--- title: "Strangers send sub-dollar payments to Binance hacker wallets with messages" description: "CoinDesk reported that the 19 wallets holding 18,270 stolen BTC have received nothing since Thursday except payments worth under a dollar, each carrying a…" language: en canonical: "https://whycoinmoves.com/en/events/bitcoin-strangers-are-begging-binance-hacker-1517cb068e9a36" published: 2026-11-02T05:19:57.000Z updated: 2026-11-02T06:20:00.000Z indexable: true --- # Strangers send sub-dollar payments to Binance hacker wallets with messages CoinDesk reported that the 19 wallets holding 18,270 stolen BTC have received nothing since Thursday except payments worth under a dollar, each carrying a… Attributed sources: [CoinDesk]() ## Key facts CoinDesk reported that the 19 wallets holding 18,270 stolen BTC have received nothing since Thursday except payments worth under a dollar, each carrying a message. The messages ranged from pleas to laundering pitches to a token shill, according to the report. Evidence strength: Single source, 1 publisher group(s) (CoinDesk). After site detection, observed returns were 5 minutes: +0.13% (Nov 2, 2026, 05:19 → Nov 2, 2026, 05:24, UTC; Gate · USDT); 1 hour: -0.02% (Nov 2, 2026, 05:19 → Nov 2, 2026, 06:19, UTC; Gate · USDT) In the preceding 30 days, the 99th percentile of absolute hourly returns was 1.23% (OKX · USDT; cutoff Nov 2, 2026, 05:19, UTC). ## Returns after site detection | Window | Return | BTC | Difference from BTC | Actual sampled interval (UTC) | Source | | --- | --- | --- | --- | --- | --- | | 5 minutes | +0.13% | +0.13% | 0.00 pts | Nov 2, 2026, 05:19 → Nov 2, 2026, 05:24 | Gate · USDT | | 1 hour | -0.02% | -0.02% | 0.00 pts | Nov 2, 2026, 05:19 → Nov 2, 2026, 06:19 | Gate · USDT | ## Historical hourly baseline | Metric | Value | | --- | --- | | Coverage | 100.0% (720/720) | | Median absolute hourly return | 0.14% | | 99th percentile of absolute hourly returns | 1.23% | | BTC beta | 1.00 | | Source / cutoff (UTC) | OKX · USDT / Nov 2, 2026, 05:19 | ## Claims and open questions - CoinDesk reported that the 19 wallets holding 18,270 stolen BTC have taken in nothing since Thursday except payments worth under a dollar. - According to CoinDesk, each of the small payments carried a message, ranging from pleas to laundering pitches to a token shill. - What the messages attached to the sub-dollar payments specifically asked for, beyond the report's description of pleas, laundering pitches and a token shill. - Whether the 18,270 stolen BTC in the 19 wallets has moved, which on-chain data or an exchange notice would confirm. ## Source evidence - [Strangers are begging the Binance hacker for bitcoin, one ‘help me bro’ at a time]() — CoinDesk; published Nov 2, 2026, 05:18; received Nov 2, 2026, 05:19 (UTC). ## Recent BTC events and market reactions - [BTCPay urges users to shut down servers after reports of drained wallets]() — Published Nov 2, 2026, 04:41 (UTC) · Single source (1 publisher) · Security · 5m -0.06% / 1h -0.08% - [Bitcoin recovers toward $79,000 as markets absorb crypto's largest hack]() — Published Nov 2, 2026, 04:42 (UTC) · Single source (1 publisher) · Security · 5m +0.02% / 1h -0.07% - [US spot bitcoin ETFs see $643 million outflow after Binance hack]() — Published Nov 1, 2026, 16:01 (UTC) · Multiple publishers (3 publishers) · Security · 5m +0.01% / 1h +0.16% - [Binance begins phased crypto withdrawals, starting with bitcoin, after $6.3 billion hack]() — Published Nov 1, 2026, 10:35 (UTC) · Single source (1 publisher) · Security · 5m -0.02% / 1h -0.16% - [Strive CEO says Binance hack hasn't changed his long-term Bitcoin case]() — Published Oct 31, 2026, 15:26 (UTC) · Single source (1 publisher) · Security · 5m +0.09% / 1h +0.13% / 24h +0.75% - [Full coin archive]() ## Research for this archive - [Crypto hacks and price impact: Bybit and Cetus case studies]() - [Why is crypto moving? How to check the evidence]() - [Altcoin beta to Bitcoin: BTC, ETH, SOL and DOGE hourly returns]() - [Will Bitcoin go back up? Every crash since 2011 and its recovery time]() Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. [Methods and limitations]()