ReportedamountStatement 189
Around 4:20 p.m. ET on October 29, 2026, funds began leaving Binance hot wallets across multiple blockchains. Unauthorized transfers totaled approximately $6.4 billion, the largest theft in crypto history.
Chainalysis said funds began leaving Binance hot wallets around 4:20 p.m. ET on October 29, 2026, and that unauthorized transfers totaled approximately $6.4 billion.
This line is our short summary of the quote below. The quote is the evidence.
Flagged as conflicting
- Chainalysis is quoted with two totals: about $6.4 billion in its own write-up and $5.912 billion at the time of theft in an earlier Cointelegraph report. Both are attributed to Chainalysis. Compare with Cointelegraph reported that Chainalysis said its current estimate of the amount stolen from Binance is $5.912 billion at the time of theft. (Cointelegraph). Side by side
- Binance says the hot wallets were compromised at around 20:05 UTC. Chainalysis says funds began leaving at around 4:20 p.m. ET. The sources do not say whether these refer to the same first transfer. Compare with Binance said in its Security Incident Update #2 that at around 20:05 UTC on 2026-10-29 its hot wallets were compromised, resulting in a loss of approximately $6.3B USD worth of token assets. (Binance). Side by side
On the timeline
Figures from this statement
- Total stolen: $6,400,000,000.00 as of
Other statements from the same source
ReportedattributionStatement 297
Chainalysis said its strongest evidence for TraderTraitor was seeing Binance funds commingle in real time with funds stolen in the Bitget exploit.
The strongest evidence emerged when Chainalysis investigators observed, in real time, funds stolen from Binance commingling with funds stolen in last month’s Bitget exploit, which had been attributed to North Korean actors.
ReportedotherStatement 296
Chainalysis said that this repeated sequence suggests a programmatic process for moving and redistributing the stolen funds.
This repeated sequence suggests a programmatic process for moving and redistributing the stolen funds.
ReportedotherStatement 195
Chainalysis said many addresses receive exactly 1 TRX, then additional funds, then forward the funds, which it said suggests a programmatic process.
Many addresses follow a consistent pattern: they receive exactly 1 TRX, then receive additional funds, then forward funds to other addresses.
ReportedotherStatement 194
Chainalysis said the attacker swapped $325 million in stablecoins into $285 million in ETH over nearly 20 minutes to try to stay ahead of the freezes.
Over nearly 20 minutes it swapped $325 million in stablecoins into $285 million in ETH.
ReportedfreezeStatement 192
Chainalysis said approximately $2.8 billion had been frozen so far.
Approximately $2.8 billion has been frozen so far.