The first alarm came from outside the exchange. Blockchain researcher Spreek posted on X that holdings sitting in an Ethereum wallet linked to Binance had been sent to an address created shortly beforehand, through a contract call that Spreek said had been paid for via Tornado Cash. Cointelegraph reported that Spreek later saw wallets connected to those transfers offloading USDT on decentralized venues.
That sequence is why the story moved prices before anyone had counted a loss. An exchange balance leaving for a fresh address, then being sold, is the pattern traders associate with a theft, but no figure for stolen funds has been confirmed by Binance.
Key numbers
- $1.8 billion approximate value of stablecoins reportedly frozen by Tether and Circle, according to Cointelegraph
- $971 million the amount frozen by Tether, as described by Binance co-founder Changpeng Zhao
- $823 million the amount frozen by Circle, as described by Zhao
Binance has confirmed an investigation, not a loss
A Binance spokesperson told Cointelegraph on Thursday that the company was examining reports of a possible security issue and had so far confirmed no effect on customer balances. Security staff were reviewing the activity, the spokesperson said, and the exchange would share more once details were verified.
Zhao went further. He called the activity a hack and said he expected user funds to be covered in full. He co-founded Binance but no longer runs it, so that is his reading of the events rather than a finding by the exchange.
None of the reports I read explains how the wallet was accessed, how much left it, or who was behind the transfers. The freezes by Tether and Circle are described as reported amounts, not as confirmed totals from the two issuers.
Why frozen stablecoins change the arithmetic
In plain words: a stablecoin is a token an issuer promises to redeem for a fixed amount of currency, and the issuer keeps control of the ledger it runs on. That lets it blacklist an address and lock the tokens in place, so a large balance can sit in a wallet that nobody can spend. Coins such as bitcoin or ether have no issuer, so nobody can freeze them the same way.
That is the practical difference here. Roughly $1.8 billion of the assets in question were reportedly immobilized the same day, while the market was still trying to work out what had happened.
CoinDesk reported that the potential multi-billion breach was hitting crypto markets. Neither report gives a price level or a percentage move for the major tokens, so the size of the reaction is not something the sources pin down.
What the two reports agree on is narrow: suspicious transfers out of a Binance-linked Ethereum wallet, an investigation opened by the exchange, and large stablecoin freezes by two issuers. Everything beyond that, including whether customer funds were touched, remains unverified.