Binance Hack Triggers $3.47M Aave ETH Arbitrage

A Binance hot-wallet hack on 30 October triggered a brief but unusually large ETH price gap between decentralised exchanges and Aave’s oracle. As the attacker swapped large amounts of USDT for ETH on Uniswap, ETH on the DEX rose to $2,560–$2,750, while Aave’s Chainlink-based oracle remained around $2,250–$2,290. Binance had suspended withdrawals, limiting traders’ ability to move cheaper ETH onto the blockchain and close the gap. One address reportedly deposited stablecoins on Aave, borrowed ETH at the oracle price and sold it on DEXs, then bought ETH back at a lower price to repay the loan. It sold 12,289 ETH at an average of about $2,580 and repurchased 12,314 at about $2,297, generating an estimated $3.47 million before gas fees. The address made 18 borrowing transactions in 44 minutes. In total, 61 addresses borrowed ETH on Aave in the six hours after the incident, excluding the attacker. The top 10 reportedly made about $6.36 million combined, before gas fees. The spread narrowed after 5:30 a.m., and Aave temporarily froze its V3 and V4 markets at 6:44 a.m. The report said Aave’s contracts were not at fault; the opportunity arose from the sharp DEX price move and delayed oracle repricing.
Neutral
The incident is neutral for the broader crypto market, although it created acute short-term volatility in ETH and highlighted operational risks in DeFi. The price gap reflected an unusual combination: heavy on-chain ETH buying, Binance’s withdrawal suspension, and an oracle price that lagged the DEX market. It does not, by itself, establish a sustained change in ETH’s fundamentals or market direction. In the short term, traders may watch ETH liquidity, exchange spreads, oracle updates, Aave borrowing conditions and any further Binance service interruptions. Sudden price dislocations can create liquidation risk for leveraged borrowers and slippage for traders attempting arbitrage. The Aave market freeze also shows that protocol risk controls can restrict new borrowing during an incident, potentially affecting liquidity and positioning. Similar episodes involving exchange outages or oracle delays have generally produced temporary volatility and venue-specific dislocations rather than a lasting market trend, though they can weaken confidence if users fear losses or withdrawals remain restricted. Over the longer term, the event may renew scrutiny of oracle design, liquidation safeguards and exchange-to-DeFi liquidity links. The report says Aave’s contracts were not at fault, which limits the direct negative signal for the protocol. Traders should therefore treat the episode primarily as a risk-management and market-structure event, not a standalone bullish or bearish indicator.