FacebookTwitterLinkedInTelegramCopy LinkEmail
Crime

Binance Founder CZ Confirms Hack – User Funds “Safe”

Binance Founder CZ Confirms Hack – User Funds “Safe”

Binance co-founder Changpeng Zhao said the large outflows from Binance wallets look like a hack, as Tether and Circle froze about $1.8 billion in stablecoins tied to the transfers.

Key Takeaways

  • CZ says outflows look like a Binance hack.
  • Tether froze ~$971M, Circle about $823M.
  • CZ expects user funds to be fully covered.
  • Binance says no confirmed impact to user funds.

Zhao wrote on X at about 21:16 UTC that “user funds are safe” and that “it does look like a hack on Binance,” thanking Tether and Circle for freezing roughly $971 million and $823 million respectively.

Two messages, one minute apart

Zhao added that he no longer manages Binance.com, but that as a shareholder he expects all user funds to be fully covered. That is his expectation, not a commitment from the exchange.

Binance’s own account was more cautious. In a statement posted at about the same time, the exchange said its teams were aware of reports of a potential security issue and were investigating, and that “at this stage, we have not confirmed any impact to user funds.” It said updates would come through official Binance channels once information was verified, and warned users to be wary of scams and unofficial requests for account information.

So the exchange’s founder calls it a likely hack, while the exchange itself has not yet confirmed one. Binance has covered past losses from its Secure Asset Fund for Users, or SAFU, an emergency reserve set up in 2018, but has not said whether it will draw on it.

How much is frozen, and how much isn’t

~$971M

USDT frozen by Tether

~$823M

USDC frozen by Circle

~$2.77B

total outflows first reported

Together the two freezes cover about $1.79 billion, roughly two-thirds of the $2.77 billion in outflows reported across five blockchains. Stablecoin issuers can freeze their own tokens. They cannot freeze ETH or BTC, so the roughly 195,000 ETH sent to the flagged Ethereum address and the about 16,700 BTC that left Binance wallets are outside those freezes.

Circle’s roughly $823 million figure is also larger than the single 780 million USDC transfer from Binance’s Hot Wallet 34 seen on Etherscan, which suggests more USDC was involved than that one transaction.

The next details to watch are Binance’s findings on the cause and scale of the incident, whether withdrawals stay open, and how the exchange plans to cover any losses.

Update, about 21:29 UTC

Tether has now frozen $1.5 billion in USDT linked to the suspected Binance hack, Paolo Ardoino reported, up from about $971 million earlier in the evening. Together with Circle’s roughly $823 million, stablecoin freezes now total about $2.3 billion.

Update, about 21:36 UTC

Trader Michaël van de Poppe put the total Binance exploit at $5.5 billion, about double the $2.77 billion first reported, and said Tether had frozen more than $2.25 billion and Circle more than $700 million. He did not cite a source for the figures, and Binance has not confirmed the size of any loss.

Update, about 21:42 UTC

Watcher.Guru reported a total of more than $5.6 billion taken from Binance and called it the largest hack in crypto history. Its breakdown:

$1.57B USDT · $1.45B BTC · $875M ETH · $823M USDC · $234M TRX · $88.5M RLUSD · $75M WBETH · $50M XAUT · $447.5M in other tokens

If accurate, that would be well above the roughly $1.5 billion taken from Bybit in February 2025, the largest crypto hack on record so far. Binance has not confirmed the size of any loss, and Watcher.Guru did not cite a source for the breakdown. Its USDT and USDC figures roughly match the amounts Tether and Circle have frozen, which would leave most of the stablecoin portion locked.

Update, about 21:42 UTC

Binance.US said it is not affected by what it called “the reported Binance.com security incident.” The US exchange said it is a separate, independent platform, and that customer funds and services are secure and operating normally.

Update, about 22:02 UTC

On-chain analyst Darkfost said the exploit was still ongoing, with $38.55 million in PEPE moved alongside LINK, UNI, ENA, COMP, AAVE, QNT, SHIB, ONDO, PENDLE, IMX, MORPHO and other tokens. His running tally of assets moved out of Binance by chain:

Ethereum $3.528B · Bitcoin $1.449B · Tron $628M · Arbitrum, Optimism and Base $38M combined

That adds up to about $5.64 billion, in line with the $5.5 to $5.6 billion totals reported earlier, though Darkfost noted the figures were changing rapidly. Binance has not confirmed the size of any loss.

Update, about 22:23 UTC

Binance has disabled withdrawals. Co-founder Yi He wrote on X that withdrawals are “currently disabled until the environment is confirmed to be secure,” and repeated that user funds are SAFU, Binance’s shorthand for its user protection fund.

She also thanked more issuers for freezes. Ripple froze approximately 200 million, she said, without naming the asset, and World Liberty Financial froze $27 million in its USD1 stablecoin and 48 million WLFI tokens, worth about $2 million.


This is a developing story. Last updated: October 29, 2026, 22:37 UTC.

Author
Alex Stephanov is Editor-in-Chief of Coindoo

Reporter at Coindoo

Alex is Editor-in-Chief of Coindoo and co-founder of Millennial Media Group, with nearly a decade of experience covering financial markets - crypto first, then everything else. It started in 2016 with Bitcoin. Like most people at the time, he didn't fully understand it - so he kept digging. Blockchain, tokenomics, the projects, the cycles. That curiosity never stopped, and eventually pulled him into traditional markets too: equities, commodities, macro. Not because he left crypto behind, but because you can't properly understand one without the other. What drives him is straightforward: he wants to know why something is happening, not just that it's happening. Most market coverage stops at the headline - price up, price down, here's a chart. Alex finds that kind of reporting actively unhelpful. If you walk away from an article without understanding the mechanism behind the move, what did you actually learn? He holds a degree in Tourism from New Bulgarian University - not the most obvious path into financial markets, but markets have a way of pulling in people who are simply too curious to stay out. He has authored over 200 in-depth analyses and more than 10,000 articles across crypto and traditional finance. He still thinks every day in markets teaches him something new. That's probably why he hasn't stopped.

Learn more about crypto and blockchain technology.

Glossary