The biggest exchange hack on record quickly became a test of crypto's centralized brakes: Binance says about $3 billion of the roughly $6 billion taken is frozen, much of it in stablecoins, and the pushback cited here was aimed at Binance's account of the breach rather than at the size of the loss [1][2][3].
What left
Nansen reported that about $6 billion left Binance wallets on Ethereum and other EVM chains, Bitcoin, TRON, XRP and Solana in a few hours [1]. Coin Bureau dated the outflows to 29 October and described the Ethereum hot wallet labelled Binance 14 being emptied in a single transaction worth around $2.5 billion [4]. Glassnode put the theft above the combined value of the next nine largest crypto hacks [5]. Estimates of the total differed by source: $6.01 billion in an Arkham figure relayed by Whale Alert [6], and $6.3 billion in CZ's own post [7].
What was frozen, and what was not
Per Nansen, Binance says about $3 billion is frozen, including about $2.3 billion in USDT and USDC, and Nansen's flow chart attributes 1.2B USDT and 824M USDC of the frozen funds to Tether and Circle [1]. The Arbitrum Security Council froze about $30.5 million tied to the exploit [8]. A post from Anthony Scaramucci that CZ shared put it as roughly half the assets already frozen, with deposits continuing and withdrawals paused for a security overhaul [9].
The rest moved. Nansen traced flows to a central Binance Exploiter address that deposited USDT into Aave and borrowed ETH, and its chart showed a Bitcoin hub holding 18,270 BTC with no outflows yet [1]. CredibleCrypto said the hacker sold about 8M CRV tokens and over half a million CVX [10]. Whale Alert relayed an unverified report that the attacker moved about $158 million of stolen altcoins into ETH [3].
Binance said it has reserved over $6.34 billion of company funds to cover the incident, $5 billion of it already held in the exact tokens affected [11]. Michael Saylor wrote, "I expect it to deliver" [12]. CZ shared a teacher's view that decentralized networks stayed idle while centralized actors intervened, calling it a "Fair view" [13].
The other side
Binance disclosed that a compromised DevOps engineer's laptop let the attacker reach a service container and submit unauthorized withdrawals, and said no private-key leakage was detected [14]. Ansem called the idea of one laptop enabling a six-billion-dollar theft implausible [2], and Whale Alert relayed that analysts were questioning Binance's explanation of the compromise [3]. Coin Bureau said investigators were pointing at North Korea [15].
The price read split too. CZ said the impact on the Bitcoin price was small and that Mt. Gox was larger in BTC terms, at 650,000 BTC [7]. Coin Bureau's account had Bitcoin losing the $80,000 floor it had been clinging to [15].
