Blockchain network THORChain halted trading on 10 of its 13 chains over the weekend of October 31 to November 1, 2026, after being used by the Binance attacker to route funds.

Overview Debates Related claims Topics Sources

Attackers initially swapped 234 million stolen USDT for TRX on SunSwap, using approximately 7,700 TRON network addresses before moving funds off TRON.

An October 31, 2026 API snapshot showed 6.3 percent of Jupiter Lend's 441 million USDC in vault deposit claims was immediately withdrawable.

A Jupiter Lend API snapshot at 7:14 a.m. ET on October 30, 2026, showed 418.5 million USDC in Earn deposit claims against an immediately withdrawable balance of 3.35 USDC.

The conversion of stolen Solana tokens into Bitcoin marked an expansion of laundering routes after temporary holding wallets on the Tron network were largely emptied.

Aave's frozen Ethereum Core reserve holds about $136.3 million of tBTC.

Jupiter Lend, developed with Fluid, deploys Earn deposits into active loans to supply its Borrow and Multiply features, exposing capital to redemption delays during market panics.

Bitquery reported that Jupiter Lend's available USDC withdrawal balance dropped to $88.89 at 16:18 UTC on October 30, 2026, against $416 million owed to depositors.

The Binance attackers swapped 908,793 stolen PROM tokens valued near $5 million through a Uniswap V2 liquidity pool, receiving only 0.0316 Ether worth $71 due to low liquidity.

The Binance attackers converted over 130 stolen altcoins across Ethereum-compatible networks into approximately 123,400 Ether worth $277.26 million and 1.69 million USDC.

On-chain analysts estimated that despite issuer freezes, the Binance attackers retained control of roughly $3.24 billion to $3.5 billion in stolen cryptocurrency.

At 09:25:56 UTC on October 31, 2026, Jupiter Lend's API listed 221 million USDC under `withdrawableUntilLimit` alongside 29 million USDC in actual `withdrawable` funds.

In the first four days following the Binance hack, attackers utilized roughly 12,000 temporary wallets across 11 blockchains and conducted over 40,000 transactions to obscure funds.

Jupiter Lend's reported withdrawable USDC liquidity reached approximately 29 million USDC at 09:25:56 UTC on October 31, 2026, accounting for 6.6 percent of total assets.

The Federal Bureau of Investigation, Secret Service, and IRS Criminal Investigation requested cryptocurrency services and operators to block transactions linked to identified Binance attacker wallet addresses.

Centralized cryptocurrency exchange Gate froze two accounts and cooperated with law enforcement after the Binance attackers deposited approximately $250,000 in stolen funds onto the platform.

Asset issuers including Tether and Circle froze approximately $3 billion in stolen cryptocurrency assets shortly after the October 29, 2026 Binance breach.

Binance pledged to cover customer losses using company resources and emergency reserves, having replenished about 95% of affected assets as of November 3, 2026.

An API snapshot from Jupiter Lend's Earn product recorded 31.23 million USDC withdrawable out of 445.77 million USDC in total assets at 02:37:21 UTC on October 31, 2026.

The Binance attackers moved 486,970 Solana tokens worth roughly $46.4 million within one hour using Relay Protocol to execute cross-chain swaps into Bitcoin.

Jupiter Lend stated that depositors seeking full exits during high utilization must wait for borrower loan repayments or new deposits to restore pool liquidity.