Treat

Founder

SAFU

<img width="1920" height="1440" src="https://financefeeds.com/wp-content/uploads/2026/10/binance-hack-statement-edited.jpg" alt="Binance-branded T-shirt and tote bag" title="Binance Rewrote Its Hack Statement Twice in 13 Minutes 79">
Update: Binance Withdrawals to Resume Within 48 Hours, Deposits Back to Normal. <a href="https://financefeeds.com/binance-withdrawals-resume-48-hours/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Hack Hits $6.3B, Traced to a Hacked DevOps Engineer’s Laptop. <a href="https://financefeeds.com/binance-hack-6-3-billion-devops-laptop/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Freezes $3B as Recovery Races Toward the Hack Total. <a href="https://financefeeds.com/binance-hack-3-billion-frozen/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Will Cover All Hack Losses, Suspends All Deposits and Withdrawals. <a href="https://financefeeds.com/binance-will-cover-all-losses-hack/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Update: Binance Halts Withdrawals After Suspected Hack, Says Funds ‘Remain Safe’. <a href="https://financefeeds.com/binance-halts-withdrawals-suspected-hack/" rel="noopener noreferrer nofollow">Read the latest on the Binance hack</a>.
Binance has issued its first official statement on the <a href="https://financefeeds.com/binance-hack-3-3b-hot-wallets-drained-tether-circle-freeze/" rel="noopener noreferrer nofollow">suspected Binance hack that drained about $3.3 billion from its hot wallets</a>, and the most telling part is not what the post says now but how it got there. FinanceFeeds reviewed the post's edit history on X: in 13 minutes, Binance's wording on customer money moved from "not confirmed" to "completely safe," while the exchange still has not used the word "hack."
The change matters because it is the only official Binance position on record. Founder Changpeng Zhao, who no longer runs the exchange, called the incident a hack before Binance said anything at all.
<h2 id="three-versions-of-one-binance-statement">Three Versions of One Binance Statement</h2>
The <a href="https://x.com/binance/status/2115918888429133902" rel="noopener noreferrer nofollow">@binance post</a> first went up at 21:16 UTC on 29 October. It read: "Our teams are aware of reports of a potential security issue and are actively investigating. At this stage, we have not confirmed any impact to user funds."
At 21:24 UTC, Binance edited the post and dropped the sentence about user funds entirely. At 21:29 UTC it edited again, adding: "User funds are completely safe." The rest of the text stayed the same: security teams are "reviewing all relevant information with urgency," updates will come "through official Binance channels as soon as we have verified information," and users should ignore "unofficial links, messages, or requests for account information."
<img src="https://financefeeds.com/wp-content/uploads/2026/10/binance-statement-x-edit-history.jpg" alt="X edit history of the official Binance statement on the suspected hack, showing the latest and earlier versions">
The first version is still the one quoted in early coverage. <a href="https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto" rel="noopener noreferrer nofollow">Decrypt</a> cites the "not confirmed any impact" line, so readers now see two different Binance positions depending on which outlet they open.
<h2 id="cz-moved-first-binance-followed">CZ Moved First, Binance Followed</h2>
Zhao <a href="https://x.com/cz_binance/status/2115915423174853077" rel="noopener noreferrer nofollow">posted at 21:15 UTC</a>, one minute before Binance's original statement: "User funds are safe! It does look like a hack on Binance." He added that he does not manage Binance.com anymore but, "as a shareholder, I expect all user funds will be fully covered."
Binance's final wording lines up with Zhao's "safe" message, but it stops short of his diagnosis. The exchange has not confirmed a breach, a loss figure or the cause. It has also not said whether the <a href="https://financefeeds.com/binances-safu-fund/" rel="noopener noreferrer nofollow">SAFU emergency fund</a> will be used. Binance <a href="https://financefeeds.com/binance-finalizes-1b-bitcoin-transfer-to-safu/" rel="noopener noreferrer nofollow">finished converting that $1 billion reserve into Bitcoin</a> in February.
<h2 id="circle-cites-law-enforcement">Circle Cites Law Enforcement</h2>
The stablecoin issuers have said more than the exchange. Circle CEO Jeremy Allaire <a href="https://x.com/jerallaire/status/2115916207463481846" rel="noopener noreferrer nofollow">wrote on X</a>: "In coordination with law enforcement, we have frozen more than 800M USDC associated with the incident and will continue supporting the investigation." Zhao thanked Tether for a freeze of about $971 million and Circle for about $823 million.
Allaire's post is the first public sign that law enforcement is involved, although no agency has spoken. It also carries a commercial twist: Binance made a $100 million strategic investment in Circle in September, so the exchange's own partner froze funds taken from Binance wallets. Circle has <a href="https://financefeeds.com/circle-freezes-usdc-in-16-business-hot-wallets-amid-undisclosed-u-s-civil-case/" rel="noopener noreferrer nofollow">frozen exchange-linked hot wallets before</a>, and this case tests how fast it acts when a partner is the victim.
<h2 id="how-big-the-gap-is">How Big the Gap Is</h2>
Estimates of the outflow keep rising. Decrypt's on-chain tally puts the total at at least $5.57 billion across Ethereum, Bitcoin and Tron, including $3.51 billion on Ethereum and 18,270 BTC. Against that, roughly $1.8 billion is frozen. BNB was trading at $703.10 at 22:07 UTC, down 6.9% in 24 hours, according to <a href="https://www.coingecko.com/en/coins/bnb" rel="noopener noreferrer nofollow">CoinGecko</a>.
For brokers and platforms that route client flow through Binance, the edit history is the practical takeaway. A statement that changed twice in 13 minutes is a holding line, not a disclosure. Treat it that way until Binance publishes figures.
<h2 id="what-comes-next">What Comes Next</h2>
Three questions will decide how the market reads the next update: whether Binance calls it a hack, whether it gives a loss figure, and whether SAFU or the balance sheet covers it. In February 2025, Bybit confirmed its $1.5 billion breach within hours and published reserve figures soon after. That speed helped steady withdrawals, but the exchange has still <a href="https://financefeeds.com/bybit-has-recovered-48-4-million-from-its-1-5-billion-lazarus-hack/" rel="noopener noreferrer nofollow">recovered only $48.4 million</a> of the stolen funds. If Binance's next update repeats "investigating," expect the gap between Zhao's account and the exchange's own to widen. Pressure for a regulator to step in will grow with it.
FinanceFeeds is tracking official Binance and government statements and will update this coverage as verified information arrives. For how exchange-level protection actually works, see our guide to <a href="https://financefeeds.com/crypto-exchange-insurance-and-solvency/" rel="noopener noreferrer nofollow">what Binance, Coinbase and Kraken actually guarantee</a>.

Binance Rewrote Its Hack Statement Twice in 13 Minutes

Table of Contents

FinanceFeeds

Other articles published on Oct 29, 2026

Join our free newsletter for daily crypto updates!