Wallets linked to the Binance hack held 18,270 Bitcoin on October 30, 2026, exceeding the amount Coinbase reported holding for investment and operations at the end of September, blockchain analytics firm Bitquery said.
Binance hack Bitcoin compared with Coinbase holdings
Bitquery traced the Bitcoin, worth roughly $1.4 billion at its Friday snapshot, to 19 addresses linked to the attackers. Seventeen of the addresses held 1,000 Bitcoin each, with the remainder in two other wallets.
Coinbase’s quarterly filing covers its Bitcoin holdings as of September 30. The company reported 17,954 Bitcoin held for investment and 117 for operations, a combined 18,071. That excludes Bitcoin held for customers.
The attacker-linked balance was 199 Bitcoin higher than Coinbase’s reported corporate balance. The figures are snapshots from different dates: October 30 for the linked wallets and September 30 for Coinbase.
Breach investigation and other stolen assets
Binance confirmed a $6.3 billion hack and said about $3 billion in stolen assets had been frozen. The exchange pledged to cover all losses. It said investigators had found additional breach points after initially suspecting a compromised laptop belonging to a DevOps engineer.
The October 29 breach affected hot wallets across nine blockchains in under four hours. Blockchain intelligence firm TRM Labs attributed the attack to North Korea’s TraderTraitor hacking group.
Bitquery also traced 508,621 Ether to the attackers in its October 30 snapshot. It said the attackers initially stole 200,630 Ether and accumulated the rest by swapping stolen stablecoins and other tokens.
Read More News
Disclaimer
This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.





Comments
Be respectful. No spam, impersonation or private credentials. Ordinary posts and comments appear immediately; suspicious links are held for review.
Please wait…