The 18,270 Bitcoin stolen directly from Binance remained unmoved in 19 addresses, while the Bitcoin mixed through CoinJoin came from assets converted after the October 29, 2026 theft.

Overview Debates Related claims Topics Sources

U.S. federal prosecutors initiated civil forfeiture proceedings to recover approximately 127,271 Bitcoins, valued at about $14 billion to $15 billion, connected to Prince Group

Babylon submitted a governance proposal on October 14, 2026 to add native Bitcoin collateral to Aave V4 using Trustless Bitcoin Vaults

Kalshi expanded into equity perpetual futures after previously launching bitcoin perps in May 2026 and gold and silver perps in September 2026

Prediction market pricing following the regulatory withdrawal of the $250 crypto travel rule proposal reflected increased confidence in Bitcoin reaching higher price thresholds by the end of 2026

New Market Trading CEO Frank Hepworth stated that bitcoin lending yields of 1% to 4% fail to justify derivative, counterparty, and smart contract risks.

Between November 1 and early November 2, 2026, hackers passed roughly 28 Bitcoin worth $2.2 million through 18 CoinJoin privacy transactions using the WabiSabi protocol.

The Bank of Korea survey includes a scenario asking financial institutions to assess operational risks stemming from a steep decline in Bitcoin prices accompanied by a prolonged slump in trading volume.

Elliptic reported on November 2, 2026 that stolen Binance assets were laundered across roughly 12,000 wallets and over 40,000 transactions spanning 11 blockchains, averaging one new wallet every 25 seconds.

Frank Hepworth warned that covered-call strategies on bitcoin during bull markets risk having assets sold at option strike prices, forfeiting upside potential.

The conversion of stolen Solana tokens into Bitcoin marked an expansion of laundering routes after temporary holding wallets on the Tron network were largely emptied.

On-chain analysts estimated that despite issuer freezes, the Binance attackers retained control of roughly $3.24 billion to $3.5 billion in stolen cryptocurrency.

Blockchain analytics firm Elliptic identified early signs of bitcoin mixing by the Binance attackers, with approximately 28 bitcoin worth $2.2 million passing through 18 mixing transactions by November 2, 2026.

The Binance attackers moved 486,970 Solana tokens worth roughly $46.4 million within one hour using Relay Protocol to execute cross-chain swaps into Bitcoin.

The stolen Premia Labs assets were bridged from Arbitrum to Ethereum before being converted into Bitcoin using cross-chain platforms Chainflip and NEAR Intents.

Elliptic determined that regular time intervals and fixed transfer amounts in the Binance hack laundering were driven by conventional automation scripts rather than artificial intelligence software.

Attackers used lending vaults to deposit crypto assets from one address and withdraw to others without direct wallet transfers, alongside Thorchain cross-chain swaps.

Embedded messages attached to transactions sent to the Binance attacker wallets included phishing links mimicking THORChain swap sites, promotions for the $NST token, and requests for treats.

Bitcoin deposited through b14g was unaffected by the October 31, 2026 exploit, remaining time-locked on the Bitcoin blockchain.

Blockchain analytics traced stolen CORE tokens moving through wallets connected to infrastructure at Bybit, Gate.io, and MEXC following the October 31, 2026 b14g exploit.

On-chain investigator ZachXBT publicly identified and flagged $106 million in suspicious on-chain transactions linked to the Crédit Mutuel theft on November 2