Binance Hack Suspect Used MetaMask Gas Station; $175M USDT Frozen
A wallet linked to the Binance hack used MetaMask’s Gas Station to pay transaction fees in USDT, potentially leaving off-chain records such as an IP address. Protocol engineer Justin Kalland flagged the transactions, but said the reason for using the feature is uncertain. The wallet already held 2 ETH, yet received about 0.0337 ETH through Gas Station and paid roughly 127 USDT for the service. Tether blacklisted the wallet about two minutes later, freezing around $175 million in USDT. The attacker later moved about 22 ETH out of the wallet. MetaMask’s privacy policy says it may temporarily process IP addresses for some services, but does not specify a retention period; the company had not commented at the time of publication. The possible IP trail is unconfirmed, and the article notes that blockchain data alone cannot establish whether the attacker made a mistake or intentionally used Gas Station.
Bearish
The news is bearish for sentiment because it highlights a major exchange security incident and raises questions about the safety of user funds and operational controls. Binance-related hack reports can trigger short-term volatility, risk aversion and increased scrutiny of exchange balances, as traders may reduce exposure or move assets to self-custody. However, this article also reports a mitigating factor: Tether blacklisted the wallet and froze about $175 million in USDT, limiting the attacker’s ability to move those funds. The possible IP trail through MetaMask is only a lead, not confirmation that the attacker can be identified; the stated reason for using Gas Station is also speculation. As in past exchange-hack episodes, market reaction will likely depend more on the confirmed scale of losses, whether withdrawals remain available and whether additional assets are frozen than on this unverified clue alone. In the short term, security concerns may weigh on Binance-linked sentiment and amplify price swings. Longer term, effective asset freezes and transparent incident handling could help contain contagion, while any evidence of wider losses or weak controls would prolong pressure on exchange-related confidence. This report alone does not establish a lasting market-wide trend.