Binance investigates suspected hack after $2bn outflow; stablecoin issuers freeze $2.5bn

Key points

• Binance suspended deposits and withdrawals on October 29 after large transfers from its hot wallets raised security concerns.
• On-chain data shows a transfer of 167,464 ETH and 63 tokens, including $1.6 billion in Tether, to a new address funded via Tornado Cash.
• Tether CEO Paolo Ardoino confirmed freezing over $1.5 billion in USDT, while Circle CEO Jeremy Allaire stated they froze over $800 million in USDC.
• Binance founder Changpeng Zhao said the incident 'does look like a hack' but pledged that user funds would be fully covered.
• Bitcoin fell below $78,000 on Friday, while Ethereum and Binance Coin (BNB) also experienced significant price drops.

Background

This incident follows a series of major crypto breaches in recent years, including the $1.5 billion hack of Bybit in 2025 and the $350 million theft from Bitget in September 2026. Changpeng Zhao, who pleaded guilty to money laundering charges in 2023 and was pardoned by Donald Trump in 2025, remains a key shareholder in Binance despite no longer managing the firm.

How outlets are covering it

The Guardian and BBC report that Binance has not explicitly confirmed a hack, describing it as a 'potential security issue,' while emphasizing that user funds are safe. CNBC and Yahoo Finance highlight the market volatility, noting Bitcoin fell over 4% and BNB dropped nearly 8%. On-chain analysts like Tree News and Spreek suggest the transfers resemble a key compromise rather than routine maintenance, citing the use of Tornado Cash. Conversely, Binance maintains it is conducting security checks and will cover all losses, with Zhao reiterating that customer assets are secure. Some experts estimate the total stolen amount could exceed $5 billion, far higher than the $2.5 billion frozen by stablecoin issuers.

Why it matters

The incident highlights ongoing security vulnerabilities in the cryptocurrency industry and raises questions about the resilience of major exchanges' emergency reserve funds. The scale of the potential breach, if confirmed, would dwarf previous hacks and could impact confidence in digital asset storage and stablecoin issuers' ability to freeze illicit flows.

What to watch

Binance is expected to release a full post-mortem once its investigation is complete. The company is working with law enforcement and blockchain intelligence firms to trace and freeze additional assets. Market prices may continue to fluctuate as the extent of the breach becomes clearer, and users may face continued delays in deposits and withdrawals.