Trusted by Coinbase, MetaMask, Stellar, and more to detect, understand, and protect against fraud, scams, and exploits in real time.
New York & Tel Aviv
Joined February 2023
- Tweets1.9K
- Following447
- Followers26.9K
- Likes1.7K
Blockaid retweeted
🚨 INSIGHT: Ethereum’s EIP-7702 didn’t cause Binance’s $6.3B hack but may have helped attackers bypass security checks and drain funds in one sweep, @blockaid_ CEO Ido Ben-Natan tells Cointelegraph.
ct.com/news/binance-hack-sec…
Blockaid retweeted
Existing security solutions could have prevented this hack...
"The delegation transaction was the point where this attack could have been stopped. Blockaid's transaction security engine classified the type-4 transaction that delegated Binance 14 as malicious on sight"
The biggest theft in crypto history: an attacker hijacked Binance’s signing service and drained $6.3B from its hot wallets.
Using advanced AI models and our industry-leading exploit detection engine, Blockaid detected it in under two minutes.
Read more: blockaid.io/blog/binance-55b…
Blockaid retweeted
For financially motivated attackers, crypto is a primary target.
With the rise of AI, we're only going to see more of these.
Blockaid retweeted
Crypto is the money agents will choose.
As agents become better at cyber than humans, crypto will continue to be the most targeted infrastructure in the world.
Now by DPRK, in the future by Super intelligence agents
Blockaid retweeted
The common thread across the biggest hacks in history - blind signing.
Attackers are financially motivated, stealing the actual private key is hard, causing the signer to sign a malicious payload is the chosen attack vector.
Every signer needs to simulate and validate transactions using @blockaid_!
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Blockaid retweeted
Using advanced AI models @blockaid_ detected what is likely the biggest hack in the history of the world.
We are investigating a cluster of large outflows from Binance hot wallets that began at approximately 20:24 UTC on 29 October 2026. On-chain, the transfers look consistent with unauthorized movement from those wallets, but this has not been confirmed by Binance, and we cannot yet rule out an internal treasury or operational sweep.
Observed chains: Ethereum, Arbitrum, and Avalanche, with related receipts also visible on Optimism.
Observed scale (approximate, still being reconciled):
Ethereum: about $2.5 billion from Binance 14 and Binance 16, plus an additional 780,000,000 USDC from a Binance smart account
Arbitrum: about 8,426 ETH (~$19.5 million)
Avalanche: about 1.81 million AVAX and 8.4 million USDT (~$24 million)
Affected Binance wallets include:
Ethereum Binance 14: 0x28C6c06298d514Db089934071355E5743bf21d60
Ethereum Binance 16: 0xDFd5293D8e347dFe59E90eFd55b2956a1343963d
Ethereum smart account: 0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055
Arbitrum Binance 56 / Hot Wallet 1 / Binance 89: 0x1b5b4e441f5a22bfd91b7772c780463f66a74b35, 0xf92402bb795fd7cd08fb83839689db79099c8c9c, 0x3931dab967c3e2dbb492fe12460a66d0fe4cc857
Avalanche Binance 49 / 85 / 110 / 118: 0x9f8c163cBA728e99993ABe7495F06c0A3c8Ac8b9, 0x6D8bE5cdf0d7DEE1f04E25FD70B001AE3B907824, 0xABa2D404C5C41da5964453A368aFF2604Ae80A14, 0x3BCE63C6C9ABf7A47f52c9A3a7950867700B0158
Primary collection address (same across the affected chains): 0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c
Further destination wallets currently holding a large share of the funds include: 0x9749292D74Fd460982d0912eA9515EA24736C762, 0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e, 0x8532fa14acaf483729c449b8458aeddb900543d4, and 0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A.
We recommend treating this as unconfirmed until Binance issues an official statement. We will update as we verify more.
Blockaid retweeted
We are investigating a cluster of large outflows from Binance hot wallets that began at approximately 20:24 UTC on 29 October 2026. On-chain, the transfers look consistent with unauthorized movement from those wallets, but this has not been confirmed by Binance, and we cannot yet rule out an internal treasury or operational sweep.
Observed chains: Ethereum, Arbitrum, and Avalanche, with related receipts also visible on Optimism.
Observed scale (approximate, still being reconciled):
Ethereum: about $2.5 billion from Binance 14 and Binance 16, plus an additional 780,000,000 USDC from a Binance smart account
Arbitrum: about 8,426 ETH (~$19.5 million)
Avalanche: about 1.81 million AVAX and 8.4 million USDT (~$24 million)
Affected Binance wallets include:
Ethereum Binance 14: 0x28C6c06298d514Db089934071355E5743bf21d60
Ethereum Binance 16: 0xDFd5293D8e347dFe59E90eFd55b2956a1343963d
Ethereum smart account: 0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055
Arbitrum Binance 56 / Hot Wallet 1 / Binance 89: 0x1b5b4e441f5a22bfd91b7772c780463f66a74b35, 0xf92402bb795fd7cd08fb83839689db79099c8c9c, 0x3931dab967c3e2dbb492fe12460a66d0fe4cc857
Avalanche Binance 49 / 85 / 110 / 118: 0x9f8c163cBA728e99993ABe7495F06c0A3c8Ac8b9, 0x6D8bE5cdf0d7DEE1f04E25FD70B001AE3B907824, 0xABa2D404C5C41da5964453A368aFF2604Ae80A14, 0x3BCE63C6C9ABf7A47f52c9A3a7950867700B0158
Primary collection address (same across the affected chains): 0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c
Further destination wallets currently holding a large share of the funds include: 0x9749292D74Fd460982d0912eA9515EA24736C762, 0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e, 0x8532fa14acaf483729c449b8458aeddb900543d4, and 0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A.
We recommend treating this as unconfirmed until Binance issues an official statement. We will update as we verify more.
Blockaid retweeted
1/ Security isn’t a feature. It’s infrastructure.
We’re excited to announce our partnership with @blockaid_.
Bringing industry-leading security infrastructure to Concrete Vaults and the depositors who use them.
Blockaid retweeted
AI is getting better and better at hacking and the obvious target is financial infra & apps. If you are building in finance, security should be top of mind.
Since we released our H1 report in August the number of cyber incidents taking place onchain have continued to hit record highs month over month.
Threat actors are financially motivated and targeting onchain infrastructure is the highest ROI for hackers to make money.
This trend grows more acute as agentic access to capital grows.
Blockaid retweeted
Since we released our H1 report in August the number of cyber incidents taking place onchain have continued to hit record highs month over month.
Threat actors are financially motivated and targeting onchain infrastructure is the highest ROI for hackers to make money.
This trend grows more acute as agentic access to capital grows.
🤖 Made with AI
Blockaid retweeted
Together with @blockaid_ we're launching Blockaid Bridge Sentinel, a new DVN that screens proposed transactions against Blockaid's real-time threat intelligence engine.
Learn more about how it works↓
Blockaid has partnered with @LayerZero_Core to bring real-time threat intelligence verification to its cross-chain messaging.
Bridge Sentinel is a Blockaid-operated DVN available to issuers on LayerZero.
It screens every message against Blockaid's fraud detection engine for forged source events, malicious counterparties, and stolen funds before the DVN signs and assets move cross-chain.
Learn more: blockaid.io/blog/blockaid-pa…
Blockaid retweeted
Blockaid transaction screening now runs natively inside @FordefiHQ.
🔎 @blockaid_ findings next to Fordefi's own risk checks 🛡️ Proposers and approvers see the same risk context ⚙️ Screening status doubles as a policy condition
Full breakdown → medium.com/fordefi/blockaid-…
Blockaid retweeted
We welcome @blockaid_ as a partner for both the Digital Asset Yield Summit and Hyperliquid Forum (@HL_forum).
@blockaid_ is the Web3 security platform built to prevent scams, fraud, exploits, and compliance risk in real time for protocols, wallets, exchanges, banks, and hedge funds. Quick numbers: $312B in assets secured, $13.1B in theft prevented, 527M attacks prevented, 5.9B transactions scanned.
Digital Asset Yield Summit is where private capital explores onchain yield: a tightly curated room of 300 institutional allocators and asset managers.
@HL_forum is a VIP, curated, and independent room inside DAYS, created to connect forward-thinking institutions with the protocols, teams, and yield opportunities reshaping global finance.
A few complimentary spots remain open for LPs and Allocators.
🔗 Request an Invite → daysevent.com/singapore#pass…
Blockaid retweeted
1/ As consumer agents start to take off with Muse, Instinct, and others to come
We wanted to build a tool that would help researchers understand what’s actually happening under the hood
We were especially motivated by reports of Instinct losing users’ money
Here’s a demo of our Interceptor tool with Muse:
Blockaid retweeted
OpenEden is returning to @token2049 Singapore with The Onchain Lounge.
This exclusive networking event brings together founders, investors, and institutions for an open exchange of perspectives on tokenized finance.
The event is held in partnership with @BNYGlobal, @SPGlobalRatings, @UTechStables, @blockaid_, @utila_io, @Darley_Tech, and @Anchorage.
📅 6 Oct, from 7 PM UTC+8
📍 Milli Lounge, National Gallery Singapore
Request to join: luma.com/g9ajr0gx
Blockaid retweeted
Security shouldn’t be an afterthought.
We’re proud to be working with an industry-leading provider like @blockaid_.
Read more about USDv’s security positioning at: app.solomonlabs.org/stats/se…
Blockaid has partnered with @solomon_labs to bring Onchain Monitoring to its USDv stablecoin.
Coverage is live across USDv's operations, giving Solomon real-time oversight and protecting every tokenholder and protocol integrating it in the @solana ecosystem.
Learn more: blockaid.io/blog/blockaid-br…
Blockaid retweeted
Security programs are built around moments. Attacks are built around months.
@idobn, Co-founder of @blockaid_ : real operations chain research, malware, and lateral movement for weeks before the theft. AI just makes the chain cheaper to run.
Defense has to be continuous too. That's how we approach contracts at @OlympixSecurity.
Blockaid retweeted
Arc Mainnet is live.
Arc launches as the Economic OS for the internet: an open platform for global markets, real-time value movement, tokenized assets, and agentic economic activity.
Arc is more than a blockchain.
It launches as a full-stack financial platform with assets, applications, interoperability, developer infrastructure, and Circle platform services live from day one.
Arc delivers USDC as native gas, deterministic sub-second finality, EVM compatibility, and institutional validators.
It integrates with Arc Studio, App Kits, Arc Portal, Circle Agent Stack, CCTP, Gateway, CPN, and StableFX.
A complete economic platform at genesis.
Arc launches with infrastructure for:
→ Agentic economic workflows
→ Lending and borrowing
→ Trading and liquidity
→ Onchain FX
→ Payments and settlement
→ Tokenized assets
→ Exchanges, wallets, custody, compliance, data, and developer tooling
190+ institutional and ecosystem builders are building across Arc.
