Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.

The Binance Hack

An independent record of the October 2026 Binance hack

All briefings

Briefing for 2026-11-07

Generated . Each line is a statement somebody made, not a finding of this site.

  1. Reportedclaim Decrypt reported that a Binance spokesperson said a net $4.72 billion had been withdrawn since withdrawals resumed on Sunday, a "relatively limited portion" of total assets of about $157 billion.

    Decrypt. Original

  2. Reportedclaim Elliptic notes the FBI took five days to name North Korea after Bybit. This time it took two.

    insurancebusinessmag.com. Original

  3. Reportedclaim Cointelegraph reported that Binance and Polymarket have proposed a Polygon network hard fork to recover approximately 70.49 million POL tokens, worth about $6.8 million, stolen in separate security incidents involving the two platforms.

    Cointelegraph. Original

  4. Reportedclaim Cointelegraph reported that Polygon block producers have already blocked transactions from the affected addresses, preventing the stolen funds from moving. However, the proposal said the restrictions are temporary measures that cannot return the funds to their owners.

    Cointelegraph. Original

  5. Reportedclaim Elliptic said it has matched around $122 million of bridge outputs so far.

    Elliptic. Original

  6. Reportedclaim Elliptic said that between October 30 and November 1, the attacker's main Tron laundering wallet sent out TRX in 1,113 separate transfers, until it was almost empty, and that the median gap between transfers was 90 seconds.

    Elliptic. Original

  7. Reportedclaim Chainalysis said that ten minutes later, the exploiter sent the remaining $175 million in stablecoins to stopover wallets, likely trying to move faster than a blacklist or freeze.

    Chainalysis. Original

  8. Reportedclaim Cointelegraph reported that Security Alliance (SEAL) estimates that the North Korea-linked TraderTraitor gained access to Binance’s systems about eight weeks before the $6.3 billion exploit on Oct. 29.

    Cointelegraph. Original

  9. Reportedclaim Elliptic said Bitcoin converted from other stolen assets is now about 1,650 BTC ($124 million), almost twice the figure a day earlier.

    Decrypt. Original

  10. Reportedclaim Elliptic said the laundering so far has been highly complex and clearly automated, and has used more than 20,000 wallets on 16 blockchains, at least 36 services and at least 65,000 transactions.

    Decrypt. Original

  11. Reportedclaim Decrypt reported that the nine largest Ethereum addresses, holding 89% of the attacker's ETH, have not moved since October 30.

    Decrypt. Original

  12. Reportedclaim Elliptic reported that by early Friday, roughly $50 million in XRP had been swapped, primarily into bitcoin, with about $226 million remaining.

    The Block. Original

  13. Reportedclaim Ari Redbord told Cointelegraph that the industry’s coordinated response to the attack was unprecedented.

    Cointelegraph. Original

  14. Reportedclaim Ari Redbord explained that the Beacon Network, an intelligence-sharing system TRM launched in 2025, allowed companies to coordinate quickly to immobilize the funds before working to seize them.

    Cointelegraph. Original

  15. Reportedclaim Ari Redbord said: Normally I see a few Beacon alerts maybe every day. I’ve seen, I don’t know, hundreds or maybe even a thousand Beacon alerts over the last few days.

    Cointelegraph. Original