Arbitrum freezes $30.5M from Binance exploit as stolen funds from Binance and Bitget commingle
𝕏/@zachxbt •
Revision history
3 recorded changes
Want your article here?
Promote with Leviathan NewsThe Arbitrum Security Council executed a transaction freezing roughly $30.5M tied to the Binance exploit, bringing the total frozen to over $2.83B. The exploiter address and transaction hash were published. Stolen funds from the $6.3B Binance exploit and $388M Bitget exploit commingled at one address after arriving via THORChain, suggesting the same actor is behind both. The Bitget exploit was attributed to DPRK-linked TraderTraitor, which overlaps with prior exploits such as Kelp DAO. ZachXBT also reports Chinese illicit actors laundering Bitget funds are openly seeking order support in public Discord and Telegram channels.
AI summary of the linked source — not editorial content.
Story signal · how it spread on X · via Elfa
as ofSpread
i
Distinct X and Telegram accounts Elfa counted behind this story’s reports, summed over the thread. Not posts, not impressions.
365 accounts
first post
Leviathan +9.2 h later
ARB reaction
i
Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
+8.3% 24h after post
$0.1534 → $0.1661
BTC −0.2% same window
ARB attention
i
Share of crypto chatter on X this week versus the week before (Elfa mindshare, weighted by who posts). A spike means the story pulled attention; it says nothing about price.
+76.0% vs prior 7d
0.285% of crypto chatter · rank #32
last 24h +76.0%
BNB reaction
i
Price change from the first post to 24 hours later (Hyperliquid). BTC over the same window is shown so a market-wide move is not mistaken for a reaction to this story. Not advice.
+3.0% 24h after post
$695.98 → $716.97
BTC −0.2% same window
LN
Thread · 8 of 21 events · 2 mitigation · last update 30 Oct 05:28
- First reportUnconfirmed report says a Binance wallet was drained into a new address38 acc.
- UpdatePosts claim Binance was hacked for billions in crypto assets108 acc.
- ReactionEthena flags a potential security incident involving Binance55 acc.
- MitigationPaxos freezes 1,906.67 PAXG linked to Binance security incident3 acc.
- UpdateReports suspect North Korea’s Lazarus Group was behind the Binance security incident11 acc.
- MitigationBinance 14 revokes EIP-7702 delegation after a 2,961 ETH transfer was left at risk4 acc.
- UpdateBinance says compromised DevOps laptop caused breach, with no evidence of wallet-key leak92 acc.
- UpdateStolen funds from Binance and Bitget exploits reportedly converge at an address linked to the Phemex hack9 acc.
- Leviathan published this article
All times UTC.
Cited posts
- @spreekaway SpreekFirst reportOn X ↗
Unconfirmed, but possibly massive binance hack. Entire Binance wallet drained into new EOA. Contract call was funded by Tornado Cash
- @credo__v CredoOn X ↗
*UNCONFIRMED, BUT POSSIBLY MASSIVE BINANCE HACK. ENTIRE BINANCE WALLET DRAINED INTO NEW EOA. CONTRACT CALL WAS FUNDED BY TORNADO CASH - @spreekaway
- @0xD0M_ DominicOn X ↗
Unconfirmed, but possibly massive binance hack. Entire Binance wallet drained into new EOA. Contract call was funded by Tornado Cash@cz_binance are we safe ?
Show 3 more cited posts
- @shoaib_szn SHOAIB UDDINOn X ↗
🚨 BREAKING: multiple reports that a Binance hack is ongoing. An entire Binance wallet was drained into a new EOA after a contract call funded by Tornado Cash.
- @Vlad_Web3 vladOn X ↗
🚨BREAKING: possibly massive Binance hack unconfirmed, but a binance hot wallet looks drained into a new EOA ~$2.71B now sits there: 195,469 ETH (~$452M) $1.75B in 63 tokens the contract call was reportedly funded by Tornado Cash +1,409 BTC ($113M) just left binance for an…
- @DefiantNews The DefiantOn X ↗
MISTTRACK TRACES @binance THEFT FUNDS TO ADDRESS LINKED TO PHEMEX THEFT Stolen $TRX moved through Bitget Wallet’s swap bridge, the tracker said. The overlap does not establish a common attacker. Read more here:https://t.co/i5bs6Wwq3T
359 more accounts posted about this · 17 Telegram channels (no public link)
TradersTrader calls tracked by Elfa · not advice
Positioning · ARB
Open89 open positions · 83 long · 6 short
Tracked accounts lean long about 97% of the time, so a long-heavy book is normal, not a signal. As of 29 Oct 21:41 UTC.
Reaction since the first post
Since 29 Oct 20:32 UTC2 calls opened · 1 long · 1 short
Callers with a scored record
@hufhaus9 short · entry $0.1596alpha −0.084 · 45% hit rate · 20 scored
Alpha, hit rate and sample size exactly as Elfa reports them.
Whole crypto market, not this story
Crowding0th percentile · vs last 28 days, 50 typical
Pulse 24h99/100 · unusualness of new calls, 0–100, 50 typical, higher means more long than usual
Book97.0% long · 10,754 accounts
As of 30 Oct 05:45 UTC.
Social-monitoring data, not investment advice Elfa prices Hyperliquid post text from Xas of
Explore the topic
Loading related coverage…
Comments
Loading comments…
