Binance warn of a possible of another wave of crypto attack

[asriloni]

The main point is that to never "trust anything". The phishing related scam happened when someone was dumb enough to believe in something. So the easy solution to withdraw the money by yourself, then storing it to the non connected device, which is significantly reduce the chance for your wallet to be compromised.

An awareness from Binance is fine, but the better they focus on their own exchange. They get hacked once, but it's also possible they also get hacked for 2nd times. The better to withdraw your money, then save it by yourself.

Holding your asset on Binance is meaning you trust them your asset. Who knows they get another hack, yet unable to recover, then your money stuck there.

"Not your key, Not your coin". You have been warned storing all of your money on CEX ain't safe by Binance hack case, kinda dumb if you're still doing it after hacked experience.

[Conqueror777]

Those who are waiting to withdraw their assets from Binance are warned of another possible wave of crypto theft, and this time against Binance users. We don't know if Binance just wants people to delay or abandon withdrawing their assets, but these warnings are worth checking to avoid becoming a victim.

Will you withdraw your assets or abandon the idea of withdrawing them because of this warning?

In a Nov. 2 security advisory, the exchange said fraudsters could take advantage of its phased withdrawal reopening by impersonating Binance representatives and offering customers assistance with delayed transactions, compensation claims and asset recovery.

The warning covers fraudulent emails, direct messages, group chats and even small cryptocurrency transfers carrying malicious instructions.

According to Binance, scammers may promise to speed up pending withdrawals, sell customers priority access to withdrawal queues, or instruct them to transfer their holdings into supposedly secure wallets.

Binance warns of second wave of crypto theft as $6.3 billion hack recovery continues

not your keys not your assets as they say. The most logical thing to do is to withdraw all your crypto and keep it on either on software or hardware wallets (hardware is better).

[Ishicryptic]

I thought that another massive attack directly going to hit binance's hot wallet. But if this a warning for the users, I think everyone is very careful of how they shall keep their accounts and the practice on how they browse the internet. If there are unwanted links, promos and other attractive messages that are coming after the users, it's best to not entertain any of them. A basic measure will keep them away from these potential threats and harms of falling to the phishing attacks. And it's not only binance should have been specific to this but almost every platform that have a data leak before.

I was a little alarmed too when I saw the topic, I thought that Binance was warning it's customers about another possible attack to hack their exchange but I was relieved when I saw that it is as a warning against scammers, they did well to share their observations. Like you said it is also important for account holders in other platforms that have been breached to take note because if scammers can target Binance account holders after the hack nothing stops them from doing the same to other platforms that were also recently hacked. Make sure to verify any emails that are sent to you in the name of these platforms or their officials, also social media platforms like telegram are not a good place to get authentic information, there are too many scammers out there.

[Mongoll]

One line in that advisory is easy to skip: "small cryptocurrency transfers carrying malicious instructions". In practice those small transfers come in two kinds.

The first one carries text: a token named like a website, or a memo telling you to claim compensation somewhere. It only works if you follow it.

The second one carries nothing, and it is the more dangerous one. A bot sees your withdrawal arrive, creates an address with the same first and last characters as yours, and sends you 0 or a few cents from it. Now a look-alike address sits in your history, and the next time you copy "your" address from there, you pay the attacker.

This has already happened with a Binance withdrawal. In December 2025 a trader moved almost 50M USDT off Binance, sent a 50 USDT test first, and 26 minutes later sent the rest to a look-alike address copied from history. The test transfer was what told the bot which address to imitate.

So when withdrawals reopen, take the destination from the wallet's Receive screen or the exchange whitelist, never from history, and compare the middle characters, not only the ends.

[batang_bitcoin]

I thought that another massive attack directly going to hit binance's hot wallet. But if this a warning for the users, I think everyone is very careful of how they shall keep their accounts and the practice on how they browse the internet. If there are unwanted links, promos and other attractive messages that are coming after the users, it's best to not entertain any of them. A basic measure will keep them away from these potential threats and harms of falling to the phishing attacks. And it's not only binance should have been specific to this but almost every platform that have a data leak before.

I was a little alarmed too when I saw the topic, I thought that Binance was warning it's customers about another possible attack to hack their exchange but I was relieved when I saw that it is as a warning against scammers, they did well to share their observations. Like you said it is also important for account holders in other platforms that have been breached to take note because if scammers can target Binance account holders after the hack nothing stops them from doing the same to other platforms that were also recently hacked.

Like it was happening even there was no binance hack. And that's why we're alert on this type of attack even before but, still, it's a good reminder that they're giving to their users. Because maybe not all have been aware of such possible attacks directly on their users due to the leakage of the data or whatever has been taken from them aside from the huge pool of funds that was stolen on them.

Make sure to verify any emails that are sent to you in the name of these platforms or their officials, also social media platforms like telegram are not a good place to get authentic information, there are too many scammers out there.

Don't click on any links from emails, always go directly to the website if you know it. Telegram and other apps have usual scammers that are only waiting for their victims to fall for their message tricks.

[Accardo]

Cyber attacks are now increasingly massive, about the warning from Binance it makes sense that they need to be alert to new waves of hacking attacks even though what we encounter more often is phishing and malware present on their computers.

Binance is becoming suspicious every single day, and ever since the recent hack the exchange has made it to the top of the lists of arguments in the crypto community, many questions about the previous one, which also struck me is the reason behind Binance move of $6.3 billion to their hot wallets, while, they usually allow a few hundred millions in the hot wallet, and kept 90% of user funds in cold wallet? They're numerous conspiracy going on right now about this hack and the trouble keeps on growing and escalating.

[Marykeller]

This is a stern warning Binance is sending to its customers. I am sure every other exchange will do the same for their customers to be aware of the possible theft before it happens to them, as they will all be in a hurry to withdraw their assets.

As for this notice, it will not stop those who want to withdraw their assets from withdrawing. The only thing is that they will be on the lookout for what is stated below

fraudulent emails, direct messages, group chats and even small cryptocurrency transfers carrying malicious Instructions

[trendcoin]

These warnings are helpful for users making withdrawals, but I don’t think it makes much sense to delay a withdrawal just because of this warning. Even if this hack hadn’t happened, scammers could still have defrauded users using these methods. Users must always be vigilant. If there’s anyone who needs to be more careful against scammers, it’s Binance itself, in my opinion. That’s why if we were to draft a warning message and present it to them, we’d be establishing a more appropriate approach...

[Hyphen(-)]

These warnings are helpful for users making withdrawals, but I don’t think it makes much sense to delay a withdrawal just because of this warning. Even if this hack hadn’t happened, scammers could still have defrauded users using these methods. Users must always be vigilant. If there’s anyone who needs to be more careful against scammers, it’s Binance itself, in my opinion. That’s why if we were to draft a warning message and present it to them, we’d be establishing a more appropriate approach...

That’s true, with or without the hacks, scammers can do their job to defraud people through different means which phishing attacks is inclusive through phishing links, the warnings are actually helpful, but that should not stop or delay withdrawals. Now that everything is back normal, I just hope many of us especially the beginners have learned from this hack. It teaches a lot lessons which if you carefully study them will help us in our crypto journey. We should not always rely on centralized exchanges, we should just use them to buy swap and sell, then maybe trade for traders, so that if such hacks happens, you can not panic anymore b cause some of us don’t have any storage apart from that if centralized exchanges.

[noorman0]

Binance is becoming suspicious every single day, and ever since the recent hack the exchange has made it to the top of the lists of arguments in the crypto community, many questions about the previous one, which also struck me is the reason behind Binance move of $6.3 billion to their hot wallets, while, they usually allow a few hundred millions in the hot wallet, and kept 90% of user funds in cold wallet? They're numerous conspiracy going on right now about this hack and the trouble keeps on growing and escalating.

Well, conspiracies are everywhere, all stemming from one core theory: that CZ remains a "shadow CEO" of Binance, still entangled in geopolitics. In fact, there was one specific tweet that convinced me the recovery process would be handled much faster than in the case of a minor hacking incident.

ALERT: Someone predicted back in June that Binance would be hacked in “2026 or 2027.”

[Odogwu-Blockchain]

Those who are waiting to withdraw their assets from Binance are warned of another possible wave of crypto theft, and this time against Binance users. We don't know if Binance just wants people to delay or abandon withdrawing their assets, but these warnings are worth checking to avoid becoming a victim.

Will you withdraw your assets or abandon the idea of withdrawing them because of this warning?

Of course, there will be many scam attempts. So many fake Binance representative will emerge to help users about their withdrawals since there is congested withdrawal.

A friend ask me few days ago, to send my binance UID so his friend can send me USDT for Fiat, since Binance is not enabling them to withdraw to external wallet but allow internal transfer.

If I was a scammer, I would've accepted and never return Fiat. So many scammers will leverage on this opportunity to steal many people funds.

[Accardo]

Well, conspiracies are everywhere, all stemming from one core theory: that CZ remains a "shadow CEO" of Binance, still entangled in geopolitics. In fact, there was one specific tweet that convinced me the recovery process would be handled much faster than in the case of a minor hacking incident.

The recovery process doesn't look strong, the FBI is tracking down on thorchain node operators to block transactions linked to the binance hack, but the hackers are more sophisticated, they're news of fresh rinsing method the hackers implement not to be traced. The good thing is that customer funds are safu, as for recovery it'll be close to impossible.

[Nightwatchmare]

If i still have Bitcoin and some cryptocurrencies stored on Binance exchange after hackers stole cryptocurrencies worth $6.3 billion and i see this warning from Binance, i will quickly withdraw all my assets on Binance exchange so that i will not lose them to hackers, the only way i would abandon the idea of withdrawing them is if the wallet address i want to send my assets would automatically change to the hackers address. The warning of Binance is not for another possible crypto attack it is just a tip they will guide their users not lose money to scammers

[mindrust]

Cyber attacks are now increasingly massive, about the warning from Binance it makes sense that they need to be alert to new waves of hacking attacks even though what we encounter more often is phishing and malware present on their computers.

Binance is becoming suspicious every single day, and ever since the recent hack the exchange has made it to the top of the lists of arguments in the crypto community, many questions about the previous one, which also struck me is the reason behind Binance move of $6.3 billion to their hot wallets, while, they usually allow a few hundred millions in the hot wallet, and kept 90% of user funds in cold wallet? They're numerous conspiracy going on right now about this hack and the trouble keeps on growing and escalating.

It is very possible that the hack was staged or an inside job. The explanations were way too cheesy. I am having a hard time to believe those. They are not telling the truth imo. I mean it could be a hack, possibly it was the binance employees who hacked the exchange. It is very hard to have a secure system when the security specialists themselves are the thieves.

People who haven't lost any money on this should consider themselves lucky and take it as a warning sign, withdraw your funds to a cold wallet asap.

[nelson4lov]

I thought that another massive attack directly going to hit binance's hot wallet. But if this a warning for the users, I think everyone is very careful of how they shall keep their accounts and the practice on how they browse the internet. If there are unwanted links, promos and other attractive messages that are coming after the users, it's best to not entertain any of them. A basic measure will keep them away from these potential threats and harms of falling to the phishing attacks. And it's not only binance should have been specific to this but almost every platform that have a data leak before.

The threat is real, it's just not what binance posted about. OP has already admitted that he posted before proofreading. Overall, I see it as an important reminder that the current state of security in crypto is disappointing, and despite the hacks from the last few years, nothing has really changed.

The warning from Binance is important too since users might receive mails that they have to do things like change their password. Fortunately, binance has a safeword (set by the user) that attached to emails from Binance.

[Accardo]

It is very possible that the hack was staged or an inside job. The explanations were way too cheesy. I am having a hard time to believe those. They are not telling the truth imo. I mean it could be a hack, possibly it was the binance employees who hacked the exchange. It is very hard to have a secure system when the security specialists themselves are the thieves.

People who haven't lost any money on this should consider themselves lucky and take it as a warning sign, withdraw your funds to a cold wallet asap.

It's very clear, seeing the level of Trolling CZ receives from Elon, the declaration is simple, there is more to the hack than the entire public is being told. Currently users from EU are told to take their money out due to the exchange not complying to Mica, or Eu users are to pay certain fees to have their funds on the exchange.

[AYOBA]

This question has no answer because you already know the best thing to do when you have received a warning from the exchange that was recently attacked. You don't need to leave your assets in an exchange at some point they will stop taking responsibility for any loss it people insist on keeping their assets with them. They have proven to be trustworthy by allowing all their customers to have access to your assets, if there is a successful hack again this time the customers may be asked to also hear the loss. Investors should remove their assets and protect it in their own wallet, hackers will not target the wallet or the customers try don't have what they want but since the exchanges have more than what they want they will keep attacking them.

But if it’s that the recently exchanged that was hacked has send a warning to their customers I think the best thing is to send out the assets to one wallet that you is save well none can able to touch. And that hacker issue that happened to Binance make them lose most of their customers, because everyone want to keep their assets with them leave it in an exchange.

This is time for us think wisely and learn how save their assets to avoid hacker because some investors are very careless, that is why mostly hacker find it very easy to some people wallet, and once they hacker someone wallet there’s not any way to track them it’s difficult.

[jossiel]

Well, conspiracies are everywhere, all stemming from one core theory: that CZ remains a "shadow CEO" of Binance, still entangled in geopolitics. In fact, there was one specific tweet that convinced me the recovery process would be handled much faster than in the case of a minor hacking incident.

That is an open secret.

He's more vocal than the one who's the actual CEO right now - Richard Teng and Yi He.

ALERT: Someone predicted back in June that Binance would be hacked in “2026 or 2027.”

Should we be happy that the hack was done and that's the sign that the bottom was already in?

I guess that it happens every time that the market gets in a bear market. If it's not with binance, it will be from some other exchange.

[BALIK]

Binance is becoming suspicious every single day, and ever since the recent hack the exchange has made it to the top of the lists of arguments in the crypto community, many questions about the previous one, which also struck me is the reason behind Binance move of $6.3 billion to their hot wallets, while, they usually allow a few hundred millions in the hot wallet, and kept 90% of user funds in cold wallet? They're numerous conspiracy going on right now about this hack and the trouble keeps on growing and escalating.

Is the situation really getting worse? Didn't Binance commit to covering the entire loss out of its own pocket and already replenish almost all of the stolen funds? Users aren't taking any financial loss from this.

Yeah $6.3B is a big number, but it's only about 4% of the $171B Binance says it manages. So that number alone isn't proof they're keeping over 10% of user funds in hot wallets.

Well, conspiracies are everywhere, all stemming from one core theory: that CZ remains a "shadow CEO" of Binance, still entangled in geopolitics. In fact, there was one specific tweet that convinced me the recovery process would be handled much faster than in the case of a minor hacking incident.

That is an open secret.

He's more vocal than the one who's the actual CEO right now - Richard Teng and Yi He.

It's hardly surprising that CZ is still calling the shots behind the scenes at Binance. That said, even if he's not directly involved in running the company. It's no wonder he's more vocal than both CEOs, given that he remains Binance's largest shareholder, holding a 90% stake.

[crwth]

Hackers can exploit many vulnerabilities, which is what we're discussing. Most of the time, users run into problems because they aren't vigilant. So, I think the best approach when you make withdrawals from your account is to use whitelisting for addresses.

This helps users ensure that if they make repeated withdrawals to the same address, they take full advantage of that control.

One good rule of thumb is: even if it looks official, don't trust it easily. Make sure it's a reasonable email or something.