Binance Hot Wallet Breach Leaves 18,270 BTC Unmoved as Attacker Wallets Receive On-Chain Messages
What happened
Attackers drained 18,270 BTC from Binance hot wallets on October 29, 2026, leaving the funds dormant across 19 addresses while opportunistic users send micropayments with permanent messages pleading for cash.
The Context
- TraderTraitor attribution: The FBI and blockchain analytics firms linked the theft—part of a wider $6.3 billion multi-chain drain—to the North Korean cyber syndicate TraderTraitor.
- On-chain spectacle: Anonymous observers are using Bitcoin's OP_RETURN function to attach permanent public memos, including "Help me bro" pleas and platform promotion links, directly onto the hacker's 19 holding addresses.
- Exchange backstops: Binance paused withdrawals, engaged law enforcement to freeze approximately $3 billion in linked assets, and deployed its SAFU insurance fund alongside corporate reserves to cover user balances.
The Number
Valued at $1.4 billion, this entire sum remains static across 19 wallets, showing that laundering institutional-scale crypto balances under global surveillance remains significantly harder than stealing them.
Takeaway
Expect global exchanges to accelerate multi-party computation security upgrades as investigators track these 19 flagged addresses for any sign of liquidation attempts.
Real-time updates, analysis, and reports on the blockchain and cryptocurrency sectors.
"Crypto News delivers real-time updates, analysis, and reports on the blockchain and cryptocurrency sectors."
— A47 Editor
THORChain’s 10 ETH refund error disrupts Binance hackers’ transfers
THORChain node operators halted swaps involving assets on 10 networks, including Bitcoin, Ethereum, Solana and Tron, after an Ethereum reorganization triggered a 10 ETH refund error that disrupted transfers tied to the multibillion-dollar Binance bre...
Research, news, and analysis on blockchain startups, DeFi, and regulations.
"Crypto Briefing provides research, news, and analysis on blockchain startups, DeFi, and crypto regulations with investor-focused coverage."
— A47 Editor
Binance hacker’s frozen-in-place Bitcoin stash is drawing begging notes and token shills
Binance's frozen Bitcoin stash, tied to a hot wallet breach that reports estimate affected roughly $6.3 billion in assets, has become a visible target for begging notes and token promotions embedded in on-chain transactions, even though the funds can...
Covers blockchain, cryptocurrency news, project analysis, and market insights.
"Cointelegraph is a leading crypto-focused media outlet known for timely news, analysis, and educational content related to blockchain and digital assets."
— A47 Editor
THORChain founder rejects freeze request, CZ thanks Secret Service: Hodler’s Digest
THORChain co-founder rejected a request to halt the protocol to comply with FBI demands, while Binance reopened withdrawals after the record hack estimated at roughly $6.3 billion in affected assets, with about $2.54 to $3 billion reported frozen as ...
Covers Bitcoin plus altcoin news, market updates, and educational resources.
"Bitcoin.com provides news, market data, and guides focused on Bitcoin and the wider crypto industry."
— A47 Editor
Thorchain Glitch Blocks Binance Hack Route as FBI Presses Nodes
The base article reports that a glitch on the THORChain protocol blocked a route that hackers were using to move funds from a reported multibillion-dollar breach at Binance, even as US investigators pressed node operators for cooperation. Coverage ci...
Research, news, and analysis on blockchain startups, DeFi, and regulations.
"Crypto Briefing provides research, news, and analysis on blockchain startups, DeFi, and crypto regulations with investor-focused coverage."
— A47 Editor
Binance sees nearly $3.8 billion withdrawn in 10 hours after reopening
Binance saw nearly $3.8 billion in withdrawals within 10 hours of reopening its withdrawal services following a hot wallet breach that reports estimate affected roughly $6.3 billion in assets, with about $2.54 billion frozen while investigators trace...
Global business, markets, and technology policy/industry coverage.
"France 24 provides balanced international coverage with a European perspective."
— A47 Editor
Binance resumes crypto withdrawals after major hack blamed on North Korea
Binance, the world's largest cryptocurrency exchange, has resumed customer withdrawals after a security breach estimated at about $6.3 billion in assets, which would be the largest crypto heist on record. The FBI has tied the hack to North Korea, and...
Covers Bitcoin plus altcoin news, market updates, and educational resources.
"Bitcoin.com provides news, market data, and guides focused on Bitcoin and the wider crypto industry."
— A47 Editor
Binance Inside Job Theories Explode Ahead of Monday’s Reserve Reports
Binance faced reports of a multibillion-dollar hack, with coverage citing figures from $5.8 billion to $6.3 billion in affected assets, while company statements placed roughly $2.54 to $3 billion frozen so far as investigators traced the funds. Specu...