Namespace
← Back to Blog
newssecuritybinancehacksdefi

12 crypto hacks in a week, led by Binance loss

October 30, 2026

Cointelegraph reported on Friday that 12 crypto projects and platforms were hit by hacks in the past week, citing DefiLlama. The tracker’s largest entry is a Binance loss of $5.78 billion on Oct. 29. Binance has separately estimated the impact at about $6.3 billion, according to the exchange as reported by Cointelegraph and Reuters. Other quantified losses on the DefiLlama list add a little over $13 million.

What happened

Cointelegraph’s post named eight incidents with dollar amounts and four without. Besides Binance at $5.78 billion, it listed X100 at $4.75 million, Polymarket at $2.7 million, Initia at $2.6 million, Fence Finance at $1.01 million, Bloom Trading Bot at $953,000, zkLink Nova at $783,000 and Predict.fun at $400,000. The others were Hifi Finance, Zilliqa X-Bridge, Myriad Markets and Yapeswap. DefiLlama’s table shows the same 12 names from Oct. 23 to Oct. 29. Some of those rows have no dollar loss, or a loss of zero.

On the Binance incident, the exchange said an early review pointed to a compromised DevOps engineer’s laptop, which may have let an attacker submit unauthorized withdrawals. It said it had found “no evidence of a wallet private-key leak,” Cointelegraph reported. Binance said about $3 billion had been frozen with partners, that it would cover losses from its Secure Asset Fund for Users and company funds, and that user funds were safe. It pledged a technical post-mortem and an updated proof of reserves. Binance has not named the attackers. TRM Labs assessed with high confidence that North Korea’s TraderTraitor unit was responsible, Al Jazeera reported. The exchange has not confirmed that attribution.

Separate reports covered several of the smaller cases. CNBC said users of Polymarket’s international platform lost funds after a third-party provider was compromised. Trading was paused and later resumed, and Polymarket said it would reimburse affected traders. Analytics firms told CNBC at least $2.7 million moved across 710 wallets. Cointelegraph reported that Initia halted its network on Oct. 23 after unauthorized minting and transfers of more than $2.6 million. Unchained reported that zkLink Nova went offline after more than $780,000 left its Ethereum bridge. DefiLlama lists that loss at $783,100.

Why it matters

Nearly all of the week’s recorded value is the Binance case. Al Jazeera, citing TRM, said it dwarfs the previous record, a roughly $1.5 billion theft from Bybit in 2025. The rest of the named weekly amounts total a little over $13 million. The attack types also differ: DefiLlama labels Binance a hot-wallet compromise, Polymarket a supply-chain attack, zkLink Nova a cross-chain message failure, X100 a governance attack and Initia an infinite mint. Binance and Polymarket have said they will cover affected users. Outcomes for the bridge and protocol cases are still open.

The total is not settled. DefiLlama records Binance at $5.78 billion. Binance’s estimate is about $6.3 billion, with about $3 billion frozen, according to Cointelegraph and Reuters. Chainalysis estimates published during the tracing have also moved. Stolen, frozen and outstanding amounts should be treated as estimates until a post-mortem and a new reserve report are out.

What's next

Binance said deposits and withdrawals were temporarily suspended while checks continued, and it has not set a date for its technical report. Polymarket told users that losses under $10,000 would be restored by Oct. 30, with a release form required for larger claims, CNBC reported. zkLink said its network would stay down until related risks were ruled out, and it offered a bounty for returned funds, Unchained reported.

Freezes and wallet labels are still being updated, so both the loss totals and the recovery totals can change without another attack. These reports describe security incidents. They are not a forecast of prices, and they do not confirm any recovery beyond what the companies have stated.

Sources

More from the Namespace blog