Binance confirms hot wallets were drained Oct 29 for about $6.3B, the largest crypto theft on record, starting from a compromised DevOps engineer laptop reaching a service container, with later additional breach points found and no private key leak found so far. Binance puts frozen assets at about $3B, up from $2.54B, with Tether, Circle and others freezing USDT/USDC.

Binance confirms hot wallets were drained Oct 29 for about $6.3B, the largest crypto theft on record, starting from a compromised DevOps engineer laptop reaching a service container, with later additional breach points found and no private key leak found so far. Binance puts frozen assets at about $3B, up from $2.54B, with Tether, Circle and others freezing USDT/USDC.

The main Ethereum collector 0x5227…2f8c is labeled Binance Hacker on Arkham and still shows about $2.11B on Ethereum alone in current balances, plus positions on Avalanche, Polygon, Optimism and Base. Forwarded claims of ~167k ETH swept via EIP-7702 delegation from Binance 14, ~18,270 BTC across 19 wallets, and ~$158M of PEPE, UNI, ENA, LINK, AAVE, ONDO, WLD swapped to ~70,480 ETH are author claims in the posts, not verified in this read, and TRM/Chainalysis attribution to North Korea TraderTraitor is also reported via news wire, not by Binance.

COTI was named in the dump watchlist as being sold/monitored, not as fully dumped. COTI Token 0xDDB3…7555c5 trades at about $0.00961 on Binance spot, down about 8% in 24h, with $2.3M 24h volume and $146k reserve in the main Uniswap v2 COTI/WETH pool.

Binance says it reserved over $6.34B of company funds with $5B already held in the exact impacted tokens and is buying the rest via market and OTC, and will cover all losses from SAFU plus company funds. Binance Withdrawals remain paused for a security revamp expected in about 45 hours, deposits work normally. The sources do not name a verified COTI sale amount or tx from the attacker wallet.