Bitcoin Slipped Below $79,000 as $5.8 Billion Walked Out of Binance Wallets

So is Binance actually hacked? Late Thursday the world's largest exchange wouldn't say yes. It wouldn't say no either. That silence is the part that moved markets.

Here's the tape. Bitcoin traded at $78,800 Thursday, down 2.89%, roughly $2,350, over 24 hours. It printed a high of $81,890 around midday, then slid hard after 4 p.m. ET and bottomed at $78,177.37 once the rumors started flying through group chats and X. Volume ran about $26.14 billion. Market cap sat near $1.58 trillion.

Read that again. A trillion-dollar asset takes a 3% haircut because of one company's wallets.

The Number Nobody Agrees On

The outflow estimates are all over the place, which is exactly what happens when forensics get done live on X. Coinbase senior director Conor Grogan put the figure at $5.8 billion. Onchain data showed about $3.55 billion in incoming transfers to an unlabeled wallet. Researcher Spreek flagged the activity first, including a transfer through a contract call allegedly funded by Tornado Cash. Blockaid says it's investigating $3.3 billion in suspicious outflows from Binance hot wallets across Ethereum, Arbitrum and Avalanche.

That's a spread of $2.5 billion between the high and low estimates. In a real investigation you'd wait for the accountants. In crypto you get a screenshot and a price candle.

Then the stablecoin issuers did what regulators usually can't. Tether froze 1.567 billion USDT. Circle froze about $823 million in USDC, according to Changpeng Zhao, who still holds a shareholder seat. Combined freezes land somewhere between $1.8 billion and $2.4 billion depending on whose tally you trust.

"Protecting the industry and our partners is our main priority," Paolo Ardoino said.

Fair enough. But look at the shape of this. The theft happened onchain, in public, in real time. The cleanup happened in about four phone calls to two companies. That's the actual architecture of this market. Decentralized when it's convenient, two chokepoints when it counts.

The Freezes Matter More Than the Hack

If this gets confirmed at anywhere near $5.8 billion, it's the biggest crypto theft on record by a wide margin. It would run almost 4x the February 2025 Bybit hack of roughly $1.5 billion. That's the comparison everyone will reach for, and it's the wrong one.

Bybit was a hit on a single exchange's cold storage. This looks like it touched hot wallets across three chains at once. Those are the accounts exchanges keep liquid because customers want withdrawals in seconds. Hot wallet exposure is the price of running a retail business at Binance's scale. Nobody has solved that tradeoff. Not with multisig, not with hardware, not with attestations.

One estimate puts the realized loss near 0.7% of Binance customer assets. That's the number I'd watch, not the $5.8 billion headline. Seven-tenths of a percent is a bad week for a balance sheet. It's the difference between a scary headline and a solvency question. And a solvency question at the largest exchange on earth doesn't stay a Binance problem for long.

Binance has an insurance-style fund for exactly this scenario. Whether it's deep enough to absorb a nine-figure hole without touching customer balances is something nobody outside the building knows. Burn rate tells you more than valuation, and so does a hole in the balance sheet.

Aave reportedly froze lending markets to stop the suspected attacker from borrowing against stolen collateral. That was the smartest move of the night. A thief with cash is annoying. A thief with collateral is a credit event.

The Shareholder Speaks

Binance still hasn't confirmed a breach. Co-founder Yi He posted that the company is aware of reports of a potential security issue and that security teams are reviewing everything with urgency. Standard language. Meanwhile Binance.US said the incident doesn't touch its platform, which is a very careful sentence from a very separate company. Bybit tweeted that its systems are running normally and user assets are secure. Everyone with a clean book made sure to say so fast.

Zhao went further. He wrote that in his view the exchange appears to have been hacked, and that he expects all user funds to be fully covered. "I don't manage Binance anymore, but as a shareholder, I expect all user funds will be fully covered."

Here's the thing. An expectation from a shareholder isn't a guarantee from a company. Follow the cap table and you'll notice he has every reason to say that and no authority to make it stick. Sources close to the deal say the exchange's books open in a few days either way.

The check writers are getting pickier about custody risk, and this is the kind of night that justifies it. Funds with Binance exposure are going to spend Friday on calls, not charts. Expect a quiet round of rebalancing across venues over the next two weeks, the kind that never shows up in a press release but moves market share for a year.

What to Watch

Three things. First, $78,177.37. That's the Thursday low, and it's the line traders are watching. Lose it and the next conversation is about whether $75,000 holds. Second, the official number. If Binance comes out with a verified figure near 0.7% of customer assets, this becomes a security story. If it comes in closer to $5.8 billion, it becomes a capital story, and capital stories at the biggest venue in the market get ugly fast.

Third, and the one most people will miss, watch what happens to the frozen stablecoins. Roughly $2 billion in USDT and USDC is sitting in limbo right now. Is it burned, returned, or handed to law enforcement? There's no playbook. Whatever they choose becomes the precedent for the next nine-figure exploit.

Bitcoin fell 2.89% on a rumor. It recovered from Bybit within weeks, and it will probably recover from this. But Bybit was a victim. Binance is the venue. Those aren't the same thing, and the market knows it.