As of 30 October 2026, a single headline total hides the asset story underneath it. The Binance breach on 29 October 2026 is estimated at about $6.3 billion, the largest crypto theft on record, ahead of the $1.5 billion Bybit theft in 2025, but that total is made up of different coins, in different wallets, moving through different routes. Breaking it down by asset gives a clearer picture than the headline alone, even though the breakdown is still incomplete.

Start with bitcoin. Hacker wallets held about $1.5 billion in BTC, according to Arkham data. That figure describes what was sitting in wallets linked to the hacker at the point of measurement, not a final audited bitcoin loss, and wallet balances can change as funds move or are frozen. Still, it shows bitcoin was a major part of the haul, not a side holding.

Bitcoin and ether in the total

Ether is the second large piece, and it is the best traced. Hacker wallets held about $900 million in ETH, according to Arkham, and around 204,500 ETH was moved from Binance 14, a wallet that appeared in Binance proof of reserves on 1 October. After that movement, ETH backing was reported near 94 percent, down from 100 percent on 1 October. That backing drop is the clearest asset-level marker of damage in the facts available.

The ether trail can be followed further at wallet level. Binance 14 held 1.26 billion USDT and 89,475 ETH among 37 assets on 1 October, which shows how mixed a single exchange wallet can be. Etherscan movements reported after the breach include 167,464 ETH from Binance 14 and 28,005.6 ETH from Binance 16, followed by 195,460 ETH, worth about $442 million, moving to a second address. Those steps are reported movements, and they should not be added together casually into a separate total, since the same ether can appear at more than one stage of a trail.

Assets also moved through decentralised routes after leaving Binance wallets. Reports say assets moved through Uniswap and Aave, and that 20,000 WETH, worth about $44 million, was borrowed via Aave. That detail matters for tracing because decentralised movement can split, swap, or borrow against assets quickly, making a clean asset-by-asset final total harder to pin down in the first days.

Stablecoins and the frozen share

Stablecoins tell a different part of the story, because they can be frozen by their issuers. About $3 billion has been frozen in total, including $2.3 billion in USDT and USDC. Tether froze more than $1.567 billion in USDT, Circle froze about $823 million in USDC, Ripple froze about $200 million, and World Liberty Financial froze $27 million in USD1. Those frozen stablecoins are a large share of the estimated total, and they are also the share most visibly stopped from moving further.

Putting the pieces side by side leaves gaps that honest reporting must keep open. Bitcoin at about $1.5 billion and ether at about $900 million in hacker wallets, plus the ether movement figures and the frozen stablecoin figures, do not add up neatly to $6.3 billion, and they are not meant to: they come from different measurements at different times, and some assets may be counted in more than one of those views. The investigation is ongoing, and the full asset split has not been published as a final breakdown.

The next dated check may sharpen the asset picture. The next proof-of-reserves snapshot is due on 1 November 2026, and it will show whether stolen assets were replaced. Binance co-CEO Yi He has said all losses will be covered from company funds and the SAFU emergency fund, which holds about $1 billion in bitcoin, and that user funds are safe, but that is a coverage claim, not an asset-by-asset accounting.

Frequently asked questions

FAQ: How much bitcoin and ether were in hacker wallets? About $1.5 billion in BTC and about $900 million in ETH, according to Arkham. How much ether moved from Binance 14? Around 204,500 ETH, with further reported Etherscan movements detailed above. How much was frozen? About $3 billion, including $2.3 billion in USDT and USDC. Is the asset breakdown final? No, the investigation is ongoing and figures are preliminary; readers should follow official Binance channels for updates.