Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.
An independent record of the October 2026 Binance hack
Freeze scoreboard
Two things are kept apart here: blacklist events recorded on-chain for addresses on our list (an event in a token contract, with its transaction), and freeze figures that parties have published (attributed to them, with the quote).
A blacklist or freeze event does not show attribution. It shows that an address was frozen, in which transaction and when. We do not infer who ordered it, or that the address belongs to an attacker, from the event alone. Only a quoted source can say that, and it appears under Addresses and Statements as that source's statement.
These rows are blacklist or freeze events read from chain data, and only for addresses that are on our address list. Other blacklist events in the same period, on addresses we do not list, are not shown here, so this is not a count of everything an issuer froze. A blacklist event does not by itself show that the address was involved in the hack.
Blacklist events for addresses on our list: totals by chain and token (balances are in token units, not dollars)
Chain
Token
Freeze events
Sum of balance at freeze
First freeze (UTC)
After reference time
ethereum
USDC
4
826,008,456.773849
59 min
ethereum
USDT
2
972,500,829.491199
56 min
Each blacklist event for an address on our list, oldest first
Every approved figure whose measure starts with "frozen". Figures from different parties are not added together, averaged or ranked as more or less correct. See Numbers for all measures.
BBC News
Measure
Figure
As of (UTC)
After reference time
Quote
Frozen total
$3,000,000,000.00
not computable
Reported
On Friday, the company said it had frozen around $3bn of stolen assets after working with law enforcement, intelligence firms and partners.
Worked with law enforcement, blockchain intelligence firms, asset issuers and industry partners to trace and freeze affected assets. Approximately $3 billion has been frozen on-chain to date.
The suspected breach has already prompted stablecoin issuers Tether and Circle to freeze more than $2.3 billion in assets associated with the incident.
The update came after the Arbitrum Security Council said it executed a transaction to freeze $30.5 million from the Binance exploit, involving 74.6 million Arbitrum (ARB) and 8,425 Ether (ETH). “The Security Council acted by weighing its commitment to the security and integrity of the Arbitrum community and Arbitrum governance without impacting any Arbitrum users or applications,” it said. “As of October 30, 2026 time, the funds have been successfully transferred to an intermediary frozen wallet,” it said.
Elliptic estimated that $2.84 billion had been frozen by 7:00 am UTC on Friday, while the attackers still controlled around $3.33 billion in assets that issuers could not immobilize.
Binance said the verified total of assets frozen in connection with the hack had reached $2.54 billion, clarifying differing figures circulating publicly, including references to $1.8 billion.
World Liberty Financial has frozen $27 million in US-dollar-pegged stablecoin USD1 and $2 million worth of WLFI, according to Binance co-founder Yi He. “USD1 has taken proactive steps to freeze the $27 million in USD1 associated with the Binance hack,” said World Liberty Financial co-founder and CEO Zach Witkoff.
Circle CEO Jeremy Allaire said the company had frozen more than $800 million in USDC in coordination with law enforcement and would continue supporting the investigation.
Tether froze 975.1 million USDT in the main receiving address, and Circle, issuer of the rival stablecoin USDC, froze 823 million USDC in the same wallet at 21:04 UTC, bringing the total frozen to about $1.8 billion.
Issuers had frozen $2.80 billion of it, but $2.9 billion in Ethereum Ethereum, Bitcoin Bitcoin, Tron , Solana and other tokens could still be moved, according to Arkham.
Tether and Circle used it, locking up about $2.39 billion between them. That’s 43% of the haul. That leaves somewhere between $2.6 and $3.2 billion still out there.
Elliptic has verified $2.85 billion of frozen or seized funds, 44% of the theft, almost all of it USDT and USDC. The attacker is swapping the rest into ETH and other assets that cannot be frozen, and moving funds between blockchains, using automated scripts that run around the clock.
The stolen USDT reached the attacker's main Ethereum wallet at 20:24 UTC. Tether froze that wallet 37 minutes later, locking 1.18 billion USDT in place, and then followed the funds, freezing four more attacker addresses within 17 minutes. Circle froze the 823 million USDC in the same wallet three minutes after that.
At 00:08 UTC, it used those powers to force two transfers out of the attacker's wallet on Arbitrum, moving 8,426 ETH and 74.6 million ARB, about USD 30 million, out of the attacker's reach.
Tether, Circle, Ripple and World Liberty Financial froze about USD 2.67 billion in stablecoins, and Arbitrum's Security Council froze 8,426 ETH and 74.6 million ARB on its network, for a total of roughly USD 2.7 billion.
World Liberty Financial froze the 27.8 million USD1 in the main receiving wallet at 22:10 UTC, and froze USD1 in the compromised Binance hot wallet at 22:26 UTC.
Tether froze 971.1 million USDT in the main receiving wallet at 21:01 UTC, 37 minutes after the main sweep. Later sweeps landed in the frozen wallet, which now holds 1.175 billion USDT.
Binance has pledged to meet customer losses through its SAFU reserve and company resources, announcing more than $6.34bn of company funds separate from roughly $3bn of frozen assets.
Binance has said the attack began with a compromised employee laptop and involved multiple breach points. It found no evidence of private-key leakage and said roughly $3bn of affected assets had been frozen.
Elliptic’s Robinson says that around $2.8 billion, or around 44 percent of the total amount stolen, has been frozen by crypto companies and exchanges so far, with almost all of this being stablecoins.