As of 30 October 2026, two numbers are circulating for the same incident, and readers are right to ask which one to trust. One widely reported estimate puts the impact of the Binance breach on 29 October 2026 at about $6.3 billion, while Chainalysis has put its estimate at about $5.9 billion. The gap between them is roughly $400 million, which sounds large on its own but is small beside totals of this size.

The first thing to understand is that neither figure is presented as a finished audit. The investigation is ongoing, and every total published in the first days after a breach is a working estimate. Investigators are still tracing movements, separating confirmed losses from funds that were moved and then frozen, and checking whether any transactions have been counted more than once.

Why two totals exist

Different counters can also draw different boundaries around the same event. One tally may count the full value of assets that left Binance-controlled wallets, while another may count only assets it has independently traced and verified by a particular cut-off time. Timing matters too: a total compiled earlier in the day can miss later traces, while a later total can include movements that an earlier counter had not yet confirmed.

Frozen funds add another layer of confusion. About $3 billion has been frozen so far, including $2.3 billion in USDT and USDC, with Tether freezing more than $1.567 billion in USDT and Circle freezing about $823 million in USDC, plus about $200 million frozen by Ripple and $27 million in USD1 frozen by World Liberty Financial. A frozen coin has been stopped from moving further, but freezing is not the same as returning it, and different estimates may treat frozen value differently.

The ether trail shows why tracing takes time. Around 204,500 ETH was moved from a wallet known as Binance 14, which appeared in Binance proof of reserves on 1 October, leaving ETH backing near 94 percent, down from 100 percent on 1 October. Etherscan movements reported separately include 167,464 ETH from Binance 14 and 28,005.6 ETH from Binance 16, followed by 195,460 ETH, worth about $442 million, moving to a second address. Reconciling wallet-level movements like these into one clean total is exactly the work that produces different interim numbers.

What the frozen total does not prove

Scale is one point on which the estimates agree, even if they differ on the precise total. Either $5.9 billion or $6.3 billion would make this the largest crypto theft on record, well above the $1.5 billion Bybit theft in 2025. The record comparison therefore survives the disagreement, while the exact ranking of every dollar does not yet settle it.

The preliminary account of how the breach happened also explains why early totals move. Investigators have pointed, on a preliminary basis, to a compromised DevOps engineer laptop that gave access to a service container and allowed unauthorised withdrawals, with no evidence so far of a wallet private key leak. Ethereum feature EIP-7702 was reportedly used on Binance 14, turning it into a sweeper. As that chain of events is checked wallet by wallet, totals can be revised up or down.

The next firm checkpoint is dated. Binance next proof-of-reserves snapshot is due on 1 November 2026, and it will show whether stolen assets were replaced. Until that snapshot and further investigator updates appear, the honest way to describe the loss is as a range: roughly $5.9 billion to $6.3 billion, preliminary, with about $3 billion frozen so far.

Frequently asked questions

FAQ: Why do the estimates differ? Because counters use different cut-off times, verification standards, and treatments of moved and frozen funds while tracing is still under way. Which figure is final? Neither yet; the investigation is ongoing and figures are preliminary. What should readers watch? Official Binance channels and the 1 November 2026 proof-of-reserves snapshot, rather than any single early total.