News linked to both this project and an event.
Whale Alert detected approximately 349 million USDT transferred from an unknown wallet to Binance, worth around $348 million.
According to Whale Alert, Tether Treasury transferred 299,999,900 USDT worth approximately $300 million to unknown wallets.
Galaxy Research Head Alex Thorn posted that the USDT-adjusted discount of Bitcoin on Coinbase relative to Binance has widened to its largest level this year. However, Binance's earlier suspension of withdrawals restricted cross-platform arbitrage activity, making it difficult for this spread to accurately reflect genuine demand signals from the U.S. market. With Binance having resumed withdrawals, it is worth watching whether the spread between the two major exchanges will gradually narrow going forward.
Whale Alert monitoring data shows that 143,905,015 USDT were transferred from Bitfinex to Tether Treasury, valued at approximately $144 million.
Binance has restored ZEC withdrawals on the ZEC network, USDT and GRAM on the TON network, and SUI withdrawals on the SUI network.
Binance has resumed withdrawals for POL, USDT, and USDC on the Polygon network, and for AVAX, USDT, and USDC on the Avalanche C-Chain.
Binance has resumed withdrawals for SOL, USDT, and USDC on the Solana network, and will continue to progressively restore support for additional assets and networks.
Whale Alert monitoring shows that approximately 253 million USDT were transferred from an unknown wallet to another unknown wallet on the Solana network, valued at approximately $253 million.
Binance has resumed withdrawals of ARB, ETH, USDT, and USDC on the Arbitrum network, and TRX and USDT on the TRX network.
according to an official announcement, Binance has resumed DOGE withdrawals on the DOGE network, as well as ETH, USDT, and USDC withdrawals on the OP (Optimism) network.Previously, Binance had already resumed withdrawal services for the Bitcoin network, USDC, USDT, and ETH on the Ethereum network, USDC, USDT, and BNB on BNB Smart Chain (BSC), XRP on the XRP network, as well as ETH and USDC on the Base network.
Binance has resumed withdrawals for USDC, USDT, and ETH on the Ethereum network, and USDC, USDT, and BNB on the BSC network.
According to Whale Alert monitoring, at 08:46 Beijing Time, approximately 223 million USDT (about $222 million) were transferred from Bitfinex to Tether Treasury.
Odaily report: Analysts from three Wall Street firms—Cantor Fitzgerald, TD Cowen, and Compass Point—all believe that despite Binance suffering an approximately $6.3 billion hack, there is currently insufficient evidence to suggest the incident will threaten the broader crypto market, and the market's prior recovery trend is unlikely to be interrupted as a result.Cantor Fitzgerald analyst Ramsey El-Assal noted that Tether has frozen over $1.5 billion in stolen assets, Circle has frozen approximately $800 million, and Ripple has frozen about $200 million, with Binance stating that the total frozen stolen funds currently amount to roughly $3 billion. He believes the crypto industry is gradually improving its ability to respond to such security incidents and expects crypto-related stocks such as Coinbase, Robinhood, and Strategy to rebound once market panic subsides, recommending that investors buy on the dip.TD Cowen analyst Lance Vitanza believes the attack exposed security weaknesses in Binance's own transaction signing infrastructure rather than flaws in the underlying technology of cryptocurrencies like Bitcoin, and that the market sell-off may present an opportunity to accumulate Bitcoin and shares of listed companies holding Bitcoin.Compass Point analysts believe Binance has sufficient liquidity to cover the funding gap, and expect its excess USDT reserves, BTC reserves, and USDC funds to be adequate to absorb the losses. However, the firm also warned that Binance compensating customers could put pressure on stablecoin supply and may drive users to migrate from centralized exchanges to competing platforms such as Coinbase, Bullish, and Hyperliquid. (CoinDesk)
Odaily report: Crypto analyst Darkfost posted that although Binance yesterday suffered an attack suspected to be linked to the North Korean hacker group Lazarus Group, with losses of approximately $6.3 billion—the largest theft in crypto industry history—the platform's reserve assets only declined modestly, and the impact on users appears limited.Data shows that during the attack, Binance saw outflows of 18,279 BTC, 185 million XRP, and $1.67 billion USDT at one point; ETH flowed out in two batches, totaling 246,840 coins (167,464 and 79,376 respectively). Based on same-day reserve changes, BTC reserves fell 3.1% to over 682,000 coins, ETH dropped 8.5% to 3.3 million coins, XRP declined 8% to 2.47 billion coins, and USDT decreased 6.3% to $34.1 billion.Additionally, Binance stated it has frozen approximately $3 billion in related assets, including $1.567 billion USDT and over $800 million USDC, and pledged to absorb losses through the SAFU fund and company reserves. Darkfost believes the magnitude of change in Binance's reserve assets indicates the platform still possesses a certain capacity to absorb shocks.
Odaily reports: Some market observers suggest that following the approximately $6.3 billion hack on Binance, project teams, VCs, and associated wallets may temporarily hold off on selling their altcoin holdings. In the coming days, funds, insiders, and project-affiliated wallets may exercise greater caution before selling tokens into the market to avoid further exacerbating selling pressure.Blockchain analytics firms TRM Labs and Chainalysis have both attributed the attack to North Korea with high confidence. Binance has committed to covering user losses through its protection fund and company resources, and approximately $3 billion in stolen assets have been located, with about half frozen through stablecoin issuers such as Tether and Circle. Market analysts note that the incident has once again sparked discussions around the security of centralized trading platforms, the freezing capabilities of stablecoins, and the difficulty of tracking decentralized assets. (zerohedge)
CoinDCX stated that platform futures trading has resumed normal operations across all markets. However, as a precaution, trading for SOPH, ERA, GTC, and LA remains in Reduce-Only mode for INR and USDT trading pairs. CoinDCX noted that, in light of the earlier incident involving global liquidity providers, the platform's risk management team will continue to monitor these tokens to guard against potential market manipulation and abnormal volatility.
Odaily reports: According to on-chain analyst Ai Yi's monitoring, trader 58bro.eth (@0x58bro, 0xc24...FE8d) sold 8,000 ETH in the past hour. After redeeming over $17.96 million worth of ETH from Aave, the trader deposited ETH to OKX in batches and has so far withdrawn 10.5 million USDT to repay loans; 4,911.05 WETH remains staked in Aave with 2.51 million USDT borrowed, and the health rate is 3.69.
Odaily reports: An empirical study presented at USENIX Security 2026 shows that among the approximately 3.66 million early EIP-7702 authorization transactions across seven chains, about 63% were associated with malicious contracts; confirmed losses exceed $2.3 million, and 924 malicious contracts were identified. Most attacks use phishing to trick users into signing authorizations that delegate their wallets to sweeper contracts. On-chain analysis shows that in today's anomalous outflow event from Binance hot wallets, attackers exploited EIP-7702 authorizations signed by hot wallets including Binance 14 to delegate accounts to pre-deployed malicious sweeper contracts, then transferred assets in bulk within minutes. Estimates from multiple parties put the scale in the billions of dollars, and Tether, Circle, and others have frozen some stablecoins. This incident aligns with the risks identified in the research: whether through private key leakage or abuse of signing systems, once attackers obtain a legitimate authorization signature, EIP-7702 grants them persistent execution control over the account until the authorization is revoked.
Odaily Report: Derek Chiang, founder of ZeroDev and a developer involved with EIP-7702, posted on X stating that first, to be clear — EIP-7702 itself has no vulnerability. If you are using a wallet that supports EIP-7702 (MetaMask, Uniswap, Ambire, etc.), please do not panic.EIP-7702 is an Account Abstraction improvement proposal that allows externally owned accounts (EOAs) to sign a special message called a "7702 authorization," thereby embedding a smart contract into that account. This enables accounts to achieve powerful functionality, such as transaction batching — combining "authorization" and "transfer" into a single transaction, allowing you to complete a swap on Uniswap with just one click.Unfortunately, the same feature also allows hackers to efficiently transfer all your tokens in a single transaction. In the Binance hack incident, the hacker moved ETH, USDT, and 62 other tokens in one transaction, whereas without EIP-7702, they would have needed to send a separate transaction for each token. In this particular incident, many such transactions would have failed anyway, because Binance was still using the compromised wallet for withdrawals at the time, so all transactions sent by the hacker had to compete with legitimate transactions for Nonce (transaction sequence number). Therefore, using EIP-7702 did help the hacker steal funds as quickly and as extensively as possible.However, for the hacker to use EIP-7702, one of the following conditions must have been met: first, they obtained the private key; second, they tricked Binance into signing a 7702 authorization — the latter is highly unlikely, as it is hard to imagine Binance exposing an endpoint used for signing 7702 authorizations (or worse, signing raw messages that could be repackaged by the hacker for 7702 authorization). But until the official postmortem report is released, this possibility cannot be completely ruled out.Derek Chiang added: "As one of the contributors to account abstraction, I feel somewhat responsible for this hack incident, because while giving accounts more powerful functionality, we have indeed also given hackers stronger capabilities."
Odaily reports: Smart contract developer Justin Kalland posted on X that the Binance hacker appears to have made a potential mistake, and MetaMask should retain as much of any Web2 logs as they can obtain.Specifically, the hacker sent 175 million USDT to a new wallet, and about 2.5 minutes later, that wallet also received 2 ETH. This was likely used to pay for Gas fees, consistent with the pattern used by their other attack wallets.Exactly two minutes after that, the wallet used MetaMask's Gas Station service, even though it already had Gas fees at the time. Three consecutive transactions landed in the same block — an ETH top-up from Gas Station, an infinite USDT approval to the Kyber Network router, and a payment of 127.67 USDT to Gas Station. The amount of the ETH top-up exactly matched the combined maximum Gas budget of the Kyber approval and the USDT payment. Accurate down to wei (the smallest Ethereum unit).But the problem is that the ETH they had at the time was already fully sufficient to cover both fees, so a reasonable speculation is that they were using a MetaMask wallet at the time and, due to haste, mistakenly selected USDT to pay for Gas fees. For convenience, MetaMask sometimes defaults to this method, and the order of top-ups within the same block also matches how its implementation mechanism works.To use Gas Station in MetaMask, users must use MetaMask Sentinel. This means the transactions were broadcast through them, rather than through a regular RPC. This interaction likely left off-chain records at MetaMask, which may include IP metadata.Among all the attacker's wallets that have been checked, this is the only wallet showing use of Gas Station, and the wallet address is: 0xAa246BF639586a6Ba46762D378CE50cA4fc654a0.