Binance Moves $570M SAFU Bitcoin to Unlabeled Mystery Wallet
The exchange transfers 7,500 BTC from its emergency fund following a massive security breach.
1Emergency Fund Asset Movement
Binance recently moved 7,500 BTC from its Secure Asset Fund for Users to an unlabeled, high-volume address. This transfer occurred on November 3 at 05:56 UTC, following an initial withdrawal from the SAFU address on October 31. The movement represents half of the total reserve previously held to protect exchange customers.
2Technical Execution of Transfers
The 7,500 BTC reached an intermediate address before moving to an unlabeled wallet with over 2,400 lifetime transactions. Fifty minutes later, the funds were split into 150 outputs of approximately 50 BTC each. Subsequently, 96 of these outputs were bundled into a single 9,346 BTC transfer, while others were sent separately.
3Market Maker Routing Patterns
Splitting large holdings into 50 BTC chunks and recombining them is a standard procedure for routing assets to market makers or OTC desks. These entities typically facilitate the buyback of missing tokens. However, current blockchain data does not link the receiving address to any named entity, leaving the final destination unclear.
4Replenishment Policy and Status
Binance previously pledged to restore the SAFU fund to approximately $1 billion after the breach. The fund currently holds just over 7,500 BTC, valued at roughly $572 million. This balance falls below the $800 million threshold defined in Binance's internal refill rules, though no specific timeline for replenishment has been provided.
5Breach Origin and Impact
The $6.34 billion theft was traced to a tainted developer installation and an abused internal wallet service. Reports indicate the breach involved a fake job interview and compromised artificial intelligence tools. Binance confirmed it has carried the full cost of the incident, claiming 98% of impacted assets were replenished by October 31.
6Customer Flow and Sentiment
Following a $7 billion post-hack exodus, customer flows have shown signs of stabilization. By November 3, hourly deposits began exceeding withdrawals on the platform. Despite the massive outflow over the previous seven days, the exchange recorded $3.22 billion in net inflows over a 24-hour period, signaling a potential recovery in user trust.
7Transparency and Disclosure Gaps
Binance has not publicly explained the specific destination of the moved 7,500 BTC. While the exchange confirmed that a partial deployment of SAFU was used to cover losses alongside its futures insurance fund and corporate treasury, it never disclosed the exact proportions taken from each specific pot during the recovery process.
8Strategic Implications for Investors
The movement of emergency reserves highlights the operational mechanics of crypto exchanges during crisis management. Investors remain focused on whether Binance will adhere to its self-imposed $1 billion SAFU target. The lack of clarity regarding the unlabeled wallet's identity continues to generate uncertainty regarding the final resolution of the security breach.
Original article: Bitcoin News — Binance Moves $570M SAFU Bitcoin to Unlabeled Mystery Wallet