Large transfers were detected from a Binance hot wallet early on Oct. 30 Taipei time. At 07:22, Binance said the verified amount frozen so far was $2.54 billion.
The size of the incident, when set against past crypto security breaches, depends on which number is used. The source article compares the case with loss rankings compiled by rekt.news and exchange hack data from Crystal Intelligence, using U.S. dollar values at the time each incident happened.
How past major crypto thefts were ranked
Under that method, the largest case in the comparison is the LuBian mining pool theft. According to a rekt.news article dated Aug. 7, 2025, 127,426 BTC were stolen from the pool in December 2020, worth about $3.5 billion at the time. The article said the wallet private key had only 32 bits of randomness and could be brute-forced. Arkham disclosed the incident in August 2025.
rekt.news lists the LuBian case at about $14.8 billion using 2025 Bitcoin prices, but the source article uses the roughly $3.5 billion value at the time of the theft for consistency with other incidents.
Second on the list is the Bybit incident on Feb. 21, 2025. In a public notice, the U.S. Federal Bureau of Investigation said about $1.5 billion in virtual assets were stolen from Bybit and attributed the operation to North Korea, calling it “TraderTraitor.” rekt.news put the figure at $1.436 billion.
| Rank | Incident | Date | Loss (USD) |
|---|---|---|---|
| 1 | LuBian mining pool | December 2020 | about $3.5 billion |
| 2 | Bybit | February 2025 | $1.436 billion |
| 3 | Ronin Network | March 2022 | $624 million |
| 4 | Poly Network | August 2021 | $611 million |
| 5 | BNB Chain bridge | October 2022 | $586 million |
| 6 | Coincheck | January 2018 | $534 million |
| 7 | FTX | November 2022 | $477 million |
| 8 | Mt. Gox | 2014 | $460 million |
| 9 | Bitget | September 2026 | $387.5 million |
| 10 | Wormhole | February 2022 | $326 million |
| 11 | Liquid Network | September 2026 | $320 million |
| 12 | DMM Bitcoin | May 2024 | $304 million |
| 13 | Kelp DAO | April 2026 | $290 million |
The source article says the Coincheck and Mt. Gox figures came from Crystal Intelligence, the LuBian figure came from the rekt.news article, and the rest came from the rekt.news ranking. rekt.news also noted that its list is not complete.
Where Binance could rank
If gross outflows are used, the Binance incident is already larger than Bybit. The source article says that for a single transaction involving hot wallet 14 at 04:24, adding up the values shown on Etherscan gives roughly $2.5 billion. An on-chain estimate cited by The Block put the figure at about $5.8 billion.
Either number is above Bybit’s $1.436 billion. At $5.8 billion, the incident would also exceed the roughly $3.5 billion value used here for the LuBian theft and move into first place.
If frozen assets are deducted, DefiLlama contributor 0xngmi estimated Binance’s loss at about $1 billion. Changpeng Zhao responded, “The loss may be a bit higher than that, but it will be covered.” On that basis, Binance would rank behind LuBian and Bybit, but above Ronin Network’s $624 million, or roughly third.
Binance has not formally confirmed that it was hacked and has not disclosed a final loss figure. The amount frozen could still rise, which leaves the ranking open.
Four 2026 incidents had already entered rekt.news’s top 25
Before the Binance case, four incidents from 2026 had already made it into rekt.news’s top 25: Bitget at $387.5 million on Sept. 24, Liquid Network at $320 million on Sept. 6, Kelp DAO at $290 million on April 18, and Coldcard at $130 million on July 30.
The source article also says the top-ranked Bybit case is still under recovery efforts, with Bybit having filed suit against North Korea and Lazarus to recover the stolen assets.
