News linked to this event type.
Odaily reports: According to monitoring by on-chain analyst Ai Yi, the UXLINK hacker-linked address (0xde8...9524) opened a 30,282.4 ETH long position on Hyperliquid. Its unrealized profit reached $7.422 million in the early hours of today, but has now narrowed to $2.45 million. The original post stated that ETH came under pressure and pulled back due to the recent Binance hack incident.
Odaily Report: LlamaRisk posted on the governance forum stating that after the attack on Binance's Ethereum hot wallet, LlamaRisk, Aave Labs, and others decided to have the guardian freeze markets across the network, freezing a total of 175 reserve types across 16 networks covered by Aave V3, as well as 117 reserves across four spoke categories in Aave V4. Aave will continue to monitor the attacker's wallets and price feeds, and once fund flows cease, it will coordinate with all parties to unfreeze in phases.
Odaily reports: According to Lookonchain monitoring, the Binance attacker has completed the sell-off of 7 tokens including UNI, ENA, PEPE, LINK, AAVE, ONDO, and WLD, cumulatively converting to 70,480 ETH, valued at approximately $158.25 million based on current quoted prices. Among them:UNI: sold 7.02 million tokens, worth $39.63 million, at an average price of $5.65;ENA: sold 217.5 million tokens, worth $33.93 million, at an average price of $0.16;PEPE: sold 7.77 trillion tokens, worth $31.66 million, at an average price of $0.0000041;LINK: sold 2.57 million tokens, worth $26.05 million, at an average price of $10.14;AAVE: sold 127,953 tokens, worth $14.27 million, at an average price of $111.55;ONDO: sold 21.85 million tokens, worth $6.62 million, at an average price of $0.30;WLD: sold 17.32 million tokens, worth $6.09 million, at an average price of $0.35.
Odaily Report: During the Binance attack, an obvious arbitrage opportunity emerged on-chain. According to a community user's review, the attacker, in order to avoid Tether freezing, swapped a large amount of USDT for ETH through DEXs, causing the ETH price on Uniswap to briefly rise to $2,560–$2,750, with some individual trades exceeding $3,000, while Aave's ETH price obtained through the Chainlink oracle remained at $2,250–$2,290. A price gap of 15% to 30% appeared between on-chain and oracle prices, lasting nearly an hour.Arbitrageurs exploited this price gap by depositing USDC/USDT as collateral into Aave, borrowing ETH at the oracle price, then selling it at high prices on DEXs, and buying back ETH to repay the loans once the spread narrowed. According to the user's statistics, within 6 hours after the incident, a total of 61 addresses borrowed ETH on Aave mainnet (excluding the hacker's address). Among them, the most profitable address sold 12,289 ETH at an average price of approximately $2,580, then bought back 12,314 ETH at an average price of approximately $2,297, earning about $3.47 million. The top ten arbitrage addresses collectively profited approximately $6.36 million.The user stated that the arbitrageurs exploited the price disconnection between centralized exchanges and DEXs, and that the Aave contract itself had no vulnerability. As DEX prices fell back and Aave froze the mainnet V3 market, the arbitrage window gradually closed. The above profits are based on transaction-by-transaction on-chain statistics and have not yet deducted Gas fees.
Arkham has flagged the hacker behind the Binance attack, and its team has now verified 70 on-chain addresses associated with the hacker.
Odaily Report: According to monitoring by Benson Sun, Coinkarma founder Benson Sun posted that in Binance's recent theft incident, the exchange has confirmed the freezing of approximately $2.5 billion in assets, accounting for about half of the total stolen amount, with the remaining assets primarily consisting of Bitcoin and ETH. The stolen Bitcoin is worth approximately over $1 billion, but Bitcoin lacks deep mixing pools similar to Tornado Cash, and the relevant addresses will be flagged by trading platforms and on-chain analytics firms, making it far more difficult to liquidate than ETH. Reviewing cases such as the 2016 Bitfinex stolen Bitcoin that remained untouched for years, and the approximately 1,800 BTC stolen from Coldcard in July this year with 90% still unmoved as of early September, Benson Sun stated that this theft is larger in scale, and splitting addresses, mixing coins, and then discounting through OTC trading could take years, with short-term selling pressure nearly zero. If Binance uses SAFU to compensate and replenish Bitcoin, it could instead create buying pressure. In contrast, large amounts of ERC-20 tokens converted into ETH and then deposited into Tornado Cash are harder to trace, and the amount that could genuinely translate into market selling pressure may be in the range of over $1 billion. Benson Sun believes that market confidence will be impacted, but the direct selling pressure on Bitcoin is not as large as imagined, and called on the industry to seriously address security arrangements for hot wallet management, signature authorization, and quantum resistance in the post-AI era.
Binance has posted an update on the handling of the theft incident, stating that the total amount of assets confirmed frozen is approximately $3 billion. The Binance team continues to work closely with law enforcement agencies, asset issuers, blockchain intelligence firms, and industry partners to trace and freeze more assets.Binance stated that it will only publish verified data going forward, and will further update progress as more information is confirmed, while emphasizing the safety of user funds.
Odaily — According to on-chain analyst Aunt Ai, 30 minutes ago, the Binance hot wallet hacker transferred all 74.56 million ARB to address 0x000...0DA0. Arkham has tagged this address as Kelp DAO Hacker, and these tokens have not yet been moved or sold. Kelp DAO suffered an attack on April 18 this year, losing approximately $292 million in rsETH, and at the time the community speculated that the attacker was the North Korean hacker group Lazarus Group.
Arbitrum officially announced that the Arbitrum Security Council has taken emergency action to transfer 74,559,805 ARB tokens and 8,425 ETH held by addresses associated with the Binance attack incident on Arbitrum One. Following technical assessment and review, the Security Council transferred the funds to an intermediate frozen wallet via a specific technical solution, without impacting other network states, users, or applications on Arbitrum.
Odaily Report: KuCoin officially stated that it has noticed reports circulating on social media regarding a security incident affecting multiple platforms. KuCoin was not affected, user assets remain safe, systems are operating normally, and both trading and withdrawal services are fully available.
Odaily Report: According to monitoring by SlowMist's Cosine, the Binance hacker chose the EIP-7702 mechanism on Ethereum solely for convenience of sweeping — that is, to mass-drain tokens from Binance-related hot wallets. On-chain records show that the hacker's operations were rather crude, and they conducted several hours of rehearsal and preparation before the actual theft. The EIP-7702 mechanism itself is not the problem; even without this protocol mechanism, other methods exist.
On-chain data shows that Binance 14, one of Binance's stolen hot wallets, revoked its EIP-7702 authorization at 8:10 AM Beijing Time today.
Bonk Guy posted on X stating that the Binance incident is unlikely to trigger systemic risk. Binance is reportedly generating annual revenue of approximately $16-17 billion, and nearly half of the funds involved in this incident have already been frozen or may be recovered. The amount that may ultimately be unrecoverable is approximately $3.2 billion, equivalent to about 2 to 2.5 months of Binance's revenue, which remains manageable relative to its operating scale.Bonk Guy noted that both Changpeng Zhao (CZ) and He Yi have publicly stated that user funds are safe and that all losses will be fully covered. He believes the likelihood of systemic risk and a bank run is extremely low, and that the market should be more vigilant about panic selling and media overhyping, reminding investors not to make trading decisions based on panic sentiment.
Circle CEO Jeremy Allaire stated that Circle is closely monitoring reports of a potential attack on Binance, and has coordinated with law enforcement to freeze over 800 million USDC related to the incident. Circle will continue to support the investigation.
Odaily report: According to on-chain detective Specter's monitoring, Arbitrum has frozen $30.5 million worth of ARB, and Paxos has frozen $215,700 worth of USDP, with the total frozen amount reaching $2.829 billion.
Cobo co-founder Shenyu released a video analyzing the Binance theft from an on-chain transaction perspective. At 4:20 AM, the attacker broadcast a transaction containing 50 authorization requests signed with Binance's hot wallet private key, and began batch-transferring assets approximately three minutes later. Shenyu noted that the attack utilized the EIP-7702 authorization mechanism; the attacker had prepared a transfer list covering 64 tokens in advance and conducted two test runs using a test wallet, with the final run occurring roughly 3.5 hours before the main operation. The attacker subsequently transferred assets through multiple wallets and smart contract wallets, exchanging portions of stablecoins such as USDT for ETH to evade issuer-initiated freezes.
Blockaid CEO Ido Ben-Natan stated that the preliminary assessment indicates Binance was either hacked or had its private keys "abused" due to a compromised signing infrastructure, rather than a private key leak, and noted that it is highly similar to the Bybit theft incident.
Odaily reports: According to on-chain analyst Aunt Ai, a hacker has sold off all 7.77 trillion PEPE tokens from Binance's hot wallet, exchanging them for 14,049 ETH worth over $31.9 million, at an average selling price of approximately $0.0000041, causing PEPE's price to drop 12.33%. Currently, the unrealized profit on the 11.8 trillion PEPE transferred out by Brother Sun since October 17 has shrunk to $4.45 million, with an average withdrawal price of approximately $0.000004114; last night, his unrealized profit had once reached $18.55 million.
According to CoinDesk's analysis, the hacked Binance Hot Wallet 14 was listed in Binance's October 1 Proof of Reserves; following the theft of approximately 204,500 ETH, its ETH backing ratio may drop from 100% to around 94%, with the next reserve snapshot scheduled for November 1.
According to monitoring by ZachXBT, the Arbitrum Security Council has executed a transaction to freeze approximately $30.5 million in funds from the Binance attack incident.