Binance wallet outflows
| Moved (est.) | ≈$6.06B |
|---|---|
| Frozen | ≈$2.64B |
| Unresolved (est.) | ≈$3.42B |
Frozen: issuer-blocked USDT, USDC, XAUT and PAXG. Unresolved: moved minus frozen, including funds still in traced wallets.
Sources: Wazz’s estimate + later Binance sweep + XRP transfers · Tether / Circle freezes
Withdrawals paused · Binance, 6:33 PM EDT. No reopening time given.
Still held in traced wallets
Tap an amount to expand its wallets. Each balance links to an explorer.
Bitcoin18,270.19988827 BTC
19 unspent outputs. Checked 6:33:08–6:33:11 PM EDT / 22:33:08–22:33:11 UTC.
| Wallet | Held — explorer | Transaction |
|---|---|---|
| bc1q0ts8gaf9…mkmfv3 | 1,000.00000000 BTC | Transaction |
| bc1q2wvz0kcs…veznn6 | 1,000.00000000 BTC | Transaction |
| bc1q42flhayr…5wlsyx | 1,000.00000000 BTC | Transaction |
| bc1q63qrfrps…atsjxp | 1,000.00000000 BTC | Transaction |
| bc1qalwnl7dt…69tca8 | 1,000.00000000 BTC | Transaction |
| bc1qdfhmlrdv…3g88gw | 1,000.00000000 BTC | Transaction |
| bc1qepc70u3u…hs4lag | 1,000.00000000 BTC | Transaction |
| bc1qf5cyvv9w…l8a35u | 1,000.00000000 BTC | Transaction |
| bc1qg3nrzpuv…6n3t53 | 1,000.00000000 BTC | Transaction |
| bc1qjwdw6vrz…mxnz7w | 1,000.00000000 BTC | Transaction |
| bc1qm2j6v324…9wjaat | 1,000.00000000 BTC | Transaction |
| bc1qm8v88m5f…crs2l8 | 1,000.00000000 BTC | Transaction |
| bc1qnq6jj9jm…0k8t3s | 1,000.00000000 BTC | Transaction |
| bc1qs3aej5tm…577s56 | 1,000.00000000 BTC | Transaction |
| bc1qs6xnmhar…l87w3v | 1,000.00000000 BTC | Transaction |
| bc1qxrxujwxf…hs968s | 1,000.00000000 BTC | Transaction |
| bc1qz8hdwv8g…gxupdp | 1,000.00000000 BTC | Transaction |
| bc1qrg025e2p…hn6zyt | 832.49990088 BTC | Transaction |
| bc1qxg0l4p6x…y7s9ra | 437.69998739 BTC | Transaction |
Ethereum396,158.5519 ETH
Checked 6:33:09–6:33:11 PM EDT / 22:33:09–22:33:11 UTC. Includes loan proceeds; unrelated dust excluded.
| Wallet | Held — explorer |
|---|---|
| 0x8532FA…0543D4 | 195,460.000000 ETH |
| 0x897C80…158DF3 | 57,891.771307 ETH |
| 0xc887aF…5B286A | 122,310.000000 ETH |
| 0x7f9DC9…5415E3 | 4.780593 ETH |
| 0x54401f…4BC942 | 20,492.000000 ETH |
Tron684,584,005.139506 TRX
Checked 6:34:25–6:35:27 PM EDT / 22:34:25–22:35:27 UTC. Includes 17,375.196763 borrowed TRX.
TG5i · 46,383,070.229019 TRX
TSpe · 638,200,934.710485 TRX
TPBk · 0.1 TRX
TCzB · 0.100002 TRX
XRP233,461,943.1 XRP
233,461,943.1 XRP · no outgoing transaction through the 6:46 PM EDT check.
Five Binance-labelled source wallets, 4:05–4:09 PM EDT. Unsolicited dust and the failed 42.75M RLUSD payment are excluded.
Aave collateral60M USDT supplied
Depositor wallet · 10M USDT deposit · 50M USDT deposit
19,762.412971 ETH borrowed. No collateral recovery verified. Collateral and loan proceeds must not be counted twice.
Partial inventory. These balances are already part of the moved total or proceeds from it.
Classic Tornado pool audit: 0 deposit events from 4:20 PM through 6:29:47 PM EDT / 22:29:47 UTC across 19 classic ETH and token pools. Log-index freshness checked against a contemporary swap. Nova and other chains are separate.
The original Tornado transaction sent 0.098257 ETH to the caller on October 28, before the incident. No mixer deposit of incident proceeds is verified in these traced branches.
Frozen balances
| Wallet | Frozen | Source |
|---|---|---|
| Ethereum · collection | 1,175,464,711.08 USDT | Verify |
| Ethereum · collection | 823,000,000.00 USDC | Verify |
| Ethereum · AA246 | 174,999,872.33 USDT | Verify |
| Ethereum · b171 | 30,000,000.00 USDT | Verify |
| Tron · TG5i | 312,729,468.00 USDT | Verify |
| Tron · TCzB | 65,990,000.00 USDT | Verify |
| Ethereum · collection | 12,574.046797 XAUT | Verify |
| Ethereum · collection | 1,906.667729 PAXG | Verify |
Stablecoins at $1. XAUT: 12,574.046797 tokens × $4,015.19 at 5:36 PM EDT, approximately $50.49M. PAXG: 1,906.667729 tokens × $4,023.92 at 6:47 PM EDT, approximately $7.67M. Blacklist status and balances checked separately; exact amounts and observation times.
The 65.99M USDT at TCzB and the later 200.40M USDT receipt account for the increase from Wazz’s earlier $2.37B freeze table. The PAXG freeze adds $7.67M. Potential further freezes are excluded.
Reported scope
| Chain | Moved, reported | Assets / source |
|---|---|---|
| Ethereum | $3.51B | Binance 14, 16, 34 |
| Bitcoin | $1.44B | 18,270.2 BTC |
| Tron | $0.63B | 612.73M USDT + 46.39M TRX |
Rounded chain values from Wazz’s 5:06 PM EDT snapshot. Bitcoin and Tron quantities are corroborated. Linking all three chains to one incident follows Wazz’s reporting; a common cause remains unproven.
Additional XRP: 233,461,943.1 XRP, approximately $291.74M at the 6:46 PM EDT explorer mark. The failed RLUSD transfer adds nothing.
The current $6.06B estimate is about 4.19% of DefiLlama’s $144.54B Binance asset snapshot. Assets are not Binance’s own capital.
How the Ethereum path worked
A caller installed an EIP-7702 delegation on Binance 14, then swept assets. Binance 34’s owner is Binance 14, providing an ownership path for the subsequent USDC sweep.
Delegation · First sweep · Binance 34 owner · 780M USDC sweep
How the signatures were obtained remains unknown. No shared dependency with Polymarket has been established.
Statements
Checked 2026-10-29 18:40:39 EDT / 22:40:39 UTC. Issuer reports are not added again to the frozen tally.
Binance · 6:33 PM EDT · Withdrawals are paused during security checks. Binance says they will resume when the security issue is resolved; no reopening time given. It reiterates that user funds are safe.
Tether · 5:25 PM EDT · Paolo Ardoino reports more than 1.567B USDT frozen in connection with a potential Binance hack.
Circle · 5:18 PM EDT · Jeremy Allaire reports more than 800M USDC frozen in coordination with law enforcement.
CZ · 5:15 PM EDT · Says it looks like a hack and expects users to be covered, speaking as a shareholder rather than current management.