---
title: "Arbitrum council moved $30 million in Binance hack funds without the hacker's key"
description: "A 12-person committee briefly rewrote one of Arbitrum's core contracts to spend from an address it held no key for, then restored the code, CoinDesk…"
language: en
canonical: "https://whycoinmoves.com/en/events/arbitrum-arbitrum-s-council-moved-30-49f29c6ac48c41"
published: 2026-11-03T07:37:57.000Z
updated: 2026-11-03T07:39:13.000Z
indexable: true
---

# Arbitrum council moved $30 million in Binance hack funds without the hacker's key

A 12-person committee briefly rewrote one of Arbitrum's core contracts to spend from an address it held no key for, then restored the code, CoinDesk…

Attributed sources: [CoinDesk](<https://www.coindesk.com/tech/2026/11/03/arbitrum-s-council-moved-usd30-million-of-binance-hack-funds-without-the-hacker-s-key>)

## Key facts

A 12-person committee briefly rewrote one of Arbitrum's core contracts to spend from an address it held no key for, then restored the code, CoinDesk reported. The council moved $30 million of Binance hack funds, the second time it has done so this year, according to the report.
Evidence strength: Single source, 1 publisher group(s) (CoinDesk).
No complete post-detection return window is available yet.

## Claims and open questions

- CoinDesk reported that a 12-person committee briefly rewrote one of Arbitrum's core contracts to spend from an address it held no key for, then put the code back.
- CoinDesk reported that the council moved $30 million of funds from the Binance hack.
- CoinDesk reported that this was the second time the council took this action this year.
- Which specific core contract was modified and what code changes were made to enable the spend would need an official Arbitrum statement, governance post or on-chain transaction record to confirm.
- Whether the recovered $30 million was returned to Binance, distributed to users or otherwise allocated would need an official statement from Arbitrum or Binance, or on-chain data, to confirm.

## Source evidence

- [Arbitrum’s council moved $30 million of Binance hack funds without the hacker’s key](<https://www.coindesk.com/tech/2026/11/03/arbitrum-s-council-moved-usd30-million-of-binance-hack-funds-without-the-hacker-s-key>) — CoinDesk; published Nov 3, 2026, 05:25; received Nov 3, 2026, 07:37 (UTC).


## Recent ARB events and market reactions

No other publication-ready ARB events yet.

- [Full coin archive](<https://whycoinmoves.com/en/coins/arbitrum>)

## Recent Security events on other coins

- [BTC: Mercado Bitcoin pledges to cover all user losses after near $40 million hack](<https://whycoinmoves.com/en/events/bitcoin-mercado-bitcoin-pledges-cover-all-0e158e4f16d9c4>)
- [SOL: Crypto investigators flag suspected $106M theft and $786K Solana bot drain](<https://whycoinmoves.com/en/events/solana-crypto-investigators-flag-suspected-106m-0bf2b31f6dd88d>)
- [BTC: Mercado Bitcoin pauses withdrawals after $46 million security breach](<https://whycoinmoves.com/en/events/bitcoin-mercado-bitcoin-wallets-keep-moving-13d70fc1d67708>)
- [Security](<https://whycoinmoves.com/en/topics/security>)

## Research for this archive

- [Does crypto news move prices or follow them? A timestamp audit](<https://whycoinmoves.com/en/research/announcement-timestamps-and-causality.md>)
- [Crypto hacks and price impact: Bybit and Cetus case studies](<https://whycoinmoves.com/en/research/crypto-security-exploits-and-evidence-evolution.md>)
- [Why is crypto moving? How to check the evidence](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)