【CZ says Binance faces a “second battlefield”: 1,083 accounts posted 11,700 hostile posts in 78 hours】
- - - - - - - -- - -
Content:
On November 4, Binance founder CZ reposted a lengthy article, calling it “another attack on Binance.” According to the article’s statistics, from 05:00 on October 30 to 20:00 on November 2, approximately 1,083 accounts published 11,700 hostile posts about the theft from Binance’s hot wallet over roughly 78 hours, generating about 20.93 million impressions. Replies accounted for 79.6% of the posts, and 3,354 were identified as misinformation, falling into 15 categories of rumors. The article argued that alongside the real security incident, coordinated narrative manipulation—with clear timing and division of labor—also emerged on X. Its themes shifted in response to Binance’s actions, including claims of insider involvement, insolvency, being “the next FTX,” refusing to allow withdrawals, a bank run as soon as withdrawals were reopened, and exaggerated net outflows. The article also said that, among the 641 most active accounts, 452 were linked through coordinated activity, and 444 formed a single connected network. On an average day, 89% of the sampled accounts posted about Binance no more than 0.2 times per day; during the incident, that rate rose to approximately 24.6 times the baseline. When withdrawals were restored in stages, posts urging users to withdraw immediately and warning of a bank run peaked at 11.2 per hour—the highest narrative intensity of any stage.
- - - - - - - -- - -
Content:
On November 4, Binance founder CZ reposted a lengthy article, calling it “another attack on Binance.” According to the article’s statistics, from 05:00 on October 30 to 20:00 on November 2, approximately 1,083 accounts published 11,700 hostile posts about the theft from Binance’s hot wallet over roughly 78 hours, generating about 20.93 million impressions. Replies accounted for 79.6% of the posts, and 3,354 were identified as misinformation, falling into 15 categories of rumors. The article argued that alongside the real security incident, coordinated narrative manipulation—with clear timing and division of labor—also emerged on X. Its themes shifted in response to Binance’s actions, including claims of insider involvement, insolvency, being “the next FTX,” refusing to allow withdrawals, a bank run as soon as withdrawals were reopened, and exaggerated net outflows. The article also said that, among the 641 most active accounts, 452 were linked through coordinated activity, and 444 formed a single connected network. On an average day, 89% of the sampled accounts posted about Binance no more than 0.2 times per day; during the incident, that rate rose to approximately 24.6 times the baseline. When withdrawals were restored in stages, posts urging users to withdraw immediately and warning of a bank run peaked at 11.2 per hour—the highest narrative intensity of any stage.