Skip to main content
← All OSINT reports

ISS Global / Investigation Report

Binance security incident

Testing the $6.3 billion claim, tracing the evidence and separating impact from recoverable value

Issued
Location
Global / online systems; Binance-controlled wallets and transaction-authorisation infrastructure
Incident date
29 October 2026, about 20:05 UTC; assessment cut-off: 30 October, 07:15 UTC
Language
English
Document
Initial assessment · 13 pages · PDF · 0.6 MB

An investigation of the reported Binance security incident and unauthorised multi-chain outflows. It examines the provisional impact and frozen-asset estimates, the company’s initial access-and-authorisation account, containment measures and attribution claims, distinguishing gross movement from final loss and frozen assets from recovered value.

First page of Binance security incidentOriginal report cover · Open PDF ↗

Scope & reporting context

Issued 30 October 2026, reviewing 29–30 October with a cut-off of 07:15 UTC on 30 October. Includes a claim audit, event chronology, financial ledger, technical pathway, response and containment assessment, attribution analysis and nine numbered sources. Company and private-sector estimates remain attributed and provisional. No technical post-mortem or public law-enforcement attribution was located within the reviewed record; no defensible physical incident location is established.

The complete PDF contains the report’s source register, assessments and limitations. Read those alongside any individual finding.

How we can help

Connect incident records with their supporting evidence.

Explore Report Desk for structured reporting, source references and documented assessments.