Binance Hack Fears Shake Crypto: $2.8B Outflows Reported

Reporting cutoff: October 29, 2026, 20:59 UTC.
Key Takeaways
- Researchers flagged large transfers from Binance-labeled wallets.
- Etherscan shows a 780 million USDC transfer.
- Reported cross-chain totals remain preliminary and unverified.
- Wallet movements alone do not establish theft.
The Walter Bloomberg account reported $2.77 billion in outflows across five blockchains, explicitly describing the suspected hack as unconfirmed. SolanaFloor subsequently reported almost $3 billion in movements and repeated that qualification.
Those estimates have not been independently reconciled across the five chains. The Ethereum transactions reviewed for this article confirm asset movements, but do not establish whether the transfers were authorized.
Crypto prices also fell as the reports circulated: Bitcoin dropped below $78,500, Ethereum below $2,250, Solana below $96 and XRP below $1.25. The timing alone does not establish that the suspected incident caused the declines.
What the Ethereum transactions show
The alerts identify the receiving address 0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c. Its history shows funds arriving from several addresses carrying Binance labels on Etherscan.
| Time, UTC | Transaction details |
|---|---|
| 20:24:23 | Transaction involving Binance 14: approximately 167,464.2 ETH and 63 ERC-20 token transfers, including about 1.6 billion USDT, to the flagged address. |
| 20:41:23 | 780 million USDC transfer from the address labeled “Binance: Hot Wallet 34” to the same recipient. |
These transfers should not be added to the reported $2.77 billion total as separate losses. They may already form part of the estimates circulating online, and repeated movements of the same assets can inflate an unreconciled tally.
Researchers raise concerns, but qualify their claims
In his initial alert, on-chain investigator Spreek said a Binance wallet appeared to have been emptied into a new externally owned address. He also alleged that the contract call had been funded through Tornado Cash. That funding claim has not been independently verified for this article.
Spreek added in the same thread that routine wallet maintenance remained a possible explanation, although he considered the activity suspicious.
Developer foobar described a likely ongoing compromise, pointing to the additional 780 million USDC movement. His assessment is a researcher’s interpretation of the transactions, rather than confirmation from Binance.
Trader Michaël van de Poppe also circulated the potential $2.8 billion hack claim, citing the Walter Bloomberg post. That post amplifies the same initial estimate rather than supplying a separate loss calculation.
What remains unconfirmed
No statement confirming a hack was visible on Binance’s main X timeline when checked for this report. The recipient’s controller, the authorization behind the transfers and any final customer-loss figure remain unverified.
The distinction is material: Etherscan records transfers and address labels, but cannot by itself establish whether an exchange authorized a movement. Confirmation requires evidence about control of the destination and the circumstances of the transactions.
This is a developing story. Reported outflow estimates are preliminary and should not be treated as confirmed stolen funds.
This story was originally published by Coindoo. Read the original article.





