Companies
Kraken and Crypto.com Block Accounts Amid $133M Crypto Theft Investigation
In response to a suspected cryptocurrency theft exceeding $133 million, Kraken has restricted accounts associated with the incident. Blockchain investigator ZachXBT initially flagged the theft on November 1, estimating losses of over $106 million from an unidentified European entity. Following further analysis, an additional $27 million in withdrawals was identified, bringing the total to $133 million.
The suspected attacker utilized various methods to withdraw and convert the stolen assets, including moving funds through Ethereum and instant cryptocurrency exchanges. Reports indicate that Kraken, Crypto.com, and OKX were involved in the transactions, with significant amounts of stablecoins exchanged for Ethereum within a short timeframe.
Kraken confirmed that its security systems remain intact and that the incident did not originate from its platform. The exchange is cooperating with law enforcement to recover the stolen funds. Similarly, Crypto.com has taken measures to prevent the movement of associated funds, while OKX is conducting its own investigation.
The ongoing investigation has raised concerns about the speed at which stolen digital assets can be transferred between platforms, highlighting the need for timely communication among exchanges and law enforcement. As of now, the identity of the victim and the attacker remains unknown, but analysts are working to trace the transactions and potentially recover the stolen assets.
New Developments in the Binance Hack
- The $6.34 billion theft from Binance was initiated through a fake job interview and involved a five-month preparation period.
- Attackers used a tampered Homebrew installer to gain initial access, leading to a series of social engineering tactics targeting Binance engineers.
- Binance has successfully frozen or intercepted approximately $2.85 billion of the stolen assets and has replenished 98% of affected tokens from its own funds.
- The FBI has attributed the hack to North Korea, a claim that has been denied by the North Korean government.
- During the attack, the compromised signing service allowed the attackers to execute unauthorized transactions without exposing their key.
- In the aftermath, Binance experienced $10.97 billion in customer withdrawals within 46 hours after reopening withdrawals, with net outflows of $5.28 billion.
- Binance has since rebuilt its wallet system and internal AI tool, expanded security measures, and is commissioning an independent review of the incident.
New Developments in the Binance Breach Response
- On October 29–30, 2026, Binance experienced unauthorized withdrawals totaling approximately $6.3 billion.
- Coinbase's CEO Brian Armstrong publicly offered assistance within hours of the breach and began blocking transactions to compromised addresses.
- Stablecoin issuers Tether and Circle froze approximately $971 million and $823 million, respectively, in assets related to the hack, totaling nearly $1.8 billion locked down.
- Binance plans to cover losses using its Secure Asset Fund for Users (SAFU) and excess reserves, which total $6.34 billion.
- By early November 2026, Binance began restoring operations and resumed withdrawals in phases, with deposits exceeding withdrawals at certain points.
- The cooperation among exchanges highlights the importance of coordinated response tools in the event of security breaches.
New Insights on the Binance Hack Impact
The recent $6.3 billion Binance hack has had a significant impact on leveraged traders, according to Tobias Robinson, CEO of DayTrading.com. He noted that the biggest losses were felt by these traders rather than those whose assets were directly stolen.
Following the breach on October 29, the market experienced a selloff that led to approximately $1.68 billion in liquidations across various crypto exchanges, with $1.43 billion coming from long positions alone. Around 256,000 traders were liquidated as Bitcoin's price dropped nearly 5% within hours.
Robinson emphasized the risks of excessive leverage, explaining that traders can calculate their liquidation threshold by dividing 100 by their leverage. For instance, a 20x leveraged position can withstand a price drop of about 5%, while a 10x position can handle a 10% drop.
He also warned that stop loss orders might not execute at intended prices during sharp market declines, and recommended that traders size their positions for worst-case scenarios rather than average market conditions.
Additionally, he pointed out that UK retail traders have faced restrictions on crypto derivatives since January 2021, and those using offshore platforms may not have the same protections.
FAQ
What prompted Kraken to block accounts?
Kraken blocked accounts in response to a suspected cryptocurrency theft exceeding $133 million, which was flagged by blockchain investigator ZachXBT.
How much total loss was identified in the theft?
The total loss identified in the theft was $133 million, with initial estimates of over $106 million and an additional $27 million found later.
Did the theft originate from Kraken's platform?
No, Kraken confirmed that its security systems remain intact and that the incident did not originate from its platform.
What actions are being taken by Crypto.com and OKX regarding the incident?
Crypto.com has restricted the movement of associated funds, while OKX is conducting its own investigation into the matter.
What are the concerns raised by this incident?
The incident raised concerns about the speed at which stolen digital assets can be transferred between platforms, emphasizing the need for timely communication among exchanges and law enforcement.