Independent record. Not associated with, endorsed by or operated by Binance. We will never ask you to connect a wallet, log in or pay to recover funds.
An independent record of the October 2026 Binance hack
This line is our short summary of the quote below. The quote is the evidence.
On October 30, the attacker began moving funds between blockchains. Between 11:38 and 12:29 UTC, they sold all of the stolen AVAX for USDC, bridged it to Ethereum using Circle's Cross-Chain Transfer Protocol (CCTP), and swapped it for 7,242.8 ETH.
The FBI has previously attributed the Bybit and DMM Bitcoin thefts to TraderTraitor.
The long preparation, the apparent targeting of staff and the use of Binance's own systems to sign transactions resemble earlier TraderTraitor thefts, including Bybit.
Elliptic has identified common service usage between those laundering the Binance funds and those behind three earlier thefts attributed to TraderTraitor, from BigONE, WOO X and AFX.
Tether froze that wallet 37 minutes later, locking 1.18 billion USDT in place
Elliptic has verified $2.85 billion of frozen or seized funds, 44% of the theft