World’s biggest crypto exchange suffers suspected $5.8 billion hack

The crypto hack that hit Binance on October 29, 2026 has sent shockwaves through the digital‑asset world, with preliminary estimates suggesting as much as $5.8 billion may have been diverted from the exchange’s Ethereum‑linked wallet. Binance, the globe’s largest cryptocurrency platform, confirmed that it is probing the breach after reports emerged that hackers exploited a newly introduced smart‑contract feature known as EIP‑7702. The company reassured users that, despite the alleged intrusion, customer funds remain fully covered.

According to blockchain analysts, the attack focused on a wallet labelled “Binance 14,” which stores a large volume of Ethereum‑based tokens. Researchers say the perpetrators leveraged EIP‑7702, a protocol upgrade that permits ordinary wallets to execute code embedded in smart contracts, to reroute assets to an address under their control. The illicit flow was subsequently funneled through Tornado Cash, a mixing service that obscures the origin of transactions, complicating efforts to trace the stolen value. While the exact mechanism that granted the hackers authorisation remains unclear, the use of EIP‑7702 marks a novel exploitation vector in the crypto space.

In response to the emerging threat, stablecoin issuers moved swiftly to limit further damage. Tether, the firm behind USDT, froze roughly $1.57 billion of its tokens, while Circle, which issues USDC, locked more than $800 million. Together, the two companies immobilised over $2.38 billion in stablecoins linked to the suspicious transfers, according to Reuters. Binance co‑founder Yi He added that Ripple also froze about $200 million in its RLUSD stablecoin, further curbing the pool of assets that could be laundered.

Founder and former chief executive Changpeng Zhao, popularly known as CZ, acknowledged the incident, stating, “It does look like a hack on Binance.” He added that he expects all customers’ funds to be protected, even though he no longer manages day‑to‑day operations at the exchange. Binance’s official communications have evolved from an initial investigation notice to a firm assurance that user balances are safe, though the firm has not released an independent audit confirming the $5.8 billion figure as a loss.

The scale of the alleged theft dwarfs previous high‑profile breaches, notably the $1.5 billion hack of Bybit in 2025. If the preliminary estimates hold, this would become the largest crypto heist on record. However, blockchain analysts caution that the $5.8 billion number reflects the total value of transactions linked to the suspicious activity, not a verified amount stolen. The lack of a central authority for assets such as Ethereum means that, unlike stablecoins, the stolen tokens cannot be frozen outright, leaving investigators to rely on tracing techniques and cooperation from exchanges.

Regulators and industry observers have seized on the episode to call for tighter security standards. EIP‑7702 was introduced to enhance wallet functionality, allowing more sophisticated interactions with decentralized applications. The alleged misuse demonstrates how new protocol features can be turned against users if wallet authorisation is compromised. Experts suggest that exchanges may need to adopt multi‑layered defenses, including hardware‑based key storage and real‑time monitoring of smart‑contract interactions, to mitigate similar threats in the future.

For Nigerian investors, the incident show the volatility inherent in crypto markets. While Binance remains a popular gateway for buying and selling digital assets, the hack has prompted many to reassess the safety of keeping large sums on centralized platforms. Local financial regulators have previously warned about the lack of consumer protections in the crypto sector, and this latest breach may accelerate calls for clearer guidelines and stronger oversight.

As the investigation proceeds, blockchain analysts continue to map the flow of the diverted assets. Early traces point to a series of hops through mixers and lesser‑known wallets before the funds potentially re‑emerge on other exchanges. Both Tether and Circle have indicated they will maintain the freeze on the affected stablecoins until they can confirm that the tokens are no longer linked to illicit activity. Binance has pledged to cooperate fully with law‑enforcement agencies worldwide, though it has not disclosed which jurisdictions are currently involved.

The next steps hinge on whether investigators can pinpoint the authorisation breach that enabled the EIP‑7702 exploit. If the code vulnerability is confirmed, it could trigger updates across the Ethereum ecosystem to patch the flaw. Meanwhile, Binance users are being urged to monitor their accounts for any irregularities and to follow any additional security recommendations issued by the platform. The crypto community will be watching closely to see if the stolen billions can be recovered or if the incident will become a cautionary tale about the perils of rapid innovation in decentralized finance.