Binance Hack: $2.5B Frozen After Hot Wallet Breach
Binance suspends all deposits and withdrawals after suspected hot wallet hack
On 30 October 2026, Binance -- the world's largest cryptocurrency exchange by volume -- suspended all deposits and withdrawals after attackers drained its Ethereum hot wallet in a single coordinated transaction the evening before. Co-founder Changpeng Zhao (CZ) wrote that the incident "does look like a hack on Binance" and that he expects all user funds to be fully covered. Co-CEO Yi He stated: "User funds are safe." The breach, if confirmed at the reported scale, would surpass the February 2025 Bybit hack (~$1.5B) as the largest cryptocurrency theft on record.
Total stablecoins frozen by Tether and Circle
$2.54 billion
Tether (USDT) frozen
~$1.6 billion
Circle (USDC) frozen
~$800 million
ETH drained from Binance 14 hot wallet
167,464 ETH (~$2.8B at time of hack)
Bitcoin price change after news
-3% to -5%
Previous largest crypto hack (Bybit, Feb 2025)
~$1.5 billion
How the EIP-7702 exploit worked -- and the key unknown
EIP-7702 is a feature introduced in Ethereum's Pectra upgrade. It allows a standard wallet to temporarily act like a smart contract by delegating control to another address. An attacker used this to redirect Binance 14's funds to a wallet they controlled in a single transaction. The central unanswered question: EIP-7702 delegation requires a signature from the wallet's own private key. Blockchain researchers believe the private key was compromised via phishing. Binance has not disclosed how the attacker obtained the signature. No arrests have been announced and the attacker's identity is unknown.
Binance response and what is confirmed so far
All deposits and withdrawals suspended
Binance security teams investigating with law enforcement
Tether froze ~$1.6B in USDT linked to attacker wallets
Circle froze ~$800M in USDC linked to attacker wallets
Aave decentralized lending markets frozen as precaution
Binance states user funds are safe and losses will be covered
Root cause of key compromise disclosed publicly
Total stolen amount confirmed by Binance
Trading on affected products fully resumed
Law enforcement identification of attacker(s)
Last updated 30 October 2026, 01:00 UTC. Total stolen amount is disputed: on-chain trackers cite figures between $2.8B and $5.8B across multiple blockchains; Binance has not confirmed a final number. Only the $2.54B in stablecoins frozen by Tether and Circle is confirmed. Sources: Binance official statement (binance.com); Al Jazeera (00:29 UTC, 30 Oct 2026); BBC (00:59 UTC, 30 Oct 2026); Guardian (00:36 UTC, 30 Oct 2026); CoinDesk live blog; Finbold; FinanceFeeds; AirdropAlert. Cover: hacker sil