Binance identified a compromised DevOps laptop as the potential initial attack vector for the October 29, 2026 exploit of Binance's hot wallets

Overview Debates Related claims Topics Sources

Cc9f267dcNews eventClaim

Bitcoin staking platform b14g lost approximately 97 million CORE tokens, valued at $1.47 million, during an exploit

The attacker behind the October 31, 2026 b14g exploit exploited b14g by submitting 99 zero-value withdrawal requests against unfunded staking positions, which Core's staking contract interpreted as instructions to withdraw entire balances

b14g paused its affected smart contracts at 10:35 UTC on October 31, 2026, approximately 66 minutes after the initial unauthorized withdrawals in the b14g exploit occurred

b14g confirmed that the October 31, 2026 b14g exploit was limited to CORE deposits and that Bitcoin staked through the protocol remained secure on the Bitcoin blockchain

Exchange partners froze approximately 9 million stolen CORE tokens linked to the b14g exploit attacker following the October 31, 2026 exploit of b14g

Stablecoin issuers Tether and Circle froze more than $2.3 billion in stolen stablecoins following the $6.4 billion Binance hack on October 29, 2026

Attackers began draining approximately $6.4 billion from crypto exchange Binance at 4:05 p.m. Eastern Time on Thursday, October 29, 2026

Binance pledged to cover all losses from the $6.4 billion security breach on October 29, 2026 using company funds and an emergency reserve

Bitquery reported that the contract logic exploited in the October 31, 2026 b14g breach had been in place for approximately 17 months and required no compromised administrator key

Blockchain analytics firm Bitquery reported that the $1.47 million b14g exploit occurred at 09:29 UTC on October 31, 2026, draining 91 staking positions in a single transaction

Following the October 31, 2026 b14g exploit, the b14g exploit attacker transferred 23 million stolen CORE tokens across newly created wallet addresses before b14g paused affected contracts

b14g confirmed that CORE tokens staked directly with validators or through non-b14g protocols were not affected by the October 31, 2026 b14g exploit

Bitquery reported that CORE tokens stolen in the b14g exploit moved through intermediary addresses linked to exchanges Bybit, Gate.io, and MEXC, leaving 68 million CORE unmoved across three wallets

Bitquery identified a transaction fee provider that received 11 million stolen CORE tokens from the b14g exploit attacker and forwarded them to an MEXC deposit address

THORChain's emergency pause halted trading on chains including Tron, Ethereum, and Bitcoin, temporarily preventing further laundering by the October 29, 2026 Binance hackers

Onchain analyst SomaXBT said North Korean hackers laundered approximately $242 million of stolen Binance funds on the Tron blockchain over two days following the October 29, 2026 Binance hack

Stablecoin issuers Tether and Circle froze between $2.7 billion and $3 billion in stolen stablecoins following the October 29, 2026 Binance attack

Threshold Network stated on October 31, 2026 that no funds were lost and investigators found no unauthorized token minting on the tBTC bridge

Solana Mobile patched a bug that allowed applications that had never been formally published to be pulled into curated sections of Solana Mobile's dApp Store

North Korean hackers attributed to the state-sponsored TraderTraitor group stole approximately $6.3 billion from Binance on October 29, 2026, marking the largest cryptocurrency hack on record