Binance confirmed a roughly $6.3B hot wallet hack on Oct 29, calling it its initial finding that a compromised DevOps engineer laptop gave access to a service container to submit unauthorized withdrawals, with no wallet private key leak found so far (post).
On chain the first Ethereum sweep left Binance hot wallet 14 at 20:24 UTC in 0x53bd…e2f3, about 167,464 ETH plus 1.615B USDT and 60+ other tokens to 0x5227…2f8c, followed by 28,000 ETH and 780M USDC moves. Early reports also described a Tornado Cash funded address and an EIP-7702 delegation minutes before, and trackers later tallied about $5.6B to $6.01B across Ethereum, Bitcoin, Tron and other chains.
Binance says about $3B is now frozen on chain with partners (post), up from the $2.54B it verified late Oct 29. That includes over $1.567B USDT frozen by Tether and about $823M USDC frozen by Circle, leaving ETH, 18,270 BTC and Tron assets as the still movable part.
Binance suspended deposits and withdrawals for security checks, said it revoked the affected authorization, is working with law enforcement, and will cover all losses via SAFU and company funds, with user funds safe (post). CZ separately posted it "does look like a hack" and that user funds are safe. BNB was about $717.51 on Binance spot, down about 4.4% in 24h, with BTC reported under $79k and about $627M to $629M in liquidations.