727 FinanceToday's headlines:
Binance hot wallet suspected of being attacked, approximately $2.5 billion in assets transferred out
Binance: Some users' withdrawals blocked due to technical failure, being restored
Binance investigation update: More intrusion points found in security incident, still expects withdrawal restoration within 45 hours
Binance: Security incident may involve compromised laptop of a DevOps engineer, no private key leakage found, total losses estimated at approximately $6.3 billion
Standard Chartered analyst: Binance hack may accelerate DEX adoption and benefit UNI
DeepSeek's RMB 105.5 billion financing details revealed: valuation of approximately RMB 615.5 billion, nearly 30 investors participated
Binance hacker has sold UNI, ENA, PEPE, LINK, AAVE, ONDO and WLD, exchanging for a total of 70,480 ETH
Yi He: User funds are safe, Binance will bear all hack attack losses
Regulation & Macro
Project Developments
Yi He: Deposit function operating normally, withdrawals expected to resume within the next 48 hours
Binance co-founder Yi He posted that the deposit function has not been affected and everything is operating normally. The team is strengthening withdrawal services and related address controls, and expects to begin gradually restoring withdrawals within the next 48 hours.
Binance will postpone the listing of Predict (PREDICT)
According to Binance's official announcement, the listing of Predict (PREDICT), originally scheduled for 18:00 on October 30, 2026 (UTC+8), will be postponed, with the specific time to be notified separately.
Binance: Security incident may involve compromised laptop of a DevOps engineer, no private key leakage found, total losses estimated at approximately $6.3 billion
Binance released a security incident update stating that preliminary investigation shows the incident may involve the compromise of a DevOps engineer's laptop, allowing attackers to access a service container and submit unauthorized withdrawal transactions. Binance stated that no evidence of any wallet private key leakage has been found, and will publish a detailed technical post-mortem after the investigation is completed and the facts are fully verified. Binance estimates total losses at approximately $6.3 billion, has cooperated with blockchain partners to freeze affected assets, with approximately $3 billion frozen on-chain; losses will be borne by the SAFU fund and corporate funds, user funds are safe, and an updated proof of reserves will be published after restoration is complete. As an immediate preventive measure, Binance has temporarily suspended deposits and withdrawals, revoked authorizations for affected addresses, and is working with law enforcement and blockchain intelligence partners to track and recover funds.
Binance: One employee's computer being hacked is only the starting point of the attack; attackers often use sophisticated methods to penetrate
Binance employee sisi posted about the technical details of the security incident, stating that one employee's computer being hacked is the starting point of the attack, but this is not an incident where funds can be transferred out just by compromising one computer; attackers often use sophisticated methods to penetrate, and the company has found important clues and taken measures to control risks; this is not a case where the attacker could complete the fund transfer simply by exploiting a certain engineer's permissions, and the current investigation has not attributed responsibility to any individual. She emphasized that no evidence of wallet private key leakage has been found so far, user funds are safe, and all stolen losses will be fully borne by the SAFU fund and corporate funds; approximately $3 billion in affected assets have been frozen on-chain, deposits remain normal throughout, withdrawals have been suspended as a preventive measure and are expected to open within 48 hours, and detailed information and security hardening measures will be announced subsequently.
Binance: Some users' withdrawals blocked due to technical failure, being restored
Binance posted on X platform that it has noticed some users encountering cryptocurrency withdrawal issues due to a technical error, the technical team is working hard to restore normal withdrawal operations, and will update promptly once fully restored, user funds are safe (SAFU). Previously, Binance's hot wallet was suspected of being attacked, with on-chain data showing related asset outflows of up to $5.6 billion; Binance previously stated that user funds are completely safe and is still investigating potential security issues.
Trezor: Trezor Safe 5 devices sold through reseller CryptoBilis suspected of being implanted with malicious hardware
Trezor stated it received a disclosure report that a Safe 5 device sold through reseller CryptoBilis may have been implanted with unauthorized hardware. Trezor has urged customers who purchased devices from CryptoBilis since March 2026 to move funds to newly created wallets and use new mnemonic phrases. No losses have been reported so far.
Binance investigation update: More intrusion points found in security incident, still expects withdrawal restoration within 45 hours
Binance released an investigation update stating that preliminary investigation shows the security incident may involve a compromised laptop, but subsequent investigation found more intrusion points; this is a sophisticated attack, Binance is coordinating with law enforcement to resolve it and is still collecting facts. Binance stated it still expects to restore withdrawal services within 45 hours, deposits are unaffected, and fund outflows have stopped since withdrawals were suspended; it is working with partners to freeze many affected assets, with approximately $3 billion frozen so far. Losses will be borne by the SAFU fund and corporate funds, user funds are safe.
Binance: Suspends Binance Alpha trading, will resume after security issues are resolved
Binance posted on X platform that as part of ongoing security measures, Binance Alpha trading has been temporarily suspended, involving functions such as CEX purchases of tokens using spot wallet funds, Alpha instant trading, and CEX purchases in prediction markets; trading will resume after security issues are resolved, and user funds remain safe. Previously, Binance stated it was conducting security checks, and withdrawals will resume after security issues are fully resolved.
Yi He: User funds are safe, Binance will bear all hack attack losses
Binance co-founder Yi He stated that user funds are safe and Binance will bear all hack attack losses. Deposits and withdrawals will be temporarily suspended while the team conducts security checks, freezes funds, and cooperates with law enforcement. After the investigation is completed, Binance will publish a full post-mortem and remind users to rely only on official channels for updates.
CZ: Binance appears to have been hacked, approximately $1.794 billion in stablecoins has been frozen
Binance founder CZ posted on X platform that user funds are safe, this indeed appears to be a hack targeting Binance, and thanked Tether (approximately $971 million) and Circle (approximately $823 million) for quickly freezing related funds. CZ stated that he no longer manages Binance.com, but as a shareholder, he expects all user funds to be fully covered. Previously, Binance officially stated it was investigating potential security issues and had not confirmed that user funds were affected.
Binance: Verified total frozen amount is approximately $3 billion
Binance released an update stating that the currently verified total frozen amount is approximately $3 billion, and the team is working closely with law enforcement, issuers, blockchain intelligence companies, and industry partners to continue tracking and freezing more assets. Binance stated it will only publish confirmed figures and will provide further updates as more verified information becomes available, user funds are safe.
Binance: Investigating potential security issues, has not confirmed user funds affected
Binance posted on X platform that the team has noticed reports of potential security issues and is actively investigating, and has not confirmed any impact on user funds so far. The security team is urgently reviewing all relevant information and will release updates through official channels after verification, and reminds users to be alert to scams and not to trust unofficial links, messages, or requests for account information. Previously, on-chain data showed that Binance hot wallets Binance 14 and Hot Wallet 34 had large amounts of assets transferred out in the early hours of today, totaling approximately $3.3 billion.
Yi He: Ripple and WLFI assisted in freezing related assets, Binance withdrawals suspended until the environment is confirmed safe
Binance co-founder Yi He posted on X platform thanking the Ripple team for quickly freezing approximately $200 million in related assets (specific token not specified), and thanking the World Liberty Financial team for freezing $27 million in USD1 and 48 million WLFI (approximately $2 million). Yi He stated that for security reasons, Binance has currently suspended withdrawals until the environment is confirmed safe, user funds are safe (SAFU).
Binance: Conducting security checks, withdrawals will resume after security issues are resolved
Binance posted on X platform that the team is conducting security checks, withdrawals will resume after security issues are fully resolved, user funds remain safe, and updates will continue. Previously, Binance stated that some users' withdrawals were blocked due to a technical error and were being restored; on-chain data showed that Binance's hot wallet was suspected of being attacked, with related asset outflows of up to $5.6 billion.
CZ: Binance's net loss from the hack may be slightly over $1 billion, will be fully covered
DefiLlama founder 0xngmi posted on X platform that Binance has approximately $144 billion in custodial assets, and after USDT and USDC were frozen, the total loss from this incident is approximately $1 billion, accounting for only 0.69% of its custodial assets, and Binance can easily cover it with its balance sheet. Binance founder CZ reposted and stated that the loss may be slightly higher than this, but will be fully covered. According to Lookonchain monitoring, Binance had over $5.8 billion in stolen assets, of which 1.58 billion USDT and 823 million USDC (totaling $2.41 billion) have been frozen.Aave: Due to the Binance incident, all DAO markets on V3 and V4 have been temporarily frozen
Aave posted on X that it is aware of reports that a Binance-linked wallet may have suffered a security incident. Aave contracts are unaffected, and all positions remain overcollateralized. As a precautionary measure, all DAO-operated markets on Aave V3 and V4 have been frozen, suspending new deposits and borrows, while users can still withdraw assets and repay existing positions. Aave founder Stani Kulechov said the team is closely monitoring developments and will unfreeze the markets as soon as feasible. Previously, an address associated with the suspected Binance theft incident deposited about 60 million USDT into Aave and borrowed 19,762 ETH.
Investment and Financing News
DeepSeek's RMB 105.5 billion financing details revealed: valuation of about RMB 615.5 billion, with nearly 30 investors participating
Details of DeepSeek's second financing round have been revealed: the round reached RMB 105.5 billion (about USD 15.8 billion), with nearly 30 investors participating, corresponding to a valuation of about RMB 615.5 billion. Tencent Holdings and CATL are the main contributors. Tencent invested RMB 10 billion in each of the two rounds, while CATL and Chairman Zeng Yuqun invested RMB 5 billion and RMB 10 billion in the two rounds, respectively. Industrial capital participants include ChangXin Memory Technologies, SMIC, vivo, Meituan, Geely Automobile, Midea Group, and Luxshare Precision. Participation by state-owned capital increased. China's National AI Industry Investment Fund invested another RMB 1 billion this round, while China Mobile, China Telecom, CICC, CITIC Securities, and China Life each invested RMB 2 billion to RMB 8 billion. People familiar with the matter said rising prices for Nvidia's high-end chips and concerns about an AI bubble are the reasons the fundraising size doubled.
ARK Invest buys about USD 9.1 million of Robinhood shares, the largest purchase in 6 months
Cathie Wood's ARK Invest bought about USD 9.1 million of Robinhood shares on Wednesday, the largest purchase of the stock by the firm since April 29. Earlier this month, ARK sold about USD 47.5 million of Robinhood shares between October 6 and October 9, when the stock closed between USD 107 and USD 112. The purchase came after Robinhood released its third-quarter earnings, which showed cryptocurrency trading revenue fell 55% year over year to USD 120 million, while cryptocurrency trading volume dropped 38% to USD 50 billion.
Views & Analysis
Standard Chartered analyst: Binance hack may accelerate DEX adoption and benefit UNI
Geoffrey Kendrick, global head of digital asset research at Standard Chartered, said the Binance hack could accelerate a shift toward decentralized exchanges (DEXs) and benefit Uniswap (UNI). Kendrick also said his previous target of USD 100 for UNI by 2030 may be too low.
OneKey founder: IBIT may already be a potential target for North Korean hackers, and its highly concentrated BTC custody risk cannot be ignored
OneKey founder Yishi analyzed that he suspects BlackRock's IBIT is already on North Korea's potential target list. In the February 2025 Bybit incident, attackers compromised a developer's computer through a malicious project disguised as a legitimate Docker tool and gained the ability to manipulate the signing interface. Yishi said TRM Labs is highly confident that the Binance incident is related to TraderTraitor, an organization also linked to the Bybit and DMM Bitcoin thefts. IBIT holds about 815,000 BTC, worth about USD 63 billion. Coinbase remains its active Bitcoin custodian, and the latest quarterly filing shows there are currently no plans to move the Bitcoin; TRM believes attackers may have controlled the signing infrastructure. The remaining losses from a major theft that cannot be recovered or compensated would be borne by IBIT shareholders.
ZachXBT: Stolen funds from Binance and Bitget were sent to the same address and may have been carried out by the same attacker
On-chain sleuth ZachXBT said that the stolen funds from the Binance USD 6.3 billion exploit and the Bitget USD 388 million exploit were sent to the same address 45 minutes ago after being transferred through THORChain, indicating that the two incidents were likely carried out by the same actor. ZachXBT said the Bitget exploit has been attributed to North Korea-linked TraderTraitor, which overlaps with other exploits such as Kelp DAO.
SlowMist CISO recommends investigating the Binance theft around the private key leakage chain and abnormal withdrawal tools
SlowMist Chief Information Security Officer 23pds posted that in Binance's one-time asset theft incident, based on historical forensic experience, the attacker was able to bypass the risk control system. Whether the intrusion path was private key leakage or compromise of the signing machine still needs to be confirmed, and he personally leans toward the private key leakage hypothesis. He believes the attacker most likely used customized withdrawal tools and recommends that the security department focus its traceability and forensic investigation on the private key leakage chain and the characteristics of abnormal withdrawal tools.
Analysis: Suspected Binance attacker mistakenly used MetaMask to pay Gas, possibly leaving a traceable record
Protocol engineer Justin Kalland posted that the Binance attacker may have made an operational mistake. The attacker transferred 175 million USDT to a new wallet, and about 2.5 minutes later the wallet received 2 ETH for Gas; two minutes after that, the wallet used MetaMask's Gas Station, and three transactions were bundled into the same block: a Gas top-up, an unlimited USDT approval to the Kyber Network router, and a payment of 127.67 USDT to Gas Station. Kalland speculated that in a rush the attacker mistakenly selected USDT as the Gas payment method; using Gas Station requires going through MetaMask Sentinel, and this interaction may leave off-chain records in MetaMask, including IP metadata.
ZachXBT: Binance hacker suspected to be North Korean hacking group Lazarus Group
On-chain sleuth ZachXBT posted that this Binance attack was most likely carried out by the North Korean hacking group Lazarus Group (DPRK).
Key Data
Binance hot wallet suspected to have been attacked, about USD 2.5 billion of assets transferred out
According to Etherscan data, Binance hot wallet "Binance 14" (0x28C6...1d60) transferred out about 167,500 ETH (about USD 379 million), 1.615 billion USDT, and more than 60 types of tokens including RLUSD, wBETH, XAUt, UNI, and USD1 in a transaction at 04:24 Beijing time to a new address 0x5227...CB2f8c, with a total value of about USD 2.5 billion. On-chain data shows that the source of funds for the address 0x7C86...5CA0 that initiated the transaction was Tornado Cash. BWEnews, Tree News, and others said the hot wallet is suspected to have been stolen. As of press time, Binance had not responded.
Binance hacker has sold UNI, ENA, PEPE, LINK, AAVE, ONDO, and WLD, exchanging them for a total of 70,480 ETH
According to Lookonchain monitoring, the Binance hacker has sold UNI, ENA, PEPE, LINK, AAVE, ONDO, and WLD, exchanging them for a total of 70,480 ETH (USD 158.25 million). These included 7.02 million UNI (USD 39.63 million, average price USD 5.65), 217.5 million ENA (USD 33.93 million, average price USD 0.16), 7.77 trillion PEPE (USD 31.66 million, average price USD 0.0000041), 2.57 million LINK (USD 26.05 million, average price USD 10.14), 127,953 AAVE (USD 14.27 million, average price USD 111.55), 21.85 million ONDO (USD 6.62 million, average price USD 0.30), and 17.32 million WLD (USD 6.09 million, average price USD 0.35).
A whale closed a USD 100 million long position for a USD 17.78 million profit, then opened a short on 20,000 ETH
According to on-chain analyst Ember monitoring, a diamond-hand whale who had held BTC and ETH long positions for nearly 4 months turned bearish on the market after the Binance theft, closing a USD 100 million long position and locking in a USD 17.78 million profit, then opening a short on 20,000 ETH at USD 2,228 (USD 44.6 million). In early July, the whale opened long positions of 1,000 BTC at USD 62,353 and 10,000 ETH at USD 1,762.
Coinbase increased its Bitcoin holdings by 643 BTC in the third quarter, bringing total holdings to 17,954 BTCAccording to Bitcoin Treasuries, Coinbase announced that it increased its Bitcoin holdings by 643 BTC in the third quarter and currently holds a total of 17,954 BTC.
Binance hacker moves $38.82 million in ETH to a new wallet, still holds $1.12 billion in ETH
According to Arkham monitoring, the Binance hacker sent $38.82 million in ETH to a new wallet and may be preparing to transfer it to Tornado Cash. It still holds $1.12 billion in ETH.
Ethereum spot ETFs saw total net outflows of $105 million yesterday, marking 4 consecutive days of net outflows
According to SoSoValue data, yesterday (U.S. Eastern Time, October 29), Ethereum spot ETFs saw total net outflows of $105 million, marking 4 consecutive days of net outflows. The largest single-day net inflow was Fidelity FETH, with net inflows of $2.9018 million and cumulative historical net inflows of $2.427 billion; the largest net outflow was BlackRock ETHA, with net outflows of $71.6792 million and cumulative historical net inflows of $11.946 billion. As of press time, the total net asset value of Ethereum spot ETFs was $13.984 billion, the ETF net asset ratio reached 5.07%, and cumulative historical net inflows totaled $12.444 billion.
Tracking the suspected Binance breach: another 780 million USDC transferred out, totaling about $3.3 billion
According to Etherscan data, after Binance hot wallet "Binance 14" was suspected to have been breached at 04:24 Beijing time with about $2.5 billion in assets transferred out, the same initiating address (0x7C86…5CA0) triggered another transaction at 04:41, transferring 780 million USDC from "Binance: Hot Wallet 34" to the same receiving address 0x5227…CB2f8c. The two transactions totaled about $3.3 billion. In addition, the receiving address has transferred about 195,500 ETH to a new address 0x8532…43D4.
Alphabet (GOOGL) shares fell as much as 12.18% intraday, now at $287.13
Chainalysis: The amount stolen from Binance was approximately $5.912 billion at the time of the incident
Chainalysis posted on X that it currently estimates the amount stolen from Binance at approximately $5.912 billion at the time of the incident, nearly 4 times the amount stolen in the second-largest crypto theft case (Bybit, 2025).
Binance hacker is moving over $1 billion in ETH to new wallets, possibly preparing to launder it through mixers
According to Onchain Lens monitoring, the hacker group reportedly involved in the $5.8 billion Binance attack is moving over $1 billion in ETH to new wallets and may be preparing to launder it through mixers such as Tornado.
Data: Assets outflow in the suspected Binance breach may reach $5.6 billion, involving Bitcoin and Tron
On-chain estimates show that the total amount of funds transferred out of Binance wallets in the suspected breach was approximately $5.8 billion. According to on-chain data statistics, as of 5:22 Beijing time, assets related to Binance-labeled wallets had outflowed about $5.643 billion, including $3.528 billion on Ethereum, $1.449 billion on Bitcoin, $628 million on Tron, and $38 million combined on Arbitrum, Optimism, and Base; Tether and Circle have frozen at least $2.316 billion in stablecoins. Binance has not yet confirmed a hacker attack and says user funds are completely safe.