x

Crypto KOL Kuai Dong (entered the industry in 2016) stated that on-chain tracker ZachXBT speculated that the party responsible for the attack on Binance and the theft of $5.875 billion is the Lazarus Group, which is under the Reconnaissance General Bureau of the Korean People's Army.Kuai Dong also listed past theft results related to this organization, including approximately $300 million from Japan's DMM exchange, about $230 million from India's WazirX exchange, around $1.5 billion from Bybit, approximately $292 million from the on-chain protocol Kelp DAO, and about $380 million from Bitget.He also mentioned that Binance has recovered about half of the assets, but the recovery of Bitcoin, Ethereum, and others is more challenging, and stated that the hackers' ultimate goal is to funnel the assets into North Korea. ZachXBT responded in related discussions that this incident is likely related to the North Korean Lazarus Group. Public information shows that around October 30, there was a massive outflow of assets from Binance's hot wallets, with cross-chain statistics estimating between $5.5 billion to $6.2 billion. Zhao Changpeng stated that it indeed looked like they were hacked and mentioned that the actual net loss might be slightly above $1 billion, but they would cover the full amount.

According to the real-time display of "Customer Assets" on the Binance official homepage, the total assets of Binance customers are approximately $129.404 billion. Additionally, according to the information on the official page of Binance's proof of reserves, as of October 1, 2026, the reserve ratio of major assets is not less than 100%.Among them, the BTC reserve ratio is 100.35%, with a net account balance of 688,572.68 BTC and an on-chain wallet balance of 691,003.593 BTC; the ETH reserve ratio is 100.00%, with a net account balance of 3,799,136.43 ETH and an on-chain wallet balance of 3,799,139.752 ETH. The USDT reserve ratio is 103.88%, with a net account balance of approximately 32.028 billion and an on-chain wallet balance of approximately 33.271 billion; the USDC reserve ratio is 108.26%, with a net account balance of approximately 7.178 billion and an on-chain wallet balance of approximately 7.771 billion. The reserve ratios for BNB, SOL, and XRP are 100.47%, 100.00%, and 100.77%, respectively.Based on the current price, the total net balance is approximately $133.6 billion, and the total on-chain wallet balance is approximately $135.8 billion. Binance explains that the proof of reserves covers the custodial user assets, and the excess portion does not represent the total amount of the company's own assets; the "Customer Assets" on the official homepage is another display metric and is not the same summary table as the proof of reserves snapshot disclosed by asset type.

Binance released preliminary investigation results on its official X account, stating that the security incident may involve the laptop of a DevOps engineer being compromised. The attacker used this to access the service container and submitted unauthorized withdrawal transactions. Binance stated that there is currently no evidence of wallet private key leakage and will publish a detailed technical review after the investigation is complete and the facts are fully verified.Binance estimated the total impact of the incident to be approximately $6.3 billion. The platform has frozen related assets in collaboration with blockchain partners, with about $3 billion currently frozen on-chain. Binance stated that it will cover all losses through the SAFU fund and company funds, ensuring user fund safety, and will release updated proof of reserves after the resolution is complete.As an immediate measure, Binance has suspended deposits and withdrawals until security checks are completed, revoked the authorization of affected addresses, and has contacted law enforcement and blockchain intelligence partners to track and recover funds. Binance stated that the team is working with law enforcement partners to confirm the identities of the relevant individuals and reminds users to obtain updates only through official channels.

The founder of Liebit Mining Pool, Jiang Zhuoer, posted on platform X stating that Binance's potential losses account for a limited proportion of user assets and are not expected to trigger a large-scale withdrawal wave.He compared this situation to the Bybit theft incident in February 2025. At that time, Bybit was hacked for approximately $1.46 billion, which accounted for 9.01% of its roughly $16.2 billion in user assets. If Binance's gross outflow this time is $5.64 billion, of which $3 billion has been frozen, the remaining amount is about $2.64 billion, accounting for 1.6% of its approximately $165.12 billion in user assets.Jiang Zhuoer also mentioned that the gross outflow may include internal fund transfers within the platform and normal user withdrawals, and not all of it should be considered stolen funds. Binance has the capacity to absorb the related losses.

On October 27, the Enforcement Directorate (ED) Bangalore branch conducted searches at three locations in Bangalore and one location in Madhya Pradesh under the Foreign Exchange Management Act (FEMA), investigating unauthorized cross-border cryptocurrency fund transfers involving amounts exceeding 50 billion rupees (approximately 525 million USD).The investigation involves platforms such as Mudrex, Saber.money, and Instadapp (associated with Fluid). The ED's preliminary investigation found that the entities in question are suspected of using offshore tax havens to set up shell companies, bypassing the cross-border remittance channels authorized by the Reserve Bank of India (RBI) through stablecoins (especially USDT, USDC) and large-scale over-the-counter transactions.Among them, the relevant entities conducted cryptocurrency trading through offshore exchanges such as Binance, Bybit, and Huobi, and transferred funds abroad. The ED's preliminary investigation found that the amount allegedly violated by the entities related to Instadapp is approximately 40 million USD.

According to on-chain analyst Specter, First Digital has blacklisted the attacker address holding approximately 3.4 million FDUSD.

According to crypto journalist Eleanor Terrett, in response to reports that a Nasdaq representative allegedly discouraged listed companies from tokenizing stocks through the OKX/ICE TSV program, a Nasdaq spokesperson declined to comment.Nasdaq reiterated that it does not plan to participate in trading platforms operating under the SEC's innovation exemption, believing this is not the best path for stock tokenization. Meanwhile, Nasdaq will continue to promote the issuer-centric Nasdaq Equity Token model, planning to achieve stock tokenization within the existing market framework.

According to SoSoValue data, yesterday (Eastern Time October 29), the total net inflow of XRP spot ETF was $8.4316 million.The XRP spot ETF with the highest net inflow yesterday was Franklin XRP ETF (XRPZ), with a net inflow of $5.5679 million for the day, bringing its historical total net inflow to $524 million. The second was Bitwise XRP ETF (XRP), with a net inflow of $2.8636 million for the day, bringing its historical total net inflow to $682 million.As of the time of writing, the total net asset value of XRP spot ETFs is $1.465 billion, with an XRP net asset ratio of 0%, and the historical cumulative net inflow has reached $1.809 billion.

According to BBX data, the global capital markets disclosed the latest developments yesterday regarding the issuance of digital asset ETFs, AI node operations, and treasury clearing. The core information is as follows:Franklin Templeton launched two "Dividend Reinvestment Bitcoin" ETFs, listed on Nasdaq: Asset management giant Franklin Templeton announced the official launch of two innovative fund products, the Franklin U.S. Equity Bitcoin DRIP Index ETF (FBEQ) and the Franklin U.S. Innovation Bitcoin DRIP Index ETF (FIBT). Both ETFs have an initial asset allocation set at 95% stocks and 5% Bitcoin, with the core mechanism being the systematic reinvestment of dividends generated from the underlying stocks into Bitcoin. The index will be re-evaluated quarterly to ensure Bitcoin maintains its minor allocation weight. Among them, FBEQ covers approximately 500 of the largest U.S. companies by market capitalization, with a management fee rate of 0.09%; FIBT focuses on covering 100 large non-financial companies listed on Nasdaq, with a fee rate of 0.19%.KR1 purchased and staked 5,000 TAO, entering the decentralized AI infrastructure of Bittensor: London Stock Exchange-listed company KR1 announced that it has officially launched infrastructure operations on the decentralized AI network Bittensor. The company recently purchased and staked 5,000 TAO in the secondary market, supporting network validators to earn mining rewards. KR1 disclosed that, based on the network reward rate as of October 28, the annualized infrastructure income from this deployment is approximately 6.6% of its current total TAO holdings. In the future, KR1 will regularly disclose the scale of its TAO holdings and related node income in its monthly unaudited update reports.Ruihe Smart Technology sold 38.76 Bitcoins, cashing out over 3.12 million dollars to supplement working capital: Hong Kong-listed company Ruihe Smart Technology issued an official announcement stating that the company recently sold 38.76 Bitcoins held on its balance sheet in the open market. Excluding related transaction costs, the total value of this asset liquidation is approximately 3.1219 million dollars. The company clearly stated that the proceeds from this sale of crypto assets will be used as general working capital for the company.

According to crypto journalist Eleanor Terrett, in response to claims that a Nasdaq representative attempted to dissuade listed companies from tokenizing stocks through OKXICE's TSV program, a Nasdaq spokesperson declined to comment.Nasdaq reiterated that it does not plan to participate in a trading platform operating under the SEC's innovation exemption, believing that this is not the best path to achieve tokenization. It will continue to promote a Nasdaq equity token model centered around issuers, achieving tokenization within the existing market framework.

According to monitoring by Lookonchain, a whale holding a long position of 93,184 ETH (worth approximately 214 million USD) has closed 36,517 ETH (worth approximately 80.56 million USD) to avoid liquidation, and currently still holds a long position of 56,667 ETH, worth approximately 125 million USD.After reducing the position, its liquidation prices have been adjusted to 2122.44 USD and 2129.72 USD. The whale has accumulated losses exceeding 38 million USD.

According to Lookonchain monitoring, a certain whale holding 93,184 ETH long positions closed 36,517 ETH, worth 80.56 million USD, to avoid liquidation. They still hold 56,667 ETH long positions, worth 125 million USD.Their new liquidation prices are 2,122.44 USD and 2,129.72 USD, with cumulative losses exceeding 38 million USD.

According to on-chain analyst Ai Yi's monitoring, the hacker-associated address of the Web3 social platform UXLINK opened a long position of 30,282.4 ETH on the decentralized perpetual contract platform Hyperliquid, with unrealized profits reaching 7.422 million USD earlier this morning.The monitoring indicates that the Binance hacking incident has put pressure on ETH, causing the unrealized profits of this long position to narrow to 2.45 million USD, with nearly 5 million USD in potential profits being given back.

According to Lookonchain monitoring, after the Binance hacking incident, trader 0x8add shorted 22,047 ETH (48.89 million USD) and 620.7 BTC (47.89 million USD) at the highest leverage, currently realizing a floating profit of 2.29 million USD.

The Binance attacker has completed the sale of 7 tokens including UNI, ENA, PEPE, LINK, AAVE, ONDO, and WLD, exchanging a total of 70,480 ETH, worth approximately 158.25 million USD.Among them, 7.02 million UNI were sold, worth 39.63 million USD; 217.5 million ENA, worth 33.93 million USD; 7.77 trillion PEPE, worth 31.66 million USD; 2.57 million LINK, worth 26.05 million USD; 127,953 AAVE, worth 14.27 million USD; 21.85 million ONDO, worth 6.62 million USD; and 17.32 million WLD, worth 6.09 million USD.

During the attack on Binance, arbitrage opportunities appeared on-chain. A community user reviewed that the attacker, in order to avoid Tether's freeze, exchanged a large amount of USDT for ETH through DEX, causing the price of ETH on Uniswap to rise to between $2560 and $2750, with some transactions exceeding $3000, while the ETH price obtained through Chainlink oracles on Aave remained between $2250 and $2290, resulting in a price difference of 15% to 30% between on-chain and oracle prices, lasting nearly an hour.Arbitrageurs took advantage of this price difference by depositing USDC/USDT as collateral on Aave, borrowing ETH at the oracle price, and then selling it at a high price on DEX. After the price difference narrowed, they bought back ETH to repay the loan. According to the user's statistics, within 6 hours after the incident, a total of 61 addresses borrowed ETH on the Aave mainnet (excluding hacker addresses), with the address that profited the most selling 12,289 ETH at an average price of about $2580, and then buying back 12,314 ETH at an average price of about $2297, making a profit of about $3.47 million. The top ten arbitrage addresses collectively made a profit of about $6.36 million.The user stated that the arbitrageurs exploited the price disconnection between centralized exchanges and DEX, and there was no vulnerability in the Aave contract itself. As DEX prices fell and Aave froze the mainnet V3 market, the arbitrage window gradually closed. The aforementioned profits are based on on-chain statistics and have not yet deducted Gas fees.

Binance updated that the current total verified frozen amount is approximately 3 billion USD. The team is continuing to collaborate with law enforcement, issuers, on-chain intelligence agencies, and industry partners to track and freeze more assets, and stated that only confirmed data will be published. Previously, the official announcement stated that the verified frozen amount was 2.54 billion USD.