Trending in crypto

Binance

Attackers took about $6.3 billion from Binance's hot wallets on 29 October, the largest theft in crypto history, and the FBI has attributed it to North Korea's TraderTraitor. Binance reopened withdrawals in phases on 1 November and says it has covered about 95% of the loss from its own funds, while about $2.4 billion of the stolen assets sits beyond any issuer's reach.

Updated 2 November 2026 · 1 update · first published 27 October 2026 · 25 sources

Binance loses $6.3 billion in the largest crypto hack on record

Funds began leaving Binance's hot wallets at 20:05 UTC on 29 October, in the largest theft in crypto history. The exchange put the loss at $6.3 billion (The Block). TRM Labs puts the figure at $6.36 billion across ten blockchains, about four times the $1.5 billion Bybit hack of February 2025 (TRM Labs).

How the attacker got in

Co-CEO Richard Teng said the initial findings point to a compromised DevOps engineer's laptop, which gave an attacker access to a service container for submitting unauthorized withdrawals, that "this was not a single 'one-click' action", and that no evidence of a wallet private key leak has been found. Binance has since said it uncovered additional points of breach (BleepingComputer).

On nine chains other than Ethereum, funds left through ordinary signed transfers, which TRM reads as a compromise of Binance's hot wallet signing infrastructure. TRM attributes the attack to TraderTraitor, North Korea's hacking unit, with high confidence (TRM Labs). On 31 October the FBI said North Korea was responsible and named TraderTraitor (CBS News).

The freeze and the loss coverage

Binance says about $3 billion has been frozen. Tether froze about $1.57 billion in USDT, Circle more than $800 million in USDC and Ripple roughly $200 million (The Block). After swapping and borrowing against part of its USDT, the attacker holds more than 420,000 ETH and 18,270 BTC, about $2.4 billion beyond any issuer's reach (TRM Labs).

Binance has set aside $6.34 billion to cover users, $5 billion of it held in the affected token assets, and is buying the remaining roughly $1.3 billion through market and over-the-counter channels (The Block). By 1 November it said it had covered about 95% of the impacted amount (CoinDesk).

Withdrawals reopened in phases from 06:00 UTC on 1 November, and by 12:36 UTC all 15 networks and assets in the first phase were open (Bitcoin.com). Net outflows to 15:30 UTC that day came to $3.64 billion, or 2.1% of Binance's reported assets (CNBC).

What to watch

  • The full Proof of Reserves report, which Binance has moved to 3 November (UTC) because its zero-knowledge proof takes about 40 to 50 hours to generate (Bitcoin.com), and the post-mortem it said it will share once the investigation is complete (The Block).
  • The next withdrawal phase. Assets outside the first are still being tested, with no date given (Bitcoin.com).

Background4 min read

Binance is in the news because from 00:00 UTC on 24 October the exchange began repricing the collateral behind eligible bStocks around the clock, so a tokenised stock price formed inside Binance can now change the collateral value behind a leveraged account while the underlying U.S. share cannot trade, as TokenPost and CryptoSlate reported. It matters because the change turns weekend trading in tokenised equities into a margin event, at a venue where tokenised stocks are already being used as collateral rather than only as exposure.

What changed on 24 October

Binance's notice of 20 October scheduled continuous updates to the bStocks collateral index from 00:00 UTC on 24 October, which was 8 p.m. ET on 23 October, TokenPost reported. Whenever no external market data is available, which covers weekends, holidays and daily maintenance windows, the index now follows prices from trading on Binance rather than staying at the last equity market price, and the change applies to eligible bStocks used as collateral in Cross Margin, Portfolio Margin and Portfolio Margin Pro accounts, according to Blockport. Blockchain.News reported the 24/7 collateral index update on 22 October, pointing to Binance's own announcement.

Until the change, bStocks traded around the clock while their collateral index held the last valid equity-market price whenever external data was unavailable. The Defiant pointed to Binance's own index records for 17 October, where the MUB collateral index stayed unchanged at about 876.31 USDT across four hourly candles beginning at 4 p.m. ET while chip-stock perpetuals came under selling pressure.

How the off-hours price is built

When no outside equity price is available, Binance's collateral index methodology builds the index from its own bStocks order book. The starting point is an Impact Mid Price, which is then run through an exponentially weighted moving average, a calculation that gives more weight to recent prices, so short order book spikes carry less weight in the collateral value. A separate cap limits how far the index can move in this mode. Blockport noted that neither the notice nor the methodology gives a figure for that cap and that Binance can change it, so the documents set no published limit on how much collateral value a single weekend can remove. Once external prices return, Binance phases the two calculations together over time instead of switching at once, which TokenPost said is meant to avoid an abrupt change in the index.

What it does to margin accounts

The index is only the first step. Binance takes the index price and then applies each token's collateral ratio, which differs by token and can change, to decide how much value the account is credited, TokenPost explained. A lower index therefore leaves less credited collateral behind the same open positions, which can lower an account's Margin Level or its Unified Maintenance Margin Ratio, known as uniMMR, while U.S. markets are closed. The notice changes the price input rather than the liquidation rules: the repricing does not itself trigger liquidation, and liquidation still requires an account to breach its applicable threshold. Portfolio Margin rules set that threshold at a uniMMR of 1.05, or 105%, and The Defiant cautioned that this level should not be generalised to every margin mode. VIP 0 to 2 users must also complete a suitability questionnaire, and the additional trading restrictions that can apply in Cross Margin and Portfolio Margin do not by themselves close existing positions, Blockport reported, citing Binance's FAQ.

Why the timing matters

Tokenised equities are being used as margin collateral at a scale that makes the valuation method material. Binance said on 15 October that bStocks had passed $1 billion in assets under management four months after launch, with more than $40 billion in cumulative trading volume, nearly 100 assets listed and $6 billion converted between direct stock positions and bStocks at 1:1 parity. The same release said only 38% of bStocks volume occurred during regular U.S. market hours in July, against 89.2% for conventional U.S. equities, and that outstanding borrowing against deposited bStocks collateral rose to 46.2% by 10 September from 5.5% at the end of June. CryptoBriefing found that as of 20 October bStocks held $149.5 million of the $373.3 million in tokenised Circle stock issued across platforms, ahead of xStocks at $102.7 million and Ondo at $97.3 million.

The product carries its own warnings. Binance's own materials say that bStocks do not give holders direct ownership of the underlying shares or shareholder rights, and that a token can trade at a premium or discount to the underlying security, particularly outside regular stock market hours, Blockchain.News reported.

What to watch

The first weekend under the new method ran from the 00:00 UTC start on 24 October until U.S. markets reopened on 26 October, the point at which the method blends the index back toward external prices (TokenPost). The next U.S. market holiday is Thanksgiving: NYSE markets are closed on 26 November and close early, at 1 p.m., on 27 November, under the NYSE Group holiday calendar, and holidays are among the periods in which the index runs on Binance's own prices (Blockport). The other number to watch is the movement cap, which Binance has not published and can change (Blockport).

Sources read (25)

Other topics

Query the news index yourself — free, no signup