Binance Hackers’ Bitcoin Stash Tops Coinbase’s Holdings
Bitcoin linked to the attackers behind the $6.3 billion Binance hack has exceeded Coinbase’s reported corporate holdings. Blockchain analytics firm Bitquery traced 18,270 BTC, worth about $1.4 billion, to 19 attacker-linked addresses—199 BTC more than Coinbase’s 18,071 BTC held for investment and operations at the end of September. Coinbase’s figure excludes customer assets.
Bitquery also traced 508,621 ETH to the attackers, more than the 495,362 ETH attributed to corporate holder The Ether Machine. The group initially stole 200,630 ETH and reportedly built its balance by swapping stolen stablecoins and other tokens.
Binance said about $3 billion in stolen assets had been frozen and pledged to cover all losses. The breach affected nine blockchains in under four hours. TRM Labs attributed the attack to North Korea’s TraderTraitor group, while Binance said investigators had found additional breach points after first suspecting an engineer’s compromised laptop. The large attacker-held balances may keep attention on asset movements and recovery efforts, although Binance’s loss-coverage pledge could help limit concern about customer losses.
Bearish
The $6.3 billion Binance hack is a negative security and confidence signal for crypto markets. The attacker-linked wallets’ 18,270 BTC and 508,621 ETH create concern about potential selling, laundering or further movement of stolen assets. Traders may monitor on-chain flows, exchange inflows, BTC and ETH volatility, and any new developments in the recovery effort. The breach’s impact across nine blockchains could also raise risk concerns beyond Binance.
In the short term, this kind of incident can prompt risk reduction and volatility, as seen after major exchange failures and exploits such as the 2022 FTX collapse and the 2021 Poly Network hack. Those events had different causes and outcomes, but illustrate how security incidents can weigh on sentiment and trigger sharp, headline-driven moves. The reported freezing of about $3 billion and Binance’s pledge to cover losses may temper fears of direct customer losses and limit spillover. Over the longer term, the market impact will depend on whether the remaining funds are recovered, whether Binance can demonstrate stronger controls, and whether the incident leads to further regulatory or security concerns. The bearish label reflects the immediate risk to confidence, not a prediction of sustained price declines.