Independent record. Not associated with, endorsed by or operated by Binance. We will never ask you to connect a wallet, log in or pay to recover funds.
An independent record of the October 2026 Binance hack
This line is our short summary of the quote below. The quote is the evidence.
21:01 | Tether freezes 971.1M USDT, 37 minutes after the Ethereum transaction.
Reviewer note: The Speaker field names the party that acted. The timing and the amount are as stated by Hacken, not by Tether. Hacken adds that another count dates the first freezes at 21:14.
an attacker emptied Binance hot wallets on 10 blockchains
The most likely explanation is that the attacker gained the ability to make Binance's hot wallet signing system sign transactions of its choosing across chains.
Early signs on Ethereum pointed to phishing of the authorizations, which could explain Ethereum but none of the other chains.
Cap value and rate per wallet at the signer and hold new destinations for a second approval
Binance says it found no evidence that a private key leaked, while investigators say Binance's signing system signed for the attacker, and the two statements can both be true.