Binance OTC surge meets user-data leak fears over 1.5M accounts
Binance OTC surge accél érates institutional trading at the start of 2026, but a reported user-data leak is raising security concerns.
**OTC growth:** In January–February 2026, Binance’s over-the-counter (OTC) volume reached a pace that already accounted for **about a quarter of all 2025 OTC volume**. The exchange attributes this to rising demand from institutions seeking deep liquidity via private block trades, which can reduce price disruption and slippage.
**Reported breach details:** Cybersecurity group **VECERT** says a hacker using the alias **PexRat** is selling a database linked to **1.5 million Binance user accounts**. The dataset reportedly includes full names, emails, phone numbers, KYC verification info, and sensitive authentication-related data (e.g., last-login IP, device fingerprints, and **2FA status**).
**How the attack allegedly worked:** VECERT concluded there was **no direct compromise of Binance’s core servers**. Instead, investigators suggest **scraping and credential-stuffing** attacks—automated login attempts that may bypass or abuse Captcha/API protections.
**Context:** The incident follows earlier reporting of **420,000 Binance-related credentials** leaked via infostealer malware.
For traders, the key takeaway is that the Binance OTC surge signals stronger institutional activity, yet ongoing data-exposure incidents could undermine retail trust and keep a security overhang on sentiment. Binance OTC surge may support liquidity and trading depth, but the leak narrative can trigger risk-off reactions and heightened scrutiny across exchanges.
Bearish
虽然报道显示币安OTC交易量在2026年初显著增长、机构参与度提升（偏利好流动性与大单成交），但“1.5M账户数据疑似被售卖”的叙事会对交易所品牌与零售信任形成短期冲击。即便调查结论指向未直接入侵币安核心服务器，scraping与credential-stuffing仍属于高频、自动化的攻击链，往往会引发更广泛的安全担忧、监管关注与用户风险厌恶。
类似的“凭据泄露/自动化登录攻击”历史事件通常在短期带来风险偏好下降（交易量结构可能向更安全或更合规的平台迁移），并提高安全相关成本（如风控/验证码/二次验证策略）。中长期看，若交易所能快速修补登录与API防护、加强风控并透明应对，影响可能逐步被消化；但在修复周期内，市场更容易对交易所风险定价，导致情绪偏空。