Cc9f267dcClaimOn October 31, 2026, the FBI asked THORChain node operators and decentralized finance services to block transactions linked to a roughly $6.3 billion Binance hack that occurred on October 29, 2026AgreeDisagree
Cc9f267dcClaimTHORChain node operators initiated an automatic network trading pause after the October 31, 2026 one-block Ethereum reorg refund bug caused an extra 10 Ether payout from THORChain's vaultAgreeDisagree
Cc9f267dcClaimAnalyst SomaXBT estimated that transfers of funds stolen in the October 29, 2026 Binance hack included nearly $48 million through Relay, $44 million through THORChain, $32.1 million through Chainflip, and $16 million through SymbiosisAgreeDisagree
Cc9f267dcClaimAnalyst SomaXBT estimated that around $242 million of funds stolen in the October 29, 2026 Binance hack moved via the Tron blockchain in two days, including $140 million transferred through cross-chain services like Relay, THORChain, Chainflip, and SymbiosisAgreeDisagree
Cc9f267dcClaimTHORChain technical co-founder Chad Barraford stated that reaching the two-thirds node supermajority consensus required to halt suspicious network routes linked to the $6.3 billion Binance hack takes days or weeksAgreeDisagree
Cc9f267dcClaimThe FBI attributed the October 29, 2026 Binance theft to TraderTraitor, a North Korean state-linked hacking operation, and identified 608 Ethereum, 19 Bitcoin, and one Solana address used by the attackersAgreeDisagree
Cc9f267dcClaimBlockchain analytics firm Chainalysis reported that THORChain's network halt inadvertently delayed North Korean hackers attempting to launder funds stolen in a $6.3 billion Binance hackAgreeDisagree
Cc9f267dcClaimPangolin Intelligence founder Jonty disputed a Nov. 2 Arkham report alleging direct Binance deposits by hackers, explaining that transactions were executed by arbitrage traders utilizing THORChain Asgard vaultsAgreeDisagree
Cc9f267dcClaimThe FBI omitted Tron blockchain addresses from its list of flagged wallets despite Tron being widely used to move funds stolen in the October 29, 2026 Binance hackAgreeDisagree
Cc9f267dcClaimPangolin Intelligence founder Jonty stated that on days of major hacks attributed to North Korea's TraderTraitor group, over 99% of THORChain volume was illicit launderingAgreeDisagree
Cc9f267dcClaimDuring the October 29 Binance hack, the attacker pre-signed 50 transactions with differing nonces to execute a transaction on the Binance hot walletAgreeDisagree
Cc9f267dcClaimFollowing the October 29 Binance hack, automated scripts distributed funds from the original 10 attacker wallets across over 100 new addresses, then fan-out split them across more than 400 addressesAgreeDisagree
Cc9f267dcClaimOn Thursday, October 29, at approximately 4:00 PM Eastern Time, Binance suffered a hack that drained approximately $6.3 billion to $6.4 billion in assetsAgreeDisagree
Cc9f267dcClaimThe attacker behind the October 29 Binance hack borrowed approximately 20,000 Ether against collateral on the Aave lending protocolAgreeDisagree
Cc9f267dcClaimAccording to Chainalysis data, North Korea-linked operations accounted for 15% of total reported cryptocurrency hack losses in 2021AgreeDisagree
Cc9f267dcClaimThe October 29 Binance hack transferred over $6 billion in cryptocurrency within a 20-minute windowAgreeDisagree
Cc9f267dcClaimThe multi-chain withdrawals during the October 29 Binance hack compromised Binance's internal transaction signing infrastructure rather than leaking the underlying private keysAgreeDisagree
Cc9f267dcClaimFollowing the October 29 Binance hack, the Aave community voted to freeze Aave lending markets across all networks to prevent the attacker from swapping or borrowing against stolen collateralAgreeDisagree
Cc9f267dcClaimFollowing the October 29 Binance hack, asset issuers and protocols including Circle, Tether, and the Arbitrum Security Council froze approximately $3 billion of the stolen fundsAgreeDisagree
Cc9f267dcClaimBinance's initial public investigation into its October 29, 2026 hack stated that a compromised DevOps engineer's laptop allowed an attacker to access a service container and execute unauthorized withdrawal transactionsAgreeDisagree