No. 10Friday, 30 October 20266 min read

23,581 bitcoin left exchanges after the Binance hack; most was the thief

The drain was $6,360m, 85% of everything stolen from crypto in 90 days.

BTC $77,376 -3.4%ETH $2,223 -4.1%SOL $96.31 -3.8%XRP $1.25 -3.1%

Good morning. Someone installed code on a Binance wallet at 20:21 UTC yesterday and took $6,360m out of it, the largest theft crypto has had, and the exchange paused withdrawals. Bitcoin fell 3.4% to $77,376 and every major followed. The number that matters is what left exchanges afterwards: 23,581 bitcoin, the most in 90 days.

The tape

24-hour change: BEAM +38.3%, MAGMA +35.8%, KNTQ +26.5%, HYPE +15.5%, XRP -3.1%, BTC -3.4%, SOL -3.8%, ETH -4.1%, BNB -5.8%, CRV -13.1% — Four gainers above 15% in a market down 4.6%. As of 10:06 UTC, 30 Oct 2026.

Bitcoin (BTC) $77,376, -3.4% on the day, -5.0% on the week, -6.6% over 30 days. Ether (ETH) $2,222.88, -4.1% and -16.6%. Solana (SOL) $96.31, -3.8% and -18.1%. XRP $1.25, -3.1% and -16.4%. BNB, the token of Binance and its chain, $701.80, -5.8%, the worst major. Crypto value fell 4.6% to $2.62tn; bitcoin is 59.3% of it.

The gainers ignored all of it. Hyperliquid (HYPE), the on-chain perpetual futures exchange, rose 15.5% to $91.49 after the owner of the New York Stock Exchange said it would build a regulated US venue on it. Kinetiq (KNTQ), which stakes HYPE for depositors, rose 26.5% to a record $0.5714. Beam (BEAM), a games token, rose 38.3%. Curve DAO (CRV) fell 13.1% while the Curve exchange's own volume rose 999.0%.

Where to look

Six things today, in order: the drain and the freezes, on-chain venues took the flow, NYSE's owner picks Hyperliquid, November options want puts, the smallest ETF session, dollars frozen for good.

Value taken per exploit over 90 days: Binance $6,360m, Bitget $387m, Liquid Network $320m, Tectonic $125m, Ledger $93m, the other 112 incidents $209m — One exploit was 85% of the 90-day total of $7,494m. As of 10:11 UTC, 30 Oct 2026.

01
The Binance drain was $6,360m, 85% of the $7,494m taken in 117 exploits since 1 August.
An outside address installed code on the wallet labelled Binance 14 through Ethereum's wallet-delegation feature at 20:21 UTC, then moved 167,464 ether and 1.615bn Tether dollars three minutes later; 780m USD Coin left a second wallet. The next-largest exploit of the 90 days, Bitget in September, was 16 times smaller.
WatchBinance confirming a loss figure and restarting withdrawals.
02
On-chain trading hit a 90-day high while the largest exchange was shut: $15.07bn of decentralised-exchange volume on 29 October and $16.90bn on 30 October, against a $9.07bn median day.
Uniswap V3's volume rose 409.5% in a day to $4.74bn and its fees 702.3% to $7.94m. All crypto protocols earned $123.6m of fees on 30 October against $66.5m on 28 October.
WatchVolume holding above $10bn once Binance restarts withdrawals.
03
Intercontinental Exchange, which owns the New York Stock Exchange, will build a US-regulated perpetual futures venue on Hyperliquid, and HYPE rose 15.5%.
ICE takes a minority stake in Trade[XYZ] and will run the markets through registered futures brokers; the launch needs approval and has no date. Hyperliquid's own book already holds $2.01bn of open interest in HYPE, its third-largest market behind bitcoin's $3.11bn and ether's $2.34bn, and four times Solana's $517m.
WatchHYPE's record of $97.96, set 23 September.

The deep dive

23,581 bitcoin left exchanges on 29 October, the largest one-day net withdrawal in 90 days and four standard deviations above the median day of 1,027 coins. Most of it was the thief. We took the daily value flowing into and out of exchange-held addresses, netted it, and divided by the day's price to count coins rather than dollars.

Net bitcoin leaving exchange-held addresses per day, 1 August to 29 October 2026: 29 October at 23,581 coins against a median of 1,027

The attacker's bitcoin is reported at $1.4bn, about 17,900 coins at Thursday's price, split into 19 wallets no issuer can freeze. Subtract it and 5,681 coins left, the fifteenth-largest day of the 90. That is a busy Thursday, not a run.

Ether went the other way. 304,468 ether left, 5.4 standard deviations from a median day of minus 52, and about 195,460 were the attacker's. The 109,008 left over are still the largest ether withdrawal of the 90 days, ahead of 106,356 on 22 October.

The first objection is that falling prices flatter a dollar figure. It fails: these are coins, and 23,581 beats the 19,114 of 20 August. The second holds better. Exchange balances barely moved: 2,660,348 bitcoin against 2,686,232 thirty days ago, down 0.96%, and 15.281m ether against 15.322m, down 0.27%. One loud day does not empty an exchange.

What would prove this wrong: today's flow. If another 20,000 bitcoin leave once the attacker's transfers are done, it is depositors and not the theft.

The news

Polymarket halted trading for about an hour on 29 October after a third-party provider was compromised, and about $2.65m left the platform. The halt blocked sell orders, so traders could not exit; it has pledged to make them whole. Senators Warren and Curtis have given it and Kalshi until 3 November to show their election safeguards work.
Coinbase earned $590m of transaction revenue in the third quarter against the $527m analysts expected, and almost all of its $719m net income came from marking up crypto it owns. Total revenue was $1.216bn, down 35% on the year; $715m of holding gains did the rest. COIN fell 5.0% to $160.59.
Strategy reported $19.5bn of third-quarter net income on bitcoin gains, and its chief financial officer, Andrew Kang, resigned. MSTR fell 2.9% to $141.62 on a record quarter, which says the market prices the bitcoin and not the company.
CoinDCX, India's largest exchange, stopped taking new futures positions because the Binance outage drained the liquidity it hedges with. Across the market $1.5bn of leveraged bets were closed out. One wallet became every exchange's funding problem inside twelve hours.

Token talk: BNB

Annualised perpetual funding on Hyperliquid: BNB -31.1%, ONDO +6.3%, PAXG +9.5%, BTC +11.0%, ETH +11.0%, SOL +11.0%, ZEC +13.1%, XMR +16.4%, ZRO +20.8%

BNB is the token of Binance, the exchange that issued it, and of BNB Chain. It pays trading fees on the exchange and transactions on the chain, and Binance destroys a share of the supply each quarter: the holder owns a shrinking claim on the chain's use, not on the firm's earnings.

It is here because the exchange behind it lost $6,360m overnight and BNB fell 5.8% to $701.80, the worst major. Market value is $92.27bn, the fourth-largest token, down 5.7% on the week, 7.6% over 30 days and 48.8% below its high. BNB Chain holds $14.26bn of dollar tokens.

The derivatives market has taken a side. BNB's perpetual on Hyperliquid pays longs 31.13% a year, the only one of 36 markets above $20m of open interest where shorts pay; 29 of the rest sit at the 10.95% baseline. On OKX the rate is -37.69% while accounts there run 2.79 long per short, so the shorts paying are the bigger ones. Watch: withdrawals restarting everywhere, and a loss figure Binance publishes and covers.

Token Tape is written by an automated research desk built and supervised by Eric Manoukian. Figures are pulled live each morning and errors are possible. Nothing here is investment advice. The editor may hold positions in assets discussed.

Get the next edition at 06:30 ET.