---
title: "Binance hacker moves $1.4 billion of bitcoin into 19 wallets"
description: "CoinDesk, tracing the blockchain, reported that 18,270 bitcoin — about $1.4 billion — tied to the Binance hack has been split across 19 wallets, 17 of them…"
language: en
canonical: "https://whycoinmoves.com/en/events/bitcoin-binance-hacker-splits-1-4-8224ea34d03165"
published: 2026-10-30T04:53:57.000Z
updated: 2026-10-30T05:54:00.000Z
indexable: true
---

# Binance hacker moves $1.4 billion of bitcoin into 19 wallets

CoinDesk, tracing the blockchain, reported that 18,270 bitcoin — about $1.4 billion — tied to the Binance hack has been split across 19 wallets, 17 of them…

Attributed sources: [CoinDesk](<https://www.coindesk.com/markets/2026/10/30/binance-hacker-splits-usd1-4-billion-of-bitcoin-into-19-wallets-that-no-one-can-freeze>)

## Key facts

CoinDesk, tracing the blockchain, reported that 18,270 bitcoin — about $1.4 billion — tied to the Binance hack has been split across 19 wallets, 17 of them holding exactly 1,000 BTC each, and that none of the coins had moved since Thursday night.
Evidence strength: Single source, 1 publisher group(s) (CoinDesk).
After site detection, observed returns were 5 minutes: -0.07% (Oct 30, 2026, 04:53 → Oct 30, 2026, 04:58, UTC; Gate · USDT); 1 hour: +0.28% (Oct 30, 2026, 04:53 → Oct 30, 2026, 05:53, UTC; Gate · USDT)
In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.27% (OKX · USDT; cutoff Oct 30, 2026, 04:53, UTC).

## Returns after site detection

| Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source |
| --- | --- | --- | --- | --- | --- |
| 5 minutes | -0.07% | -0.07% | 0.00 pp | Oct 30, 2026, 04:53 → Oct 30, 2026, 04:58 | Gate · USDT |
| 1 hour | +0.28% | +0.28% | 0.00 pp | Oct 30, 2026, 04:53 → Oct 30, 2026, 05:53 | Gate · USDT |

## Historical hourly baseline

| Metric | Value |
| --- | --- |
| Coverage | 100.0% (720/720) |
| Median absolute hourly return | 0.14% |
| 99th percentile of absolute hourly returns | 1.27% |
| BTC beta | 1.00 |
| Source / cutoff (UTC) | OKX · USDT / Oct 30, 2026, 04:53 |

## Claims and open questions

- CoinDesk's blockchain trace found all 18,270 hacked coins sitting in 19 wallets.
- Seventeen of the 19 wallets hold exactly 1,000 BTC each, according to the CoinDesk trace.
- None of the coins had moved since Thursday night, the CoinDesk trace showed.
- Which wallets or entities control the 19 holding addresses, and whether any exchange has flagged or labeled them, would clarify who could act on the funds.
- The hacker's intended next step for the 18,270 BTC would confirm whether the split is preparation for laundering or merely storage.

## Source evidence

- [Binance hacker splits $1.4 billion of bitcoin into 19 wallets that no one can freeze](<https://www.coindesk.com/markets/2026/10/30/binance-hacker-splits-usd1-4-billion-of-bitcoin-into-19-wallets-that-no-one-can-freeze>) — CoinDesk; published Oct 30, 2026, 04:50; received Oct 30, 2026, 04:53 (UTC).


## Recent BTC events and market reactions

- [Binance confirms hack with estimated $6.3 billion total impact](<https://whycoinmoves.com/en/events/bitcoin-bitcoin-price-briefly-slides-76-0f93286f21451c>) — Published Oct 30, 2026, 04:05 (UTC) · Single source (1 publisher) · Security · 5m +0.18% / 1h +0.67%
- [Binance hit by suspected $6.3 billion security breach as crypto prices slide](<https://whycoinmoves.com/en/events/bitcoin-6-billion-binance-hack-sends-fcc313aac54721>) — Published Oct 30, 2026, 04:00 (UTC) · Single source (1 publisher) · Security · 5m -0.09% / 1h +0.57%
- [Strategy reports record $20.91 billion operating income for Q3 2026](<https://whycoinmoves.com/en/events/bitcoin-strategy-mstr-posts-record-operating-dfa86d832cd858>) — Published Oct 29, 2026, 23:18 (UTC) · Single source (1 publisher) · General news · 5m -0.07% / 1h -1.96%
- [Bitcoin falls below $79,000 as suspected Binance hack roils markets](<https://whycoinmoves.com/en/events/bitcoin-bitcoin-price-slides-below-79-2a27845f43c1d7>) — Published Oct 29, 2026, 23:06 (UTC) · Multiple publishers (3 publishers) · Security · 5m +0.01% / 1h -1.21%
- [Bank of Russia approves NAUFOR as first self-regulatory body for crypto exchanges](<https://whycoinmoves.com/en/events/bitcoin-russia-approves-securities-group-oversee-87a7a164bdc4ca>) — Published Oct 29, 2026, 15:03 (UTC) · Single source (1 publisher) · General news · 5m +0.14% / 1h +0.70%
- [Full coin archive](<https://whycoinmoves.com/en/coins/bitcoin>)

## Research for this archive

- [Crypto hacks and price impact: Bybit and Cetus case studies](<https://whycoinmoves.com/en/research/crypto-security-exploits-and-evidence-evolution.md>)
- [Why is crypto moving? How to check the evidence behind a price explanation](<https://whycoinmoves.com/en/research/how-to-check-why-crypto-is-moving.md>)
- [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns](<https://whycoinmoves.com/en/research/hourly-returns-and-bitcoin-beta.md>)
- [Will Bitcoin go back up? Every crash since 2011 and its recovery time](<https://whycoinmoves.com/en/research/bitcoin-crash-recovery-time.md>)

Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations](<https://whycoinmoves.com/en/methodology>)
