An alert dated October 29, 2026, raises the possibility of a major Binance-related cryptocurrency theft. It claims that a wallet associated with Binance was drained into a newly created address and that Tornado Cash funded the contract call involved. The alert gives the transaction hash 0x53bd38b816c23e74134786c29a8c18d792777998a3b9326047b583100e88e2f3, which readers could use to inspect the reported activity on-chain. The initial wording explicitly says the incident is unconfirmed; the information provided does not establish that Binance was hacked or identify who controlled the wallets.
Follow-up messages escalate the reported scale of the incident, suggesting that $2.5 billion, then $2.77 billion, and potentially as much as $3 billion had been extracted. One message also points to another transaction, claiming an additional $780 million moved from a separate wallet. These figures are presented as developing estimates rather than verified losses, and no official confirmation, technical investigation, or explanation from Binance appears in the supplied material. The central issue is therefore a potentially enormous wallet drain, with transaction activity and use of Tornado Cash cited as clues, but the attribution, total amount, and whether the funds were actually stolen remain unresolved.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a network-reachable use-after-free in Linux’s IPv4 TCP handshake, with researchers demonstrating remote root code execution in a lab using an MPTCP listener. Administrators should inventory exposed Linux services, prioritize MPTCP hosts, install their vendor’s fixed kernel, and reboot into it. (penligent.ai)
Arken is passwordless authentication middleware that verifies decentralized identity signatures made with secp256k1 keys. It is designed to work without passwords or server-side sessions. (github.com)
Go 1.24 enables Multipath TCP by default for Linux listening sockets, exposing servers to attacks involving Linux kernel CVE-2026-98432. Go offers settings to disable MPTCP, but recommends upgrading to a patched kernel because disabling it per program is an unreliable fix. (groups.google.com)
Highway thieves have stolen more than $100 million in data center equipment since June using hacked freight accounts, fake drivers, and GPS spoofing. Targets include servers, fiber-optic cables, chips, copper wire, and power equipment. (arstechnica.com)
Arkham’s explorer page identifies an entity called “Binance-hacker-1029” and attributes $5.6 billion in theft from Binance to it. The attribution is an unverified claim, not proof that the funds were stolen. (arkm.com)
Binance experienced $2 billion in outflows, raising questions about the safety of customer funds. The outflow prompted speculation about a possible hack, but the headline does not confirm one. (beincrypto.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.