Binance puts the Oct 29 drain at about $6.3B across hot wallets, calling it its largest theft. Its first note blamed a compromised DevOps laptop reaching a service container to submit withdrawals with no private key leak, then its Oct 30 update says investigators found additional breach points in what it calls a complex attack.
About $3B is frozen on chain so far, up from $2.54B, including 1.567B+ USDT by Tether and 800M+ USDC by Circle plus Ripple, Arbitrum and WLFI freezes. Frozen means blacklisted in place, not recovered. About $3B remains liquid, mostly BTC and ETH.
Binance says it will cover all losses from SAFU and company funds and user funds are safe. In its latest post it says it reserved over $6.34B of company funds, $5B already held in the impacted token assets.
Withdrawals stay paused for a security revamp, expected back in about 45 hours from the Oct 30 update, while deposits work normally and outflows stopped when withdrawals were paused. Aave says its contracts are unaffected, V3 and V4 DAO markets are frozen, positions stay overcollateralized, including the reported 60M USDT collateral for 19,762 ETH borrowed by the hacker. BNB quotes about $702.8 on Binance spot, down about 5.3% in 24h.