’s Confirmed and What Isn’t