[ Story · STORY ]

Binance hack: $5.8B out, $1.79B frozen

Binance probes suspicious outflows topping $5.8 billion as Tether and Circle freeze $1.79 billion in USDT and USDC tied to the exchange's hot wallets.

STORY·October 29, 2026·3 min read·By Gintautas Nekrosius
A cream-toned vault door standing open with a single red thread spooling out through the gap
An open vault, a thread unspooling: the freeze caught less than a third of what left.

Binance is investigating suspicious outflows from its hot wallets that reached as high as $5.8 billion. Tether and Circle have already frozen $1.79 billion in USDT and USDC tied to the movement, and the exchange says it is still working the case.

The scale of the outflow

Numbers this size don't move quietly, and the stablecoin issuers moved fast once they saw the pattern.

  • Suspicious outflows from Binance hot wallets reached up to $5.8 billion, per The Block.
  • Tether and Circle together froze $1.79 billion in USDT and USDC linked to the wallets in question.
  • The frozen amount covers roughly 31% of the high-end outflow figure, leaving the bulk of the funds unaccounted for.
  • Binance has confirmed an active investigation but has not yet disclosed a cause or a final loss figure.

What the freeze actually proves

The default read will call this a hack story: an exchange breached, billions stolen, issuers riding in to save the day. The freeze numbers tell a narrower story.

Tether and Circle can only act on addresses they can identify and that still hold frozen-able tokens. $1.79 billion caught against $5.8 billion in outflows means close to $4 billion either moved into non-freezable assets, left through decentralized rails, or was already converted before anyone flagged it.

That gap is the real signal, not the freeze itself. Issuer intervention works when funds sit in USDT or USDC long enough to get tagged. It does nothing for value that's already crossed into bitcoin, ether, or an off-ramp outside issuer control.

Binance's own silence on cause matters here too. No confirmed exploit vector, no confirmed insider angle, no confirmed wallet-key compromise. Until that lands, "hack" is a placeholder word covering something the exchange itself hasn't named.

A freeze of this size also shows how much power sits with two private companies over what counts as recoverable loss on a major exchange. Tether and Circle decided, unilaterally, which addresses got locked. That's a backstop, not a fix, and it only catches money that hasn't moved far or fast enough.

What confirms or kills this

The gap between $5.8 billion and $1.79 billion is the number to track. If Binance's final accounting narrows that gap significantly, the issuer freeze did more work than it looks like today.

  • Binance's official post-mortem naming a specific attack vector, wallet, or insider mechanism, and a timestamp for when it occurred.
  • Whether additional USDT or USDC gets frozen in the days ahead, narrowing the gap below $4 billion in unrecovered funds.
  • On-chain tracing of the unfrozen outflow showing how much converted to BTC or ETH versus how much sits dormant in traceable wallets.

Gintautas Nekrosius is the founder and editor of Stack and Story. He spent more than a decade in technology and crypto, including senior marketing roles at companies in the Animoca Brands and NordVPN groups, and worked on token launches and go-to-market from the inside. He started Stack and Story to write the independent read he could not find: crypto and markets explained plainly, by someone who has seen how the machine works. The publication holds no tokens and takes no trades.

DisclosureStack and Story holds no position in the assets discussed and earns nothing from their movement. This is analysis, not financial advice. Do your own research.

Understand crypto. Decide for yourself.

The numbers that moved, and the reason they did, every Sunday, free.

Free · Independent · Unsubscribe anytime · Privacy