Hacks involving hundreds of millions, even billions of dollars, are revealing a notable common thread: ETH keeps appearing in post-hack fund flows.
• Bybit: approximately $1.5 billion was stolen. • KelpDAO: the hacker used rsETH as collateral to borrow WETH on Aave. • Binance: the FBI confirmed that the hacker converted the stolen assets primarily into ETH to launder them through DeFi.
USDT and USDC $XRP can be frozen. Native ETH has no similar freeze mechanism.
HACKERS ALWAYS TARGET $ETH ?
Is this the dark side of decentralized financial freedom?
Fellow Binancians, Binance is preparing to resume phase one of withdrawals on 2026-11-01 between 06:00 and 09:00 (UTC). Since the incident, our teams have taken precautionary measures to safeguard the platform, conducted security assessments, and worked to verify the readiness of affected services. We aim to restore withdrawals progressively as we complete security and readiness checks. Deposit services remain open and are not affected by the incident. We understand the concern and disruption the suspension has caused. Restoring access to your funds is a priority, and we are taking a controlled approach to do so safely. We will continue to monitor closely as services return in phases. As we have said throughout this incident: user funds remain safe. Binance will absorb the financial impact of the stolen funds, not our users. Withdrawal Services Resuming in Phases The rollout will be in phases. Phase one will include the following networks and assets which are available for withdrawals progressively. We will share updates via our official X channel. NetworkAsset(s)BTCBTCETHETH, USDT, USDCBSCBNB, USDT, USDCTRXTRX, USDTSOLSOL, USDT, USDCXRPXRPZECZECDOGEDOGETONUSDT, GRAMMATIC (Polygon)POL, USDT, USDCAVAXCAVAX, USDT, USDCARBITRUMETH, USDT, USDC, ARBBASEETH, USDCOP (Optimism)ETH, USDT, USDCSUISUI We are taking a phased approach by prioritizing tokens based on the past week data of user demand, so that each network and asset pair can be restored carefully, with stability and security checks completed before access is reopened. These listed networks and assets above will become available when this first phase of withdrawals resumes, and additional networks and assets will be added once they are ready. Please check the withdrawal page for your selected asset and network, or visit our network status page, to confirm availability. During the initial rollout, users may experience temporary delays or longer processing times due to traffic volume. If a withdrawal for a network or tokens listed above doesn’t go through, you can try again after a short while. This is expected during a phased rollout. We will continue to monitor network and platform performance closely. Why Withdrawals Were Temporarily Paused at the Earlier Stages of the Security Incident Withdrawals were temporarily suspended as a precaution while our teams worked to contain the incident loss, assess its impact, restore affected services, and complete security checks. We did not take this decision lightly. We understand how important reliable access to withdrawals is for our users. However, our priority was to protect users, safeguard the platform, and complete the necessary security checks before restoring services. During this period, our teams have: Conducting enhanced security reviews of affected services;Assessing withdrawal infrastructure and verifying its operational readiness;Working with law enforcement and industry partners to trace and recover stolen funds;Replenishing affected assets using company resources;Monitoring for residual risks. Our recovery commitment remains unchanged. As shared in our previous update, Binance had already covered approximately 90% of the impacted amount, up from approximately 80% in the prior update. All BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC balances are fully backed 100%. You can verify our proof of reserves snapshot on the PoR website. We continue purchasing the remaining affected assets through market and OTC channels. Binance has now covered approximately 95% of the impacted amount, up from 90% in our prior update. The outstanding 5% are tokens outside the top ten listed above, and are less liquid in the market and take longer time to source at the required scale. To Our Users, Partners, and the Broader Industry We recognize how difficult this period has been for our users and the broader Binance community. Thank you for your patience, understanding, and continued trust as our teams worked through this incident with the seriousness it required. We also thank our industry partners for acting quickly to help freeze assets and trace stolen funds. We will continue working closely with them and with law enforcement to support recovery efforts and hold those responsible accountable. Once the investigation is complete, we will publish a post-incident report with further details on the incident. Resuming withdrawals is a major milestone, but our work continues. We will continue strengthening our safeguards, completing the recovery process, and providing updates as progress continues. Our commitment remains unchanged: Binance will bear the financial impact of the stolen funds. These losses will not be passed on to users. Thank you for being part of the Binance community. Thank you for your support! Binance Team 2026-11-01
The crypto market can sometimes be even scarier than Halloween. Some coins transform into growth monsters, while others turn your portfolio into a graveyard. 💀
Who summoned the money this week? And who got spooked out of the market?
The platform handled this even better than the textbook. Hope it gets through this ordeal. $BNB
Binance Vietnam
·
--
Update on the recovery process
Binance will use its own funds to ensure affected users’ assets are protected immediately. We publicly committed to this in our previous announcement, and are now beginning to recover affected assets for users.
At the same time, we continue to work with law enforcement agencies, issuers, blockchain intelligence firms, and industry partners to trace, freeze, and recover additional assets.
Specifically, Binance has allocated more than $6.34 billion in corporate resources to address this incident. Of that amount, $5 billion is already available in the exact types of affected tokens. The remaining amount is being purchased through market and OTC channels to ensure we have enough of each corresponding token and can cover any asset shortfalls. This step may take longer, as some tokens have low liquidity and OTC settlements also take time. We will share progress updates as soon as possible.
The figures above do not include assets that have been frozen or secured, as these are still being recovered and verified. So far, $3 billion has been frozen, thanks to our industry partners. We are working with our partners and law enforcement agencies to recover these frozen assets.
We will continue to use corporate resources to cover confirmed shortfalls and will provide further verified updates as the recovery progresses. Ultimately, all user assets will be publicly verified through our Proof of Reserves.
North Korean hackers—the nightmare of the crypto world. ☠️
From Ronin and Bybit to the suspicions surrounding Binance, the name Lazarus keeps surfacing in thefts worth hundreds of millions, even billions, of dollars.
The scariest part is that they don’t need to bring down a blockchain. They only need to find one weak link, and billions of dollars can vanish.
Crypto is decentralized, but hackers have no borders either.
Is there any exchange that’s truly immune? 🔥 $BTC $ETH $XRP