Live updates: promos, term changes, new challenges, payouts.
Late in the evening on October 29, about $6.3-6.4 billion across 10 blockchains was withdrawn from Binance's hot wallets (network-connected storage from which client payouts are made). This is the largest theft in the industry's history - roughly four times larger than the $1.5 billion Bybit hack in February 2025.
The attacker who withdrew about $3 billion from Binance sold off seven tokens for $158.25 million and used all the proceeds to buy 70,480 ETH. About $2.86 billion remains under his control, while issuers managed to freeze another roughly $2.69 billion.
Binance co-CEO Richard Teng stated that no traces of a private key leak (secret access codes to wallets) were found. At the same time, 11 keys of the exchange's hot wallets (wallets connected to the network for fast payouts) signed transfers to the attacker's address. Withdrawals from the exchange are still halted.
Analytics firm TRM Labs linked the Binance hack "with high confidence" to the TraderTraitor group - the FBI's name for North Korean state hackers, who are classified as part of the Lazarus Group. This is four times more than the $1.5 billion stolen from Bybit in February 2025.
Overnight on October 30, about $6.3 billion left Binance's hot wallets (exchange storage connected to the network for fast withdrawals) - the largest theft in crypto history, four times larger than the $1.5 billion Bybit hack in February 2025.
On the evening of October 29, the largest prediction platform Polymarket switched the exchange to cancel-only mode. Through a compromised third-party contractor, approximately $2.65 million drained from user accounts in a matter of minutes.
Indonesia's largest crypto exchange Indodax has suspended all deposit and withdrawal operations. The reason is a sharp increase in the number of cyberattacks on the platform. The announcement was made on October 29 at around 15:15-15:25 Moscow time.
GMO Internet's cloud hosting, where traders keep MetaTrader terminals and trading robots, was hacked. Broker OANDA Securities Japan postponed client payouts on October 22 to check applications for fraudulent transfers.
