You hold some crypto on Binance. On Thursday night you open the app to move it, and the app will not let you withdraw. You read that billions may have walked out of the exchange’s wallets. Then, on Friday morning, a message sits in your inbox: Security alert — verify your account and move your balance to a protected wallet. There is a button. The layout copies the app. But Binance did not send it, and the Binance hack is the reason it reached you.
Confirmation: Binance confirmed a security incident and a precautionary withdrawal pause. TechCrunch, BleepingComputer and on-chain analysts report the theft itself, and Binance has not yet confirmed it.
What we know about the Binance hack
On Thursday, October 29, 2026, billions of dollars in cryptocurrency moved out of several Binance hot wallets to a newly created Ethereum address. Hot wallets are the internet-connected wallets an exchange uses for day-to-day transfers, so they are the ones an attacker can reach.
A Binance spokesperson told TechCrunch that the company is “aware of reports of a potential security issue and are actively investigating,” and that user funds are safe. Spokesperson Ross O’Leary said Binance had “temporarily suspended withdrawals on multiple networks following a security incident as a precautionary measure.” Binance founder Changpeng Zhao, who is no longer running the exchange, said on X that it looked like a hack and that he expects user funds to be covered.
Two stablecoin issuers then moved. Tether froze roughly $1.56 billion in USDT tied to the activity, and Circle froze about $800 million in USDC.
The amount is disputed, and nobody has confirmed a final figure. On-chain watchers put at least $2 billion drained from the hot wallets, according to TechCrunch. BleepingComputer cites transaction analysis tracing about $3.48 billion across three wallets. Blockchain intelligence platform Arkham is tracking 55 addresses under an entity it labels “binance-hacker-1029” holding about $5.78 billion — but that is the value sitting in those wallets, and nobody says Binance lost all of it. For comparison, the largest crypto theft anyone has confirmed took about $1.5 billion from Bybit in 2025.
What was exposed, and what was not
This is the part most coverage skips, so read it closely.
Nobody has reported a leak of customer records. No outlet describes email addresses, names, phone numbers, dates of birth or documents changing hands. This looks like a theft of funds from company wallets, not a customer database for sale on a forum. Binance says customer money is safe.
So your personal data is probably not the thing at risk this week. Your attention is. And the next wave of mail wants exactly that.
Why the Binance hack fills your inbox with scam mail
Binance said it plainly in the same statement: users “should remain cautious of scams and should not trust unofficial links, messages, or requests for account information.”
Here is why that warning arrives with the news. A story this large tells every scammer in the world three useful things at once. Millions of people worry about one named company. Those people refresh their email for an update. And Binance paused withdrawals, so a message offering a way to move money sounds like the help they want.
Scammers do not need your leaked record to send that mail. They need a list, and plenty of lists already exist. Expect messages dressed as Binance support, as a “withdrawal restored” notice, as a compensation form, as an urgent wallet migration with a countdown. Some will arrive by text instead. The giveaway is the ask: a seed phrase, a password, a code read aloud, or a sign-in on a page you reached by tapping a link.
What to do now
Most of this has nothing to do with us.
- Go to the app, not the link. Open Binance yourself and read the official notice there. If a message is real, the app says so too.
- Share a seed phrase with nobody. No support team needs it. Anyone asking for one is stealing from you.
- Turn on the strongest sign-in your exchange offers, and use a passkey if it is available.
- Use a password manager so you use that exchange password on that account and nowhere else.
- Treat a countdown as a warning sign. Urgency is the oldest trick in the trade.
- Watch for the follow-up phish wearing the brand. It usually lands days after the headline, when attention has moved on.
How OptMsg changes this exposure
OptMsg would not have stopped what happened at Binance. That attack hit another company’s wallets, and nothing about an inbox reaches them. What an inbox changes is what gets to you afterwards.
Two things, at their real size. First, mail from a sender you have not approved goes to Trash, not your Inbox, and Trash auto-deletes after 30 days. The fake “move your funds” notice is from a sender you have not approved, so that is where it lands. If many OptMsg users have opted in to a sender, OptMsg flags a message from it as a Community Recommendation and sends you a push alert, so you see a real notice in Trash before it ages out.
Second, your OptMsg account has no password, so a password leaked from another site cannot be tried on your inbox. Your email is how most accounts get reset, so a door that a stolen credential cannot open keeps the accounts behind it shut too.
What this does not cover: a compromised device, a live phishing page you choose to sign in on, or somebody holding your unlocked phone. If you tap the link and type your details, an inbox cannot undo that. The argument is about which mail reaches you, and that is where it stops.
If that trade sounds right, you can create an OptMsg account and pick the username before somebody else does.
Create Your Account
Your Inbox. Your Rules.
Frequently asked questions
Was my Binance account data leaked in the Binance hack? Nobody has reported a customer data leak. Reporting so far describes cryptocurrency leaving company hot wallets, not a database of customer records. Binance says user funds are safe and the investigation continues.
How much was taken from Binance? The figure is disputed. On-chain watchers put at least $2 billion drained, analysis BleepingComputer cites traces about $3.48 billion, and Arkham is tracking wallets holding roughly $5.78 billion. Binance has not confirmed an amount.
Why am I getting Binance emails I did not sign up for? Because scammers follow the news. A named company plus millions of worried customers makes convincing bait, so fake support notices and wallet-migration forms go out while the story is hot.
Is it safe to click a link in an email about my exchange account? Treat it as unsafe. Open the exchange’s own app or type the address yourself. A real notice is in the app as well, so you lose nothing by skipping the link.
What should I do if I already entered my details on a fake page? Change the password on that account from the app, revoke active sessions, move funds if you can, and tell the exchange. If you shared a seed phrase, move the assets to a new wallet immediately.
Sources
- TechCrunch, October 29, 2026 — Binance pauses withdrawals as hackers suspected of stealing billions in crypto: https://techcrunch.com/2026/10/29/binance-pauses-withdrawals-as-hackers-suspected-of-stealing-billions-in-crypto/
- BleepingComputer, October 29, 2026 — Binance probes potential $5.8 billion crypto-theft hack: https://www.bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack/
Previous in Breach Breakdown: The Homeland Security Data Breach: 41,000 Work Emails Are Now Public
Next in Breach Breakdown: The Applebee’s Data Breach: A Database Password Sat Inside The App
