Binance hot wallet drain (29 Oct 2026), follow-up: 28 more attacker wallets on Ethereum, Avalanche and Tron
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Binance
- Incident date: 2026-10-29
- Reported: 2026-10-30
- Last updated: 2026-10-30
This follows up the BlockintAI report on the Binance hot wallet drain of 29 October 2026 (https://blockint.ai/c3?report=cad68b7e-53fd-4072-b113-30196922d5e0). It files 28 more attacker-side addresses: 21 on Ethereum, 1 on Avalanche, 1 used on both Avalanche and Ethereum, and 5 on Tron. Each one received funds from the attacker's wallets in the transfers described below. Arkham says it has verified 70 addresses for its "Binance Hacker" entity (https://x.com/arkham/status/2115971117760590075) but has not published its list, so this list is separate from Arkham's. Etherscan labels 12 of these…
Other addresses in this report: 0x5c23023ca6633f91ded909b4a753a3ca00fea4fc, 0x008f06f04b72da2621a4f37f5531cc7352187dcd, 0xe7024ab80143b1ef843efe6a58368696cb87958d, 0x42cdf00c85005630cc8605731b9364f712077810, 0x600d6f00eadabdb514561ceeb43730a7103e8298, 0x7f9dc988b46336ad536828fad50fa8fa1e5415e3, 0x0e772ee615c7f93373c7519f2c36e780696477d3, 0xcf4ca2bdf21bc3a467a00b6afe72b833982723e0, 0xb3ddec0ccc5c3ba733fcdf5a15f98c95ec5a5fdb, 0x8c7111e9a3270457b76f0bd137209089047a6aa4, 0x06ea1ab3ecf570029eb1f94dbb9eac06bc79685f, 0x0084847bb9384d2fc5e8836e663689467e3e4c81, 0xf1eadb247ffc7d7d6600e84daaf9ee85737e73c4, 0xb58bf76d209fa71f60013ce1933ca331177a4f08, 0xdd6dbbe67262ccc9b1824de1257999efc6c52296, 0x1291be4c90239d14527ba880ad2b6e5cb82116b1, 0x54401f80da97893a15d43566184635b6674bc942, 0x8d4b8ee62124b7ee140a51ddd07390a56f1c9e19, 0xa97bf7836f8a08f9ed91d41453d371493fae8d10, 0xc2096a12ebe0944f4d39e59979f485afd92d850a