CRYPTO
Crypto Briefing
31 Oct 2026 · 22:30
Binance hot wallet breach affects $6B, customer funds secure
This article examines how recent events may relate to prediction market pricing. It reflects interpretive analysis of publicly available information and is provided for informational purposes only. Markets will closely monitor any developments in …
This article examines how recent events may relate to prediction market pricing. It reflects interpretive analysis of publicly available information and is provided for informational purposes only.
Markets will closely monitor any developments in Binance’s ongoing investigation into the breach, particularly concerning potential vulnerabilities. Additionally, further confirmations or revelations about the breach could influence Bitcoin’s market dynamics, potentially affecting its price movement. Regulatory responses and any updates from Binance on preventive measures may also play a role in market perception and confidence.
Binance Co-CEO Richard Teng confirmed that a security breach occurred, affecting Binance’s hot wallet infrastructure. Despite this, Teng assured users that customer funds were secure as they remained in cold storage. The incident involved a significant $6.3 billion asset movement, with Binance committing to cover all losses using company reserves. The report highlighted that no customer accounts were compromised during the breach, suggesting a robust internal risk management process.
Disclaimer
This article contains analysis of publicly available information and market data and is for informational purposes only. It does not constitute investment advice or a recommendation to buy, sell, or hold any asset or contract.
Content may include AI-assisted interpretation and may be incomplete or subject to change. Market conditions may evolve rapidly, and the timing of information may affect how it is interpreted.
Market participants may act on similar information at or around the time it becomes available. You are solely responsible for any decisions made based on this content.
For additional details, please review our full Disclaimer & Risk Disclosure.
CRYPTO
Pypi.org
31 Oct 2026 · 22:15
tilla-mcp added to PyPI
TILLA MCP server Let your AI agent pull TILLA's market data directly. TILLA serves crypto spot and derivatives, US stocks and ETFs, FX, rates, macro, fund-by-fund Bitcoin and Ether spot ETF flows and blocks …
TILLA MCP server
Let your AI agent pull TILLA's market data directly.
TILLA serves crypto spot and derivatives, US stocks and ETFs, FX, rates, macro, fund-by-fund Bitcoin and Ether spot ETF flows and blocks and mempool data from our own Bitcoin node - every value on one UTC clock - plus 293,743 indicators computed bar by bar with no look-ahead.
This is the official Model Context Protocol server. Add it to any MCP client and your agent can query TILLA on its own.
Connect in 30 seconds
Get a free API key at https://tillacrypto.com (no card), or POST https://api.tillacrypto.com/v1/demo_key for one with no account. Add the server to your MCP client.
Claude Desktop / Claude Code / Cursor (local, stdio)
pip install tilla-mcp
{ "mcpServers": { "tilla": { "command": "tilla-mcp", "env": { "TILLA_API_KEY": "tk_live_your_key_here" } } } }
With uv, nothing to install: "command": "uvx", "args": ["tilla-mcp"] . Or run this folder's file directly: pip install "mcp>=1.9,<2" httpx , then "command": "python", "args": ["/path/to/tilla_mcp.py"] .
Remote / hosted (streamable HTTP)
TILLA_MCP_TRANSPORT = http TILLA_API_KEY = tk_live_... python tilla_mcp.py # serves MCP over http://127.0.0.1:8971/mcp (front with TLS for a public connector)
Every tool calls a real route of the API ( TOOL_ROUTES in tilla_mcp.py names it).
Tool Key? What it does API call tilla_about no What TILLA is and how to start - tilla_status no The newest 1-minute bar and the tiers served GET /v1/status tilla_tiers no The public plans: price, history cap, limits, size GET /v1/tiers tilla_inventory yes Exactly which series the key holds, per layer and lane (call this first) GET /v1/inventory tilla_latest yes The newest bar of named series on one lane GET /v1/<tier>/<layer>/<lane> tilla_window yes A range of bars; page with next_start while more is true GET /v1/<tier>/<layer>/<lane> tilla_usage yes The key's plan and budget right now GET /v1/usage tilla_markets no Every market, its category and related markets GET /v1/markets tilla_market yes One market (and optionally its related ones) on one clock GET /v1/<tier>/market/<id> tilla_sample no The free sample of a plan: series per lane + one real row GET /v1/sample/<tier> tilla_health no The newest bar of every lane - is the data current GET /v1/health tilla_docs no The whole API manual in one call GET /llms-full.txt + GET /v1 tilla_tick yes Every series the key holds for the bar that just closed, one call GET /v1/<tier>/tick tilla_changes yes Every value repaired since a time, so a kept copy stays correct GET /v1/<tier>/changes
Resources: tilla://about , tilla://tiers .
Config (env)
Var Default Meaning TILLA_API_KEY - Your tk_live_... key (needed for keyed tools) TILLA_API_BASE https://api.tillacrypto.com API base (dev: http://127.0.0.1:8898 ) TILLA_MCP_TRANSPORT stdio stdio (local) or http (remote) TILLA_MCP_HOST / TILLA_MCP_PORT 127.0.0.1 / 8971 HTTP bind
Safe by design
Read-only: every tool is an HTTPS GET to api.tillacrypto.com (or tillacrypto.com for the docs). No tool writes a file, runs a command, places a trade or touches a wallet.
every tool is an HTTPS to (or for the docs). No tool writes a file, runs a command, places a trade or touches a wallet. Your key is read from TILLA_API_KEY and sent only to the TILLA API, never logged or returned to the agent.
is read from and sent only to the TILLA API, never logged or returned to the agent. HTTP mode binds to 127.0.0.1 unless you set TILLA_MCP_HOST yourself.
unless you set yourself. Two dependencies, both standard: the official mcp SDK and httpx .
Notes for the agent
Call tilla_inventory before naming a series - never guess a series name .
before naming a series - . A window with no start returns the newest bars; with a start , page forward with next_start until more is false.
returns the newest bars; with a , page forward with until is false. 403 means the key or the data is outside the plan; 429 means a minute or day budget was hit, and retry_after_seconds says when to try again.
means the key or the data is outside the plan; means a minute or day budget was hit, and says when to try again. An empty value is real: a closed market carries its last print, but an open market with no print (and a derived value with no mathematical answer) is left empty, never invented.
MIT licensed. Data access governed by the TILLA plan terms.
CRYPTO
Pypi.org
31 Oct 2026 · 22:15
tilla-mcp 2.0.0
TILLA MCP server Let your AI agent pull TILLA's market data directly. TILLA serves raw venue data, derived indicators computed from it bar by bar with no look-ahead, and blocks and mempool data from …
TILLA MCP server
Let your AI agent pull TILLA's market data directly.
TILLA serves raw venue data, derived indicators computed from it bar by bar with no look-ahead, and blocks and mempool data from our own Bitcoin node - crypto spot and derivatives, equities and ETFs, FX, rates and macro - every value on one UTC clock, every bar hashed as it lands.
This is the official Model Context Protocol server. Add it to any MCP client and your agent can query TILLA on its own.
Connect in 30 seconds
Get a free API key at https://tillacrypto.com (no card), or POST https://api.tillacrypto.com/v1/demo_key for one with no account. Add the server to your MCP client.
Claude Desktop / Claude Code / Cursor (local, stdio)
First pip install "mcp>=1.2,<2" httpx , then point your client at tilla_mcp.py in this folder:
{ "mcpServers": { "tilla": { "command": "python", "args": ["/path/to/tilla_mcp.py"], "env": { "TILLA_API_KEY": "tk_live_your_key_here" } } } }
Once tilla-mcp is published on PyPI, "command": "uvx", "args": ["tilla-mcp"] will work too, with nothing to download.
Remote / hosted (streamable HTTP)
TILLA_MCP_TRANSPORT = http TILLA_API_KEY = tk_live_... python tilla_mcp.py # serves MCP over http://127.0.0.1:8971/mcp (front with TLS for a public connector)
Every tool calls a real route of the API ( TOOL_ROUTES in tilla_mcp.py names it).
Tool Key? What it does API call tilla_about no What TILLA is and how to start - tilla_status no The newest 1-minute bar and the tiers served GET /v1/status tilla_tiers no The public plans: price, history cap, limits, size GET /v1/tiers tilla_inventory yes Exactly which series the key holds, per layer and lane (call this first) GET /v1/inventory tilla_latest yes The newest bar of named series on one lane GET /v1/<tier>/<layer>/<lane> tilla_window yes A range of bars; page with next_start while more is true GET /v1/<tier>/<layer>/<lane> tilla_usage yes The key's plan and budget right now GET /v1/usage tilla_markets no Every market, its category and related markets GET /v1/markets tilla_market yes One market (and optionally its related ones) on one clock GET /v1/<tier>/market/<id> tilla_sample no The free sample of a plan: series per lane + one real row GET /v1/sample/<tier> tilla_health no The newest bar of every lane - is the data current GET /v1/health tilla_docs no The whole API manual in one call GET /llms-full.txt + GET /v1 tilla_tick yes Every series the key holds for the bar that just closed, one call GET /v1/<tier>/tick tilla_changes yes Every value repaired since a time, so a kept copy stays correct GET /v1/<tier>/changes
Resources: tilla://about , tilla://tiers .
Config (env)
Var Default Meaning TILLA_API_KEY - Your tk_live_... key (needed for keyed tools) TILLA_API_BASE https://api.tillacrypto.com API base (dev: http://127.0.0.1:8898 ) TILLA_MCP_TRANSPORT stdio stdio (local) or http (remote) TILLA_MCP_HOST / TILLA_MCP_PORT 127.0.0.1 / 8971 HTTP bind
Safe by design
Read-only: every tool is an HTTPS GET to api.tillacrypto.com (or tillacrypto.com for the docs). No tool writes a file, runs a command, places a trade or touches a wallet.
every tool is an HTTPS to (or for the docs). No tool writes a file, runs a command, places a trade or touches a wallet. Your key is read from TILLA_API_KEY and sent only to the TILLA API, never logged or returned to the agent.
is read from and sent only to the TILLA API, never logged or returned to the agent. HTTP mode binds to 127.0.0.1 unless you set TILLA_MCP_HOST yourself.
unless you set yourself. Two dependencies, both standard: the official mcp SDK and httpx .
Notes for the agent
Call tilla_inventory before naming a series - never guess a series name .
before naming a series - . A window with no start returns the newest bars; with a start , page forward with next_start until more is false.
returns the newest bars; with a , page forward with until is false. 403 means the key or the data is outside the plan; 429 means a minute or day budget was hit, and retry_after_seconds says when to try again.
means the key or the data is outside the plan; means a minute or day budget was hit, and says when to try again. An empty value is real: a closed market carries its last print, but an open market with no print (and a derived value with no mathematical answer) is left empty, never invented.
MIT licensed. Data access governed by the TILLA plan terms.
MACRO & FED
Rt-english.com
31 Oct 2026 · 21:30
French economy ‘headed straight for a wall’ – finance minister
Shrinking output and accelerating inflation have added to Paris’ mounting financial troubles, official figures show France is “headed straight for a wall” unless it reins in its budget deficit, Finance Minister Roland Lescure has …
Shrinking output and accelerating inflation have added to Paris’ mounting financial troubles, official figures show
France is “headed straight for a wall” unless it reins in its budget deficit, Finance Minister Roland Lescure has warned, as the country’s economy contracts and inflation accelerates.
Gross domestic product fell by 0.1% in the third quarter, following stagnation in the previous three months and a 0.2% decline at the start of the year, the national statistics agency reported on Friday. Annual inflation climbed to 3.4% in October from 3.1% in September, its highest level since January 2024.
Lescure also described the economy as being “at a standstill,” underscoring the mounting financial challenges facing President Emmanuel Macron’s government.
The downturn extended across key sectors. Exports dropped 1.7%, largely due to weaker overseas aerospace sales, while investment fell 0.6%. Manufacturing output declined 1.4%, with automobile production shrinking for the fourth consecutive quarter.
France is also struggling with public debt equivalent to roughly 119% of GDP and a substantial budget deficit. Government borrowing costs climbed following Friday’s figures, with yields on ten-year bonds approaching 5%, raising concerns about the cost of servicing the country’s debt.
The deteriorating outlook has increased pressure on Macron, whose government is pursuing spending cuts while boosting military expenditure and weapons deliveries to Kiev. France increased its 2026 military budget by €6.7 billion ($7.5 billion) despite its mounting debt.
The government’s austerity policies have also fueled nationwide unrest that began in September with protests over staff shortages and deteriorating conditions at a high school near Paris. The demonstrations quickly spread, with thousands of students demanding more education funding and accusing the authorities of prioritizing weapons over schools.
The unrest escalated into violence, with rioters looting shops, setting vehicles ablaze and damaging the historic city hall in Limoges. Thousands were arrested and hundreds injured.
The protests have drawn comparisons with the 2018 Yellow Vest movement, which challenged Macron’s economic policies. Activists, students and trade unions have called for fresh demonstrations on Saturday, prompting authorities to mobilize 70,000 security personnel nationwide. Interior Minister Laurent Nunez warned of a “very high risk” of disorder.
Macron has blamed the purchasing-power crisis on the US-Israeli war against Iran, the blockade of the Strait of Hormuz, and surging fuel prices. He has also accused social media platforms of “damaging democracy” by circulating footage of protests and riots.
With the 2027 presidential election approaching, the economic downturn and continuing unrest have further weakened Macron’s position, complicating efforts to secure parliamentary approval for a deficit-cutting budget.
MACRO & FED
Freerepublic.com
31 Oct 2026 · 21:30
Hochul helped pile $37K of debt on every New Yorker — and the bill’s coming due
As New Yorkers cast their ballots in Tuesday’s race for governor, the state’s economic health looms large: 34% of likely voters say taxes, jobs and inflation are the most important issues facing the Empire …
As New Yorkers cast their ballots in Tuesday’s race for governor, the state’s economic health looms large: 34% of likely voters say taxes, jobs and inflation are the most important issues facing the Empire State, Emerson College pollsters found. Those voters … Skip to comments.
Hochul helped pile $37K of debt on every New Yorker and the bills coming dueNY Post ^
| 10/30/26
| Geoffrey Lawrence
Posted on 10/30/2026 7:21:31 PM PDT by Libloather
As New …
CRYPTO
Pypi.org
31 Oct 2026 · 20:30
dcex 0.42.1
Rust-backed Python crypto exchange API library for CEX and DEX market data, trading and WebSocket streams (Binance, Bybit, OKX, Hyperliquid and more). A required part of this site couldnt load. This may be due …
Rust-backed Python crypto exchange API library for CEX and DEX market data, trading and WebSocket streams (Binance, Bybit, OKX, Hyperliquid and more). A required part of this site couldnt load. This may be due to a browser
extension, network issues, or browser settings. Please check your
connection, disable any ad blockers, or try using a diffe…
CRYPTO
Crypto Briefing
31 Oct 2026 · 20:30
Barclays maps the AI credit default swap market and lays out trades
A new Barclays report tracks widening CDS spreads on hyperscalers and chipmakers and recommends positions in Broadcom and Oracle Wall Street spent the last few years asking how much money AI could make. Barclays …
A new Barclays report tracks widening CDS spreads on hyperscalers and chipmakers and recommends positions in Broadcom and Oracle
Wall Street spent the last few years asking how much money AI could make. Barclays is now asking a less glamorous question: what happens if some of the borrowers behind the buildout can’t pay their debts?
The bank has published a report titled “A Roadmap for AI CDS,” which charts the fast-growing market for credit default swaps tied to artificial intelligence companies. It also offers specific trading ideas, including buying 5-year protection on Broadcom and selling Oracle’s 5-year basis.
What Barclays found
A credit default swap works like an insurance policy on a company’s debt: the buyer pays a regular fee, and gets paid if the company defaults.
The fee is quoted as a “spread” in basis points, where 100 basis points equals one percentage point. A wider spread means the market thinks default risk has gone up.
Barclays built a portfolio of ten prominent AI-linked companies. Six are hyperscalers, the giant cloud operators that rent out computing power, and four are semiconductor firms.
According to the report, CDS spreads across that group have widened notably over the past six months. As of October 28, 2026, Microsoft’s 5-year CDS spread stood at 53 basis points, Alphabet’s at 80 bps, and Amazon’s at 81 bps.
Tesla’s spread was 30 bps higher, per the research.
AI, tech, and the markets they move—in one daily briefing. Daily. Free. Join 34,000+ readers across crypto, finance, and policy. Email address Subscribe free We respect your privacy. Unsubscribe anytime.
Barclays measured its AI portfolio’s spread against CDX.IG, a benchmark index that tracks default protection on investment-grade North American companies. Six months ago, the AI basket traded just 10 bps wider than that index. That gap has since blown out to 76 bps.
Trading volumes went vertical
The four-week average of weekly CDS trading volume reached approximately $6 billion for the hyperscalers and $3 billion for the semiconductor firms. Those figures represent year-on-year jumps of roughly 740% and 1,900%, respectively.
CoreWeave, the AI-focused cloud provider, offers the sharpest example. Its 5-year CDS traded at 15.5 points upfront, while trading volume climbed from $32 million to $302 million.
“Points upfront” means protection buyers have to pay a lump sum at the start of the contract, on top of the running fee. That pricing convention typically shows up when the market sees a borrower as considerably riskier than an investment-grade name.
The trades Barclays is pitching
The first recommendation is buying 5-year protection on Broadcom. The second is selling Oracle’s 5-year basis. A basis trade plays the gap between a company’s CDS spread and the spread on its actual bonds, two prices that in theory should track each other closely. Barclays sees an opportunity in how Oracle’s two markets are currently priced against each other.
Why the AI credit story is heating up
The surge in CDS activity lines up with massive capital spending by major tech firms on data centers, infrastructure and hardware. Barclays frames the rising volatility and demand for hedges as a shift in investor sentiment about AI financing risks. Investors are reaching for more complex instruments to guard against potential credit defaults.
What this means
The gap between Microsoft at 53 bps and CoreWeave at 15.5 points upfront shows the market sorting borrowers by perceived staying power.
The jump from 10 bps to 76 bps over CDX.IG shows that the premium for AI-specific credit risk has grown more than sevenfold in six months.
Volume growth of around 740% for hyperscalers and about 1,900% for chipmakers means these contracts are becoming a real venue for price discovery. A deeper market makes it easier to bet against, or insure against, the AI buildout.
CRYPTO
Crypto Briefing
31 Oct 2026 · 20:00
Tether receives $223M USDT transfer from Bitfinex
A 222.7 million USDT move from Bitfinex to the Tether Treasury fits a busy month of internal transfers between the sister companies Bitfinex sent 222.7 million USDT to the Tether Treasury, according to on-chain …
A 222.7 million USDT move from Bitfinex to the Tether Treasury fits a busy month of internal transfers between the sister companies
Bitfinex sent 222.7 million USDT to the Tether Treasury, according to on-chain tracker Whale Alert. That is a transfer worth nearly $223 million, moving between two companies that share a parent.
What moved, and when
The transfer landed in late October 2026.
On October 28, four USDT transfers between Bitfinex and Tether totaled $765.3 million. All four happened inside a three-hour window.
That batch included a 281.8 million USDT move and a 124.3 million USDT move. It also included offsetting moves of 180 million USDT, meaning some of the activity effectively canceled itself out.
Earlier in the month, the traffic was already heavy. A 100.98 million USDT transfer went from Bitfinex to Tether around October 20-21.
Before that, a 140 million USDT transfer took place earlier in October.
For scale, the latest 222.7 million USDT transfer sits in the upper range of these October moves. It is larger than the 100.98 million and 140 million transfers. It is smaller than the 281.8 million USDT leg from October 28.
Why Bitfinex and Tether keep passing money back and forth
The key detail is ownership. Bitfinex and Tether both operate under iFinex.
AI, tech, and the markets they move—in one daily briefing. Daily. Free. Join 34,000+ readers across crypto, finance, and policy. Email address Subscribe free We respect your privacy. Unsubscribe anytime.
That shared parent turns these flows into something closer to internal bookkeeping. The research on these transfers frames them as regular liquidity adjustments. They are not treated as redemptions, and they are not driven by outside market pressure.
They do not signify shifts in USDT supply or external market demand. The total number of tokens circulating in the wider market is not what these moves are about.
Whale Alert and similar on-chain trackers flag these transactions routinely. Public blockchains make every large move visible, which is a feature for transparency.
The peg held, which is the part that counts
Through all of October’s activity, USDT maintained its dollar peg. These internal treasury movements have not disrupted the token’s peg stability.
They also have not dented trading liquidity or broader market sentiment. Hundreds of millions of dollars changed hands between affiliates, and the market more or less shrugged.
The October 28 cluster alone moved $765.3 million in three hours. The peg stayed put.
What this means for traders and the market
Transfers between Bitfinex and the Tether Treasury fall into a known pattern. They reflect treasury management inside the iFinex group. Treating each one as a signal of new issuance or a wave of redemptions would mean misreading the plumbing.
The research suggests that on-chain visibility into these operations may enhance market confidence in USDT. Being able to see large flows in real time, and then watch the peg hold through them, gives users something better than a press release.
The research notes investors may consider USDT a safe harbor, particularly in periods of heightened trading activity or uncertainty.
The close ties between an exchange and a stablecoin issuer under one parent make these transfers routine. They also mean that the health of one entity is never fully separate from the other.
For now, the October activity tells a fairly calm story. Roughly a billion dollars’ worth of USDT shifted between affiliates across a handful of transfers, including the latest 222.7 million USDT move. The peg held, liquidity held, and sentiment held.
CRYPTO
Crypto Briefing
31 Oct 2026 · 20:00
Houthi-launched drone intercepted and neutralized by Saudi-led coalition
This article examines how recent events may relate to prediction market pricing. It reflects interpretive analysis of publicly available information and is provided for informational purposes only. Attention remains on the Saudi-led coalition’s military …
This article examines how recent events may relate to prediction market pricing. It reflects interpretive analysis of publicly available information and is provided for informational purposes only.
Attention remains on the Saudi-led coalition’s military actions and any potential escalation. Markets are closely observing the possibility of further interventions, which would be consistent with scenarios where the Houthis face increased pressure. Any substantial shifts in military dynamics or diplomatic developments may significantly impact the probability of the Houthis entering Aden.
The Saudi-led coalition reported successfully intercepting and neutralizing a drone launched by Yemen’s Houthi movement. The incident underscores ongoing tensions between the coalition, which backs Yemen’s internationally recognized government, and the Iran-aligned Houthis controlling parts of Yemen, including Sanaa. The coalition’s air defenses reportedly acted over Saudi Arabia’s Makkah region, though Houthi representatives deny targeting Saudi territory, citing their focus on military and energy infrastructure. This interception is part of a series of cross-border hostilities that have intensified recently.
Disclaimer
This article contains analysis of publicly available information and market data and is for informational purposes only. It does not constitute investment advice or a recommendation to buy, sell, or hold any asset or contract.
Content may include AI-assisted interpretation and may be incomplete or subject to change. Market conditions may evolve rapidly, and the timing of information may affect how it is interpreted.
Market participants may act on similar information at or around the time it becomes available. You are solely responsible for any decisions made based on this content.
For additional details, please review our full Disclaimer & Risk Disclosure.
CRYPTO
Gossiplankanews.com
31 Oct 2026 · 19:45
North Korean hackers stole $6.3 billion from Binance
Over $6.3 billion worth of assets have been stolen in a cyber attack on Binance, the world's largest cryptocurrency exchange. The attack, which occurred on the night of October 29, 2026, is considered the …
Over $6.3 billion worth of assets have been stolen in a cyber attack on Binance, the world's largest cryptocurrency exchange. The attack, which occurred on the night of October 29, 2026, is considered the largest theft ever recorded in the history of cryptocurrency.
Blockchain analytics firms confidently indicate that an elite hacker group sponsored by the North Korean government is behind this historic heist.
The attack, which began around 8:05 PM GMT on Thursday, was executed within a short period of 20 minutes. According to Binance, the lost amount is $6.3 billion, while analytics firms TRM Labs, Chainalysis, and Elliptic estimate it to be between $6.36 billion and $6.4 billion. This damage is more than four times the previous record of $1.5 billion reported from the Bybit network in February 2025. Among the stolen assets, $3.79 billion on the Ethereum network, 18,270 Bitcoins worth $1.47 billion, $628 million on the Tron network, and $296 million in XRP are prominent.
According to preliminary investigations, these unauthorized transactions were carried out by gaining access to a service system through hacking a DevOps engineer's computer. Private keys of wallets were not leaked; instead, Binance's active hot wallets were brought under the control of hackers using EIP-7702 technology on the Ethereum network. It has also been revealed that preparations for the attack had been underway for 36 hours prior.
Based on the nature of this attack and the technical tactics used, TRM Labs states that this is the work of an elite hacker unit called 'TraderTraitor,' linked to North Korea's Lazarus Group. Although no government or legal institution has officially declared this yet, the American FBI and Secret Service have launched a comprehensive investigation into the matter in collaboration with the private sector. North Korea continuously engages in such cyber heists to circumvent sanctions, and by the end of 2025, the amount they had stolen this way was $6.75 billion.
Despite the massive loss incurred from the attack, Binance emphasizes that customer funds are completely secure. Only active hot wallets used for withdrawals have been compromised by hackers, while the majority of customer deposits are held in secure cold storage not connected to the internet. Authorities have already managed to freeze approximately $3 billion worth of assets within the network due to the swift intervention of partner companies including Tether and Circle. However, approximately $2.4 billion remains under the control of the attackers.
Binance has decided to deploy over $6.34 billion in company funds and its Secure Asset Fund for Users (SAFU) to cover all losses incurred by customers. Withdrawal facilities, temporarily suspended due to security measures, are expected to be restored within 34 to 40 hours, and a full reserve report will also be provided, they state. Following this historic cyber theft, prices in the global crypto market and related stock prices have significantly dropped.