As of 30 October 2026, two headline figures define the Binance breach of 29 October 2026: an estimated impact of about $6.3 billion, and about $3 billion frozen so far. Put together, they give a simple piece of arithmetic. Subtracting the frozen amount from the estimated total leaves roughly $3.3 billion that was not frozen in the reported freezes. That remainder is arithmetic from the two reported figures, not a separately reported total, and both inputs are preliminary.

The $6.3 billion figure is described as the largest crypto theft on record, ahead of the $1.5 billion Bybit theft in 2025. The comparison shows scale, but it does not make the estimate final. The investigation is ongoing, and early estimates in a breach are often revised as transactions are traced and confirmed, or as amounts are found to have been double-counted.

Adding up the frozen total

The $3 billion frozen figure is itself a sum of separate issuer actions. Tether froze more than $1.567 billion in USDT and Circle froze about $823 million in USDC, together $2.3 billion in those two stablecoins. Ripple froze about $200 million and World Liberty Financial froze $27 million in USD1, bringing the named freezes toward the overall $3 billion total.

One part of the estimated total that is not in the frozen stablecoin sum is ether. Around 204,500 ETH was reported moved from the wallet known as Binance 14, leaving ETH backing near 94 percent, down from 100 percent on 1 October. That ether movement is a concrete component of the loss, and it sits largely outside the frozen stablecoin figures.

Tracking data adds a further layer to the arithmetic. Per Arkham, hacker wallets held about $1.5 billion in bitcoin and about $900 million in ether. Those holdings describe where assets were reported sitting at the time of that tracking, not a final accounting, and they should not simply be added to the frozen total or subtracted from it without care, since the same assets can appear in different reports at different stages.

Three layers of the maths

The same tracking reported that assets moved through Uniswap and Aave, two decentralised platforms. One specific movement cited is 20,000 WETH, worth about $44 million, borrowed via Aave. That detail shows the remainder was not static: at least part of it was being moved and used on-chain after the breach, rather than sitting untouched.

Binance co-CEO Yi He has said all losses will be covered from company funds and the SAFU emergency fund, which holds about $1 billion in bitcoin, and that user funds are safe. That statement is about covering the loss, not about the arithmetic above, and the next proof-of-reserves snapshot, due on 1 November 2026, will show whether stolen assets were replaced.

For readers, the maths therefore has three layers: the estimated $6.3 billion total, the roughly $3 billion frozen, and the roughly $3.3 billion remainder implied by subtracting one from the other. The remainder includes assets reported moving through Uniswap and Aave and assets reported in hacker wallets, but the verified facts do not yet give a complete, asset-by-asset reconciliation of every dollar in that remainder. Readers should rely on official Binance channels for confirmed updates.

Frequently asked questions

FAQ: What is the estimated total? About $6.3 billion, preliminary and under ongoing investigation. How much was frozen? About $3 billion, including $2.3 billion in USDT and USDC. What about the rest? Arithmetic leaves roughly $3.3 billion not frozen, with tracking reporting hacker wallets holding about $1.5 billion in bitcoin and about $900 million in ether, and movements through Uniswap and Aave.