Binance wallet outflows
| Moved (est.) | ≈$5.77B |
|---|---|
| Frozen | ≈$2.63B |
| Unresolved (est.) | ≈$3.14B |
Frozen: issuer-blocked USDT, USDC and XAUT. Unresolved: moved minus frozen, including funds still in traced wallets.
Sources: Wazz’s estimate + later Binance sweep · Tether / Circle freezes
Still held in traced wallets
Tap an amount to expand its wallets. Each balance links to an explorer.
Bitcoin18,270.19988827 BTC
19 unspent outputs. Checked 6:10:27 PM EDT / 22:10:27 UTC.
| Wallet | Held — explorer | Transaction |
|---|---|---|
| bc1q0ts8gaf9…mkmfv3 | 1,000.00000000 BTC | Transaction |
| bc1q2wvz0kcs…veznn6 | 1,000.00000000 BTC | Transaction |
| bc1q42flhayr…5wlsyx | 1,000.00000000 BTC | Transaction |
| bc1q63qrfrps…atsjxp | 1,000.00000000 BTC | Transaction |
| bc1qalwnl7dt…69tca8 | 1,000.00000000 BTC | Transaction |
| bc1qdfhmlrdv…3g88gw | 1,000.00000000 BTC | Transaction |
| bc1qepc70u3u…hs4lag | 1,000.00000000 BTC | Transaction |
| bc1qf5cyvv9w…l8a35u | 1,000.00000000 BTC | Transaction |
| bc1qg3nrzpuv…6n3t53 | 1,000.00000000 BTC | Transaction |
| bc1qjwdw6vrz…mxnz7w | 1,000.00000000 BTC | Transaction |
| bc1qm2j6v324…9wjaat | 1,000.00000000 BTC | Transaction |
| bc1qm8v88m5f…crs2l8 | 1,000.00000000 BTC | Transaction |
| bc1qnq6jj9jm…0k8t3s | 1,000.00000000 BTC | Transaction |
| bc1qs3aej5tm…577s56 | 1,000.00000000 BTC | Transaction |
| bc1qs6xnmhar…l87w3v | 1,000.00000000 BTC | Transaction |
| bc1qxrxujwxf…hs968s | 1,000.00000000 BTC | Transaction |
| bc1qz8hdwv8g…gxupdp | 1,000.00000000 BTC | Transaction |
| bc1qrg025e2p…hn6zyt | 832.49990088 BTC | Transaction |
| bc1qxg0l4p6x…y7s9ra | 437.69998739 BTC | Transaction |
Ethereum375,666.5519 ETH
Checked 6:10–6:11 PM EDT / 22:10–22:11 UTC. Includes loan proceeds; unrelated dust excluded.
| Wallet | Held — explorer |
|---|---|
| 0x8532FA…0543D4 | 195,460.000000 ETH |
| 0x897C80…158DF3 | 57,891.771307 ETH |
| 0xc887aF…5B286A | 122,310.000000 ETH |
| 0x7f9DC9…5415E3 | 4.780593 ETH |
Tron684,584,005.139506 TRX
Checked 5:46:04–5:46:07 PM EDT / 21:46:04–21:46:07 UTC. Includes 17,375.196763 borrowed TRX.
TG5i · 46,383,070.229019 TRX
TSpe · 638,200,934.710485 TRX
TPBk · 0.1 TRX
TCzB · 0.100002 TRX
Aave collateral60M USDT supplied
Depositor wallet · 10M USDT deposit · 50M USDT deposit
19,762.412971 ETH borrowed. No collateral recovery verified. Collateral and loan proceeds must not be counted twice.
Partial inventory. These balances are already part of the moved total or proceeds from it.
Classic Tornado ETH pool audit: 0 deposit events from 4:20 PM through 6:16:35 PM EDT across the 0.1 / 1 / 10 / 100 ETH pools. Other mixers and token pools are outside this check.
The original Tornado transaction sent 0.098257 ETH to the caller on October 28, before the incident. No mixer deposit of incident proceeds is verified in these traced branches.
Frozen balances
| Wallet | Frozen | Source |
|---|---|---|
| Ethereum · collection | 1,175,464,711.08 USDT | Verify |
| Ethereum · collection | 823,000,000.00 USDC | Verify |
| Ethereum · AA246 | 174,999,872.33 USDT | Verify |
| Ethereum · b171 | 30,000,000.00 USDT | Verify |
| Tron · TG5i | 312,729,468.00 USDT | Verify |
| Tron · TCzB | 65,990,000.00 USDT | Verify |
| Ethereum · collection | 12,574.046797 XAUT | Verify |
Stablecoins at $1. XAUT: 12,574.046797 tokens × $4,015.19 at 5:36 PM EDT, approximately $50.49M. Blacklist status and balances checked separately; exact amounts and observation times.
The 65.99M USDT at TCzB and the later 200.40M USDT receipt account for the increase from Wazz’s earlier $2.37B freeze table. Potential further freezes are excluded.
Reported scope
| Chain | Moved, reported | Assets / source |
|---|---|---|
| Ethereum | $3.51B | Binance 14, 16, 34 |
| Bitcoin | $1.44B | 18,270.2 BTC |
| Tron | $0.63B | 612.73M USDT + 46.39M TRX |
Rounded chain values from Wazz’s 5:06 PM EDT snapshot. Bitcoin and Tron quantities are corroborated. Linking all three chains to one incident follows Wazz’s reporting; a common cause remains unproven.
$5.57B is about 3.85% of DefiLlama’s $144.54B Binance asset snapshot. Assets are not Binance’s own capital.
How the Ethereum path worked
A caller installed an EIP-7702 delegation on Binance 14, then swept assets. Binance 34’s owner is Binance 14, providing an ownership path for the subsequent USDC sweep.
Delegation · First sweep · Binance 34 owner · 780M USDC sweep
How the signatures were obtained remains unknown. No shared dependency with Polymarket has been established.
Statements
Checked 6:08 PM EDT /22:08UTC. Issuer reports are not added again to the frozen tally.
Binance · last edited5:29PM EDT · Investigating a potential security issue; says user funds are safe. No amount, cause, withdrawal update or reimbursement mechanism in this statement.
Tether ·5:25PM EDT · Paolo Ardoino reports more than1.567B USDT frozen in connection with a potential Binance hack.
Circle ·5:18PM EDT · Jeremy Allaire reports more than800M USDC frozen in coordination with law enforcement.
CZ ·5:15PM EDT · Says it looks like a hack and expects users to be covered, speaking as a shareholder rather than current management.