Analysis says Binance hack opened an on-chain arbitrage window, with one address making about $3.47 million in two hours

Analysis says Binance hack opened an on-chain arbitrage window, with one address making about $3.47 million in two hours

N
News Editor
2026-10-30 01:00:13
During the period of the Binance exploit, a sharp dislocation appeared between decentralized exchange pricing and Aave’s oracle-based ETH valuation, creating a temporary on-chain arbitrage setup, according to a reconstruction cited by Odaily. The community user said the attacker swapped large amounts of USDT for ETH on DEXs in an apparent effort to avoid a Tether freeze, pushing ETH on Uniswap to roughly $2,560-$2,750, with some trades above $3,000. At the same time, Aave’s Chainlink-fed ETH price stayed around $2,250-$2,290, leaving a 15% to 30% gap for nearly an hour. The reported trade involved depositing USDC or USDT on Aave as collateral, borrowing ETH at the oracle price, selling it on DEXs at elevated prices, then buying back ETH after the spread narrowed to repay the loan. The user counted 61 addresses that borrowed ETH on Aave mainnet within six hours of the incident, excluding the hacker address. The most profitable address reportedly sold 12,289 ETH at an average price of about $2,580 and later repurchased 12,314 ETH at about $2,297, for an estimated profit of $3.47 million. The top 10 arbitrage addresses made about $6.36 million combined before gas costs.

Odaily reported that a clear on-chain arbitrage opportunity emerged during the Binance exploit.

According to a reconstruction by a community user, the attacker swapped large amounts of USDT for ETH through DEXs to avoid a Tether freeze. That move pushed ETH on Uniswap to as high as $2,560 to $2,750, with some individual trades clearing above $3,000. At the same time, Aave’s ETH price, sourced from the Chainlink oracle, remained at roughly $2,250 to $2,290. The gap between on-chain execution prices and the oracle price reached 15% to 30% and lasted for nearly an hour.

How the trade worked

The user said arbitrageurs used the spread by depositing USDC or USDT into Aave as collateral, borrowing ETH at the oracle price, and selling that ETH on DEXs at the higher market price. After the spread narrowed, they bought back ETH and repaid the loan, capturing the difference.

61 addresses borrowed ETH on Aave mainnet within six hours

Based on the user’s count, 61 addresses borrowed ETH on Aave mainnet within six hours after the incident, excluding the hacker address. The most profitable address sold 12,289 ETH at an average price of about $2,580, then later bought back 12,314 ETH at an average price of about $2,297, generating an estimated profit of about $3.47 million.

The top 10 arbitrage addresses made about $6.36 million in total. The figures were calculated from on-chain transaction-by-transaction records and do not include gas costs.

No flaw in the Aave contract, the user said

The community user said the trade exploited a pricing disconnect between centralized exchanges and DEXs, and that there was no vulnerability in the Aave contract itself. The arbitrage window gradually closed as DEX prices fell back and Aave froze its mainnet V3 market.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
1800

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.