Freeze event · 29 October 2026
Binance outflow: Tether and Circle freeze about $2.4B in 20 minutes
12 freezes on 11 addresses between 21:01:35 and 21:21:12 UTC
- Frozen at the freeze
- $2.38B
- Freezes
- 12
- Still frozen, later read
- $2.58B
exactly $2,377,868,639.81: USDT 1,554,868,639.81 · USDC 823,000,000.00
on 11 addresses (one frozen by both issuers); 6 were already empty
exactly $2,582,184,051.40, read 29 October 2026, 22:25 UTC (balances at each freezing block; live balances at 22:25)
Binance has not confirmed a hack; it says user funds are safe. Its founder CZ said it appears to have been hacked.
On 29 October 2026, from 20:22:45 UTC, USDT and USDC left Binance hot wallets for fresh addresses on Ethereum and TRON. Between 21:01:35 and 21:21:12 UTC, Tether and Circle made 12 freezes on 11 of the receiving addresses (Tether and Circle both froze the main Ethereum address). At the moment of each freeze they held $2,377,868,639.81 in total. 6 were frozen empty: the money had already moved on.
The main Ethereum address kept receiving USDT after its freeze: 204,315,411.59 more arrived from Binance 14. A frozen wallet can receive but cannot send, which is why the frozen total read later is higher than the total at the freeze.
Every freeze
Time is the block time of the freezing transaction (UTC). Balance is what the wallet held in that block, read from the token contract.
- 0x5227f6...CB2f8c (21:01:35): Main Ethereum address. Live balance 1,175,464,711.08: Binance 14 sent 3,917,639.77 at 21:04:23 and 200,397,771.82 at 21:44:11, after the freeze.
- 0x974929...36C762 (21:01:35): Received 500,000,000 from the main address at 20:30:11 and moved it on before the freeze.
- 0x0Ddf04...20697e (21:01:47): Received 200,000,000 from the main address at 20:33:23.
- 0x8d5390...b8639A (21:02:47): Received 190,000,000 from 0x0Ddf0480… at 20:52:59.
- 0x5227f6...CB2f8c (21:04:59): Circle froze the same address.
- TG5iBMQP...wvzsGi (21:09:12): Main TRON address. Sent 100,000,000 and 200,000,000 to TPBkSjkC… at 20:45:51 and 20:56:09.
- 0x7Aa4D3...03BFd1 (21:12:35): Received 80,000,000 at 21:06:47.
- 0xAa246B...c654a0 (21:14:59): Received 175,000,000 at 21:08:23.
- 0xCcBEF9...6cA263 (21:16:47): Received 30,000,000 at 21:11:11 and sent it on at 21:16:11, 36 seconds before its freeze.
- TPBkSjkC...76bKN4 (21:17:39): Received 300,000,000 and dispersed it before the freeze. Frozen a second time at 21:20:57 (one wallet, counted once).
- 0xb171cA...60c8c3 (21:18:59): Received the 30,000,000 from 0xCcBEF956… at 21:16:11.
- TCzBTkqn...Ad7Y62 (21:21:12): Received 65,990,000 from TPBkSjkC… at 21:16:18.
Where the money came from
| Time (UTC) | From | To | Amount |
|---|---|---|---|
| 20:22:45 | TDqSquXBgUCLYvYC4XZgrprLK589dkhSCf (Binance hot wallet) | TG5iBMQP...wvzsGi | 612,729,468.00 USDT |
| 20:24:23 | 0x28c6c06298d514db089934071355e5743bf21d60 (Binance 14) | 0x5227f6...CB2f8c | 1,615,409,498.97 USDT |
| 20:24:47 | 0xdfd5293d8e347dfe59e90efd55b2956a1343963d (Binance 16) | 0x5227f6...CB2f8c | 55,739,800.50 USDT |
| 20:41:23 | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0x5227f6...CB2f8c | 780,000,000.00 USDC |
| 20:59:47 | 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055 | 0x5227f6...CB2f8c | 43,000,000.00 USDC |
Labels are from our exchange address list. The USDC sender is not in it, so it is left unlabelled.
Moved on before the freezes
Part of the money left the frozen wallets before they were frozen. These are the largest transfers out:
| Chain | From | To | Amount |
|---|---|---|---|
| TRON | TPBkSjkC… | TSUUVjysXV8YqHytSNjfkNXnnB49QDvZpx | 199,000,000 (13 transfers, 20:47–21:01) |
| TRON | TPBkSjkC… | TVjuTE3V5bMVdpfNhid8kD2v35T2k1u1Br | 33,000,000 |
| TRON | TPBkSjkC… | TFGDbUyP8xez44C76fin3bn3Ss6jugoUwJ | 2,000,000 |
| Ethereum | 0x9749292D… | 0xbeef02961503351625926ea9a11ae13b29f5c555 | 145,000,000 (4 transfers) |
| Ethereum | 0x9749292D… | 0x0000000000be226afde21672a5e4adc45692e69d | 100,000,000 |
| Ethereum | 0x9749292D… | 0x74edc79fea13bdf1f7841570227127cec493bdd9 | 50,000,000 |
| Ethereum | 0x9749292D… | 0x9b1303ebf09bc51b7fac376c9e421e8daae63b82 | 28,600,454.37 |
| Ethereum | 0x9749292D… | 0xec4fb7e7c35c241e1138a2d8cfbb09f3ad1ccb22 | 1,399,545.64 (2 transfers) |
| Ethereum | 0x8d539036… | 0x23878914efe38d27c4d67ab83ed1b93a74d4086a | 60,000,000 (2 transfers) |
| Ethereum | 0x8d539036… | 0x77edef23fbd05921c26fe29fcc3a65e14d2ac3eb | 130,000,000 (80,000,000 of it went on to 0x7Aa4D302…, frozen) |
Smaller amounts were also split across many trading-pool contracts (about 10M from 0x0Ddf0480… and 50M from 0x7Aa4D302…). Some destinations above may be trading pools, routers or exchange deposit addresses; we have not labelled them, and none of them was frozen as of 21:55 UTC.
The rest of the day
On another chain: Tether also froze the main address on Avalanche (USDt, contract 0x9702230A8Ea53601f5cD2dc00fDBc13d4dF4A8c7) at 21:07:55 UTC, block 98895937, tx 0x5c7395a1f5125c27d49aae3fd44fd5f1009103dbd51b7bb5c59993c700138e6d. It held 8,409,928.40 USDt. This is not included in the TRON and Ethereum totals above.
Later that evening, at 22:06:23 UTC, Tether also froze the Binance hot wallet the funds left from, 0x28c6c06298d514db089934071355e5743bf21d60 (labelled Binance 14), on Ethereum USDT. It held 1,351,530.01 USDT at the freeze. Freezing tx 0x312e166cb9e602582f426288f755a4b08e1eddb456b7e4bd614adae11080d305. At 23:53:35 UTC Circle froze the same wallet's USDC too: 52,363.12 USDC at the freeze, tx 0xb57c2143508019ac592a9dadb988b39003589f6f54c1924d4163f60520a784f5. At 23:54:59 UTC Circle also froze 0xee7ae85f2fe2239e27d9c1e23fffe168d63b4055, the unlabelled wallet that sent the 780,000,000 + 43,000,000 USDC to the main address: 2,956,093.65 USDC at the freeze, tx 0xf2faba0e8ab74e84dde0c7ded90effe20a4cedbde1653f0c98220d2f774eeebb.
Later, on the same trail: at 23:31:59 UTC Circle froze 0xc39e690bea48448cc47e7acddfe30e6453e09824 on Ethereum, holding 1,563,812.78 USDC (block 26301705, tx 0x20289ad911c69647eef5474b8ce51e16e52668de314ec2fcb484959bcf1ad5c2). The USDC had been minted to it at 23:27:35 by Circle's cross-chain bridge (CCTP). On Avalanche, the main address sent 1,813,999 AVAX to 0x80358c5b8f9b2cc27147a1e0f2a6c9a30eb2c397 at 21:45:34; 500,010 AVAX went on to 0xc39e690b… at 22:00:48 and 200,005 to 0x554d2a66aa6f5d4b6fd23b649270f011072b4771 at 22:15:01, which swapped 200,000 AVAX for 1,563,832.35 USDC at 22:16:35 and bridged it to Ethereum at 22:17:54. 0xc39e… is a new address in this transfer chain, not a Binance wallet.
Earlier the same day, Tether froze 8 unrelated TRON wallets (11:42, 13:44 and 18:24 UTC) holding 468,248.41 USDT in total. Every freeze of the day is in the 29 October 2026 daily report.
Method and citation
Read from the chain: Ethereum freeze events and token balances from a public Ethereum node, TRON freeze events and transfers from TronGrid, and cross-checked against our own records. Block times in UTC. Read 29 October 2026, 22:25 UTC (balances at each freezing block; live balances at 22:25).
Please cite as: OmniTrace, “Binance outflow: Tether and Circle freeze about $2.4B in 20 minutes”, 29 October 2026, omnitraceapp.com/reports/binance-outflow-2026-10-29.
The statements about a hack are reported in Decrypt: "Binance Drained of $5.5 Billion in Suspected Hack, Tether and Circle Freeze $1.8 Billion". Their dollar totals cover other assets and other counting; the figures on this page are only the stablecoin freezes we can show on-chain.