News linked to both this project and an event.
据记者 Eleanor Terrett（@EleanorTerrett）10 月 30 日在 X 平台转述，针对外界对币安遭黑客攻击、损失约 60 亿美元的质疑，币安发言人称客户资金未受影响，被盗资金来自交易所自有热钱包。币安表示，大部分客户资金存放于冷钱包，仅在用户提现时才转入热钱包。发言人还称，公司日常运营收益大多以加密资产形式持有并用于再投资，因此能够立即用自有资金承担此次损失。
Odaily reports: Trust Wallet stated that although the recent attacks on Polymarket and Binance did not affect Trust Wallet itself, the team conducted a comprehensive review of security defense measures this morning, including improving standard operating procedures (SOPs) and formulating a code hardening plan to address the attack risks brought by the development of AI technology. Trust Wallet said it will take every security incident in the industry seriously and learn from them. Specific measures will not be disclosed for now, but related reports may be published in the future, and the team plans to collaborate with top crypto security firms and other wallets. The team emphasized that most security hardening efforts will not be directly visible in the user experience, but are crucial for self-custodial wallets, and that security should be the top priority for all market participants at present.
According to official statements, Bitget Wallet stated that in response to the security incident at Binance today, it has immediately collaborated with Binance's security team to continuously track the flow of involved funds, including those transferred via the Bitget Wallet cross-chain bridge.
1inch stated that it has been tracking the Binance security incident and proactively reached out to Binance to provide support. Its risk management team, in collaboration with ZeroShadow, SEAL 911, TRM Labs, and other entities, has already blocked addresses associated with the attack from the 1inch dApp, 1inch Wallet, and 1inch API within the first hour after the incident, and will continue to update the list as new addresses are identified.
According to CoinDesk's analysis, the hacked Binance Hot Wallet 14 was listed in Binance's October 1 Proof of Reserves; following the theft of approximately 204,500 ETH, its ETH backing ratio may drop from 100% to around 94%, with the next reserve snapshot scheduled for November 1.
Odaily report: A wallet suspected to be associated with the Binance hack incident received tens of thousands of ETH through a Uniswap contract and borrowed 19,762 ETH on Aave using approximately $60 million in USDT as collateral. On-chain records do not show any vulnerabilities in Uniswap or Aave.As of 22:07 UTC, the two wallets held approximately 253,000 ETH, worth about $570 million, with no outgoing transfers recorded. Aave has paused the Ethereum mainnet V3 market, and Kamino has also paused borrowing in the SOL/BTC market; Ripple has frozen approximately $200 million in RLUSD, and more than $2 billion in USDT and USDC has been frozen by stablecoin issuers. (Decrypt)
Odaily Report: According to monitoring by Bitcoin News, Binance is reportedly still operating its automatic deposit sweeping function, routing newly deposited user funds into a compromised hot wallet. Attackers are reportedly continuing to move funds out of the wallet as new deposits arrive, putting user deposits at potential risk. Related advisories recommend that users avoid depositing funds until the incident is resolved.
according to Bitcoin News monitoring, attackers allegedly used EIP-7702 delegation to point the Binance Wallet to malicious code, thereby transferring funds. How the attacker obtained authorization is still under investigation, with two possibilities currently: the private key was stolen, or the attacker obtained a malicious authorization signature through a compromised signing process. Neither scenario has been confirmed. If the private key was not stolen, this attack may expose a significant vulnerability in the exchange's transaction authorization mechanism, rather than a private key security issue.
Blockaid stated that the attacker batch-submitted 50 EIP-7702 authorizations in a single transaction to hit Binance's hot wallet real-time nonce; only one succeeded, after which the wallet was subsequently upgraded to a receiving contract. The associated address also transferred out approximately $37.48 million worth of PEPE.
According to CoinDesk and security firm Blockaid, Binance's hot wallet has experienced large-scale abnormal outflows since 04:24 Beijing Time. New addresses are holding over $2 billion in assets, Binance has not yet confirmed an attack; BNB dropped approximately 6% within one hour.
According to on-chain reports, abnormal fund outflows have occurred from Binance's hot wallet, with funds flowing to newly created addresses. These addresses were initially funded via Tornado Cash, and the stolen funds are valued at over $2.5 billion.
According to an official announcement from BNB Chain, the winner list for the BNB Hack: Tokenized Edition hackathon has been announced. Co-hosted by BNB Chain and Binance Wallet, the event awarded five projects from a total prize pool of $20,000. Moi took first place, while 4lpha, Redeye, TARE, and Firstshare ranked second through fifth. Additionally, 4lpha won the Best Agentic Wallet / Wallet Skills Application award, and Firstshare won the Best BNB Agent Studio Application award.
U.S. prosecutors have indicted six members of a suspected Madagascar NFT wallet theft ring, with the FBI estimating that at least $516,700 was drained from 74 victim wallets.
According to a statement from Keystone Hardware Wallet (@KeystoneWallet), its official website was compromised on October 20 by attackers exploiting a vulnerability in third-party monitoring tools. Approximately 25,964 purchase records containing personal information, 12,873 unpaid checkout records, and device WebAuth authentication keys were accessed. Mnemonic phrases, private keys, and payment information remain unaffected. Keystone will destroy 18,835 devices containing the old keys in its inventory, suspend shipments from its official website, and transition to a pre-order system. The company also reminded users that there is no need to transfer their assets and warned them to remain vigilant against scams, including fraudulent "recall" campaigns.
CoinDCX has issued an announcement stating that it detected anomalous system activity on October 21, and subsequent investigation confirmed that the anomalous activity affected legacy wallet infrastructure that had been deprecated following the July 2025 security incident. CoinDCX stated that due to a malfunction in the automated fund sweeping service that lasted for a period of time, some user deposits mistakenly sent to old addresses were not transferred in a timely manner, ultimately resulting in a loss of 15.99 million USDT, with the related losses borne by the company.CoinDCX emphasized that existing wallets and trading systems were unaffected, user funds remain securely held in isolated cold wallets, and trading, deposit, and withdrawal services all continue to operate normally.
According to monitoring by SlowMist founder Yu Xian, users should promptly update their iPhone and iPad systems and be wary of certain installed apps that have been compromised by DarkSword. DarkSword primarily conducts targeted attacks and steals crypto assets from iPhone crypto users, exploiting iOS vulnerabilities to break out of the sandbox and steal various passwords and other private data stored in the Keychain, as well as local wallet private key files, notes, and other private data.
Onchain Lens posted on X questioning CoinDCX's so-called hack incident, stating that CoinDCX may have undisclosed fund anomalies—user deposits had flowed into a wallet that was not included in the relevant fund accounting, after which nearly equivalent funds were transferred out; some funds were also moved through less common cross-chain bridge entry points and services, indicating abnormal pathways.Onchain Lens further pointed out that some funds suspected to be related to CoinDCX hot wallets flowed through over-the-counter (OTC) services and mixing platforms, and questioned that the CoinDCX team still denied the occurrence of a security incident even after multiple researchers and on-chain investigators presented relevant evidence.
The Polkadot Community Foundation issued a security warning on the Polkadot Forum stating that versions 3.0.1, 3.0.3, 3.0.4, and 3.0.5 of the browser extension for the third-party wallet Fearless Wallet contain malicious code, which may transmit users' private keys to attacker-controlled servers when unlocking the wallet. The relevant code was added on February 19, 2025, via a code commit titled “TON ecosystem”, and was triggered intermittently from February 2025 to October 10, 2026.
On-chain investigator ZachXBT stated that FreedomXMR (FXMR), a centralized money laundering service that appeared on Hyperliquid Core (HL Core) in August 2026, had over 87% of its incoming funds directly linked to illegal activities. A review of historical inflows exceeding $10,000 revealed that over $20 million could be directly traced to ransomware, security exploits, malware, and social engineering incidents, involving multiple theft cases such as the DCENT Wallet, Fetch.ai, Axelar, and Gamdom.
The SlowMist security team discovered during an analysis of the Qubic wallet that it uses the same non-cryptographically secure random number data stream (Math.random()) for both generating the account seed and producing the dejaVu identifier values disclosed in network packet headers, potentially allowing private keys to be recovered through network observation.