Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Binance

crypto exchange · Global (ADGM-licensed group; users worldwide)

ConfirmedOperations recoveringContainment not confirmed

What happened

Hot wallet signing path: about USD 6.3B (Binance) to 6.43B (Elliptic) withdrawn by the attacker across BTC, ETH, Tron, SOL, XRP, NEAR and others.

45 hour withdrawal halt for all users; phased reopening since 1 Nov; customers have moved several billion dollars off the venue; about USD 3B of stolen stablecoins frozen by issuers; attacker repositioning XRP and selling SOL.

Confirmed affected parties

  • Stablecoin issuers froze about USD 2.4B to 3B (Tether, Circle more than 1.1B USDC, others)
  • Withdrawal halt to all Binance users 29 Oct to 1 Nov

What remains unknown

  • Root cause and full post-mortem (unpublished)
  • Phase two networks and start time on 3 Nov
  • Reserve ratios and liabilities (ZK proof gives inclusion and 1:1 claims only)
  • Whether any frozen funds will be returned
  • Exact FBI alert text (primary unreachable)

Losses: USD 6.3B stolen (Binance); about 95% replenished from company funds (Binance claim); none recovered from the attacker

Capital around this company

  • Listed investor
    MGX Fund Management Limited
    Investor portfolio page

    The investor's portfolio page lists the company; current status is not stated. A portfolio listing is not a disclosed stake size or control position.

Sources

  1. Binance Security Incident Recovery Update #5 (baseline) · 2026-11-02 12:45 (zone not shown)
  2. Binance announcement list, category 161 (newest security item Recovery Update #5, 2 Nov) · 2026-11-02
  3. DefiLlama Binance CEX tracked reserves API (latest point 2026-11-02T19:29Z) · live; latest point 2026-11-02T19:29Z
  4. Binance completes latest proof of reserves as it works to restore assets, withdrawals after record hack (The Block) · 2026-11-02T16:52Z (11:52 EST)
  5. Binance on X: withdrawals restored for Ethereum (USDC, USDT, ETH) and BSC (USDC, USDT, BNB) · 2026-11-01
  6. Binance sees $3.64 billion in net outflows as withdrawals resume (CNBC, baseline) · 2026-11-02T05:09Z (updated)
  7. CoinDesk live updates: Binance records USD 6 billion outflows after starting withdrawals (baseline) · 2026-11-02
  8. mempool.space address checks for Elliptic-listed BTC addresses (baseline) · live
  9. XRPSCAN: attacker XRP account and six child accounts (baseline) · live
  10. Solana RPC: attacker SOL holders (baseline) · live
  11. FBI cyber alert: North Korea Responsible for USD 6 Billion Binance Attack (second attempt, HTTP 403) · 2026-10-31
  12. Web search: Binance root cause post-mortem (none published; latest coverage BleepingComputer DevOps laptop, Decrypt additional breach points) · 2026-10-29 to 2026-10-30

Does Binance touch your portfolio?

We map a company or a whole book against verified incidents: the lenders, owners and providers around each holding, with what is confirmed and what is not.

Request an exposure check