---
title: "Binance confirms record $6.4 billion hack as Bitcoin holds steadier than in 2018"
description: "Decrypt reports Binance confirmed an attack in which Chainalysis and TRM Labs estimate roughly $6.4 billion was stolen, more than four times the $1.5 billion…"
language: en
canonical: "https://whycoinmoves.com/en/events/bitcoin-binance-hack-why-bitcoin-didn-be62b0485a1f1a"
published: 2026-10-30T18:46:58.000Z
updated: 2026-10-30T19:48:01.000Z
indexable: true
---

# Binance confirms record $6.4 billion hack as Bitcoin holds steadier than in 2018

Decrypt reports Binance confirmed an attack in which Chainalysis and TRM Labs estimate roughly $6.4 billion was stolen, more than four times the $1.5 billion…

Attributed sources: [Decrypt](<https://decrypt.co/382257/binance-hack-why-bitcoin-didnt-crash>)

## Key facts

Decrypt reports Binance confirmed an attack in which Chainalysis and TRM Labs estimate roughly $6.4 billion was stolen, more than four times the $1.5 billion Bybit heist of February 2025. Binance says it set aside more than $6.34 billion to cover every loss.
Evidence strength: Single source, 1 publisher group(s) (Decrypt).
After site detection, observed returns were 5 minutes: -0.13% (Oct 30, 2026, 18:46 → Oct 30, 2026, 18:51, UTC; Gate · USDT); 1 hour: +0.13% (Oct 30, 2026, 18:46 → Oct 30, 2026, 19:46, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.23% (OKX · USDT; cutoff Oct 30, 2026, 18:46, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | -0.13% | -0.13% | 0.00 pp | Oct 30, 2026, 18:46 → Oct 30, 2026, 18:51 | Gate · USDT |
| 1 hour | +0.13% | +0.13% | 0.00 pp | Oct 30, 2026, 18:46 → Oct 30, 2026, 19:46 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 100.0% (720/720) |
| Median absolute hourly return | 0.14% |
| 99th percentile of absolute hourly returns | 1.23% |
| BTC beta | 1.00 |
| Source / cutoff (UTC) | OKX · USDT / Oct 30, 2026, 18:46 |

## Claims and open questions

- Chainalysis and TRM Labs put the theft at roughly $6.4 billion, more than four times the previous record, the $1.5 billion Bybit heist of February 2025.
- Binance says it has set aside more than $6.34 billion of company funds to cover every loss, with about $3 billion frozen and withdrawals on track to resume in 45 hours.
- Which specific addresses or wallets hold the attacker's remaining more than 420,000 ETH and 18,270 BTC, and what on-chain data would confirm those balances?
- What Friday's ETF flow figures show, which Decrypt identifies as the first read on whether spot Bitcoin ETF holders are selling after the theft?

## Source evidence

- [Binance Hack: Why Bitcoin Didn't Crash Like It Did in 2018](<https://decrypt.co/382257/binance-hack-why-bitcoin-didnt-crash>) — Decrypt; published Oct 30, 2026, 18:45; received Oct 30, 2026, 18:46 (UTC).


## Recent BTC events and market reactions

- [Wall Street analysts call Binance hack a buying opportunity for crypto stocks](<https://whycoinmoves.com/en/events/bitcoin-worried-about-crypto-hacks-buy-45c1441d44c10e>) — Published Oct 30, 2026, 20:06 (UTC) · Single source (1 publisher) · Security · 5m +0.06% / 1h -0.35%
- [SEC charges two companies over $130 million crypto investment scheme](<https://whycoinmoves.com/en/events/bitcoin-sec-charges-two-companies-130-3798952dd757dc>) — Published Oct 30, 2026, 14:38 (UTC) · Single source (1 publisher) · Regulation · 5m +0.00% / 1h +0.78%
- [Analysts keep buy ratings on Strategy after preferred-stock changes](<https://whycoinmoves.com/en/events/bitcoin-strategy-s-preferred-stock-fix-5dda0febed475b>) — Published Oct 30, 2026, 14:30 (UTC) · Single source (1 publisher) · General news · 5m +0.21% / 1h +0.79%
- [Chainalysis and TRM Labs link $6.3 billion Binance hack to North Korea's TraderTraitor](<https://whycoinmoves.com/en/events/bitcoin-blockchain-firms-link-north-korea-6786e21437a478>) — Published Oct 30, 2026, 14:13 (UTC) · Single source (1 publisher) · Security · 5m +0.23% / 1h +1.42%
- [Doomberg calls US Treasury pressure on central banks wildly bullish for Bitcoin](<https://whycoinmoves.com/en/events/bitcoin-doomberg-us-treasury-sanctions-are-03367d4001665d>) — Published Oct 30, 2026, 13:26 (UTC) · Single source (1 publisher) · Regulation · 5m -0.22% / 1h -0.58%
- [Full coin archive](<https://whycoinmoves.com/en/coins/bitcoin>)

## Research for this archive

- [Crypto hacks and price impact: Bybit and Cetus case studies](<https://whycoinmoves.com/en/research/crypto-security-exploits-and-evidence-evolution.md>)
- [Why is crypto moving? How to check the evidence behind a price explanation](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)
- [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns](<https://whycoinmoves.com/en/research/hourly-returns-and-bitcoin-beta.md>)
- [Will Bitcoin go back up? Every crash since 2011 and its recovery time](<https://whycoinmoves.com/en/research/bitcoin-crash-recovery-time.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)
