Binance loses billions in a hack. XBT isn't on Binance, and it barely flinched
Billions in crypto left Binance's hot wallets on Thursday evening, Oct 29, in what may be the largest exchange theft on record. XBT isn't listed on Binance, and while bitcoin fell about 5%, XBT ended the night slightly higher.
What happened
- The outflow. Starting about 20:24 UTC, huge transfers left Binance hot wallets on Ethereum: about 167,000 ETH, around 1.6 billion USDT, 780 million USDC and dozens of other tokens, per on-chain data reported by Cyber Kendra. Estimates of the total run from about $2.8 billion to over $5.7 billion (Arkham, via CoinDesk). Nobody has a final number.
- Binance's response. Binance first said it was "aware of reports of a potential security issue." Co-CEO Yi He later said Binance will cover "all hacking losses" and that deposits and withdrawals were temporarily suspended while it freezes funds and works with law enforcement. Founder CZ: "It does look like a hack on Binance."
- Freezes. Tether and Circle say they froze well over $2 billion in USDT and USDC between them. ETH can't be frozen, and about 195,000 ETH was quickly forwarded to a new address.
- Who did it. Not confirmed. Some on-chain investigators point to North Korea's Lazarus Group. Binance hasn't said how it happened.
What it did to prices
| ~20:20 UTC Oct 29 | ~01:00 UTC Oct 30 | Change | |
|---|---|---|---|
| Bitcoin | ~$80,700 | ~$76,900 | about −5% |
| XBT (NeoxEX) | ~$248 | ~$253 | about +2% (peaked near $262) |
One night is one night, and XBT's market is thin enough to move 20% on its own. But XBT/BTC rose about 7% while the biggest exchange in the world was bleeding. The XBT trade doesn't run through Binance.
Does it touch XBT at all?
- Directly, no. Binance doesn't list XBT. XBT trades on smaller venues such as NeoxEX and NonKYC.
- The pre-fork angle. Any bitcoin Binance held before the August split also exists as XBT, controlled by the same keys. If an attacker ever got keys to old Binance bitcoin addresses, the matching XBT would be exposed too. So far the confirmed theft is on Ethereum. Arkham's early breakdown included about $1.5 billion in bitcoin, but no bitcoin loss has been confirmed by Binance or other trackers.
- What we're watching. Our pre-fork coins tracker logged about 15,800 XBT of pre-fork coins moving in 62 large transactions on Oct 29, one of the busier days this month. We have no evidence linking any of it to Binance. Update: we checked two well-known Binance addresses on both chains; their XBT is untouched. Binance is sitting on about 268,000 XBT. Most pre-fork moves are copies of bitcoin transactions.
The lesson is the old one
Hot wallets are for moving money, not keeping it. The same goes for XBT's exchanges, which are far smaller than Binance. If you don't need coins on an exchange, keep them on keys you control. Our cold storage guide walks through it.
And with the 45-day window unlocking this weekend, it's a good week to make sure your own node is on Knots 29.4.3 before block 979,919.
Sources: CoinDesk, TechCrunch, Cyber Kendra, Gizmodo and CryptoTicker reporting, Oct 29 to 30, 2026; Binance, Yi He and CZ statements on X as quoted there. Amounts are third-party estimates and may change. XBT prices from NeoxEX XBT/USDC via xbt.live; bitcoin from xbt.live's BTC feed. xbt.live has a referral relationship with NeoxEX. Not financial advice.
Have an XBT story? Write for xbt.live.