Rune Maxi retweeted
Binance 🚨🚨is balance sheet restructuring & trying to stop a bank run that was likely already forming due to their internal bad debts or fractional reserve practices. . Binance is facing a massive liquidity crisis (maybe due to bad loans, FTX-style internal trading desk losses, or regulatory freezes). They need to lock up $6.3 billion in user funds without admitting insolvency. 🚨
They engineered a "hack" using the EIP-7702 vector. They move the funds to wallets they control. They freeze $3B of it (to stop the bank run on their own exchange) and let $3.3B "escape" into dormant BTC wallets and Uniswap swaps (which are likely wash trades back to their own market makers). They crash the market 4-5% to liquidate short positions and scoop up cheap assets.
🚨
Look at the forensic breakdown of the attack. In the span of 20 minutes, the attacker drained funds across ten different blockchains, including Bitcoin, Ethereum, Tron, Solana, XRP, Optimism, and Avalanche.
🚨
These blockchains do not share the same cryptographic curves or key types. Bitcoin uses ECDSA (secp256k1). Solana uses Ed25519. XRP uses its own variant of ECDSA. A single compromised laptop does not possess the magical ability to sign valid transactions across ten fundamentally different cryptographic architectures in 20 minutes. As TRM Labs explicitly noted in the forensic data, a single phished Ethereum authorization cannot explain Bitcoin, Tron, XRP Ledger, Solana, and layer-2 transfers all occurring simultaneously
🚨
If a real hacker compromised their laptop, they would have to navigate Binance’s internal infrastructure to access 10 separate, isolated hot-wallet signing services, bypassing hardware security modules and multisig requirements for each individual chain. That takes hours or days of lateral movement, not 20 minutes.
🚨
The only entity capable of executing simultaneous, validly signed withdrawals across ten different chains in 20 minutes is the exchange’s own internal automated withdrawal engine
—🚨
According to the on-chain data, the attacker took 325 million USDT and swapped it for Ethereum on UniswapX at a 10 percent discount, paying a massive premium for speed.
Professional market makers absorbed that trade. Why would an external hacker take a 10 % haircut on an irreversible, unsanctioned swap when they control the wallet? They wouldn't.⚠️⚠️🚨
Furthermore, the Bitcoin stolen was split into exactly 1,000 BTC chunks across 17 new wallets and then sat completely dormant.
🚨
It was not laundered. It was not moved to a mixer. It was organized into clean, institutional-sized blocks and parked. Hackers do not park stolen funds in neat, 1,000 BTC increments. Institutional custodians do this when they are restructuring balance sheets or moving funds to cold storage under their own control.🚨
The attacker even routed test transactions back to itself before the main sweep.
This is the behavior of an internal engineer testing a deployment script.🚨
—-
Binance is doing exactly what FTX did before its collapse, just with a more sophisticated smokescreen. They have halted withdrawals. They are promising to make users whole with money they do not have.
🚨
Within the next 30 to 60 days, Binance will slowly resume withdrawals for small retail users to maintain the illusion of solvency. Large institutional whales will find their accounts frozen indefinitely pending "investigation" into the hacked funds. The $3.3 billion in Bitcoin and Ethereum currently sitting in dormant wallets will not be recovered. It will be slowly commingled with other exchange flows over the next year to quietly plug Binance's internal holes.
🚨
You are watching a bank robbery designed to hide the fact that the largest exchange on earth is out of money.
-
kenhuangus.substack.com/p/ho…
nbcnews.com/business/markets…
Binance faked a multi billion dollar hack to default on its own customer liabilities
funds are stolenu
Binance 🚨🚨is balance sheet restructuring & trying to stop a bank run that was likely already forming due to their internal bad debts or fractional reserve practices. . Binance is facing a massive liquidity crisis (maybe due to bad loans, FTX-style internal trading desk losses, or regulatory freezes). They need to lock up $6.3 billion in user funds without admitting insolvency. 🚨
They engineered a "hack" using the EIP-7702 vector. They move the funds to wallets they control. They freeze $3B of it (to stop the bank run on their own exchange) and let $3.3B "escape" into dormant BTC wallets and Uniswap swaps (which are likely wash trades back to their own market makers). They crash the market 4-5% to liquidate short positions and scoop up cheap assets.
🚨
Look at the forensic breakdown of the attack. In the span of 20 minutes, the attacker drained funds across ten different blockchains, including Bitcoin, Ethereum, Tron, Solana, XRP, Optimism, and Avalanche.
🚨
These blockchains do not share the same cryptographic curves or key types. Bitcoin uses ECDSA (secp256k1). Solana uses Ed25519. XRP uses its own variant of ECDSA. A single compromised laptop does not possess the magical ability to sign valid transactions across ten fundamentally different cryptographic architectures in 20 minutes. As TRM Labs explicitly noted in the forensic data, a single phished Ethereum authorization cannot explain Bitcoin, Tron, XRP Ledger, Solana, and layer-2 transfers all occurring simultaneously
🚨
If a real hacker compromised their laptop, they would have to navigate Binance’s internal infrastructure to access 10 separate, isolated hot-wallet signing services, bypassing hardware security modules and multisig requirements for each individual chain. That takes hours or days of lateral movement, not 20 minutes.
🚨
The only entity capable of executing simultaneous, validly signed withdrawals across ten different chains in 20 minutes is the exchange’s own internal automated withdrawal engine
—🚨
According to the on-chain data, the attacker took 325 million USDT and swapped it for Ethereum on UniswapX at a 10 percent discount, paying a massive premium for speed.
Professional market makers absorbed that trade. Why would an external hacker take a 10 % haircut on an irreversible, unsanctioned swap when they control the wallet? They wouldn't.⚠️⚠️🚨
Furthermore, the Bitcoin stolen was split into exactly 1,000 BTC chunks across 17 new wallets and then sat completely dormant.
🚨
It was not laundered. It was not moved to a mixer. It was organized into clean, institutional-sized blocks and parked. Hackers do not park stolen funds in neat, 1,000 BTC increments. Institutional custodians do this when they are restructuring balance sheets or moving funds to cold storage under their own control.🚨
The attacker even routed test transactions back to itself before the main sweep.
This is the behavior of an internal engineer testing a deployment script.🚨
—-
Binance is doing exactly what FTX did before its collapse, just with a more sophisticated smokescreen. They have halted withdrawals. They are promising to make users whole with money they do not have.
🚨
Within the next 30 to 60 days, Binance will slowly resume withdrawals for small retail users to maintain the illusion of solvency. Large institutional whales will find their accounts frozen indefinitely pending "investigation" into the hacked funds. The $3.3 billion in Bitcoin and Ethereum currently sitting in dormant wallets will not be recovered. It will be slowly commingled with other exchange flows over the next year to quietly plug Binance's internal holes.
🚨
You are watching a bank robbery designed to hide the fact that the largest exchange on earth is out of money.
-
kenhuangus.substack.com/p/ho…
nbcnews.com/business/markets…
Rune Maxi retweeted
🚨 THE #BINANCE FILES: 10/10 & 10/29 EXPOSED | FULL DOCUMENTARY 🎞️
An investigative film examining the October 10 largest liquidation event and the October 29 largest crypto hack in history, the shocking patterns, and the unanswered questions surrounding @Binance, @cz_binance (Former CEO), @heyibinance (Co-CEO) and @_RichardTeng (CEO).
Rune Maxi retweeted
The argument for Binance's insolvency 🧵
Binance claims to have replaced 90% of the $6.3 billion lost in the hack
But how do we know Binance isn't borrowing billions against customer deposits to cover the losses?
Binance is a private company operating through a complex corporate structure across multiple jurisdictions
It is largely unregulated and does not publicly disclose its complete audited balance sheet or liabilities the same way that Coinbase for example does
This makes its "Proof of Reserves" meaningless as evidence of solvency
Binance could theoretically pledge customer assets as collateral while continuing to report those same assets in its reserves
And if Binance collapses then secured creditors could have priority over depositors and potentially recover billions before customers receive anything
This is precisely the kind of opacity that allowed FTX to conceal its financial condition until it was too late
It's important to remember that CZ is a convicted felon and these people lie to our faces about simple things like "we don't charge listing fees"
No matter how many times they tell you that your funds are safe they are in fact obviously not
CZ and Binance cannot be trusted
There is zero upside to leaving your funds in Binance right now
The moment that withdrawals resume everyone should get their funds out of Binance immediately!!!!!!!
Rune Maxi retweeted
🚨 Something about the Binance situation doesn't sit right with me
Let's look at what's happening.
Binance suffered a reported $6.3 BILLION security breach.
Investigators uncovered additional points of compromise beyond the initially suspected employee laptop.
Now the exchange says withdrawals should resume within approximately 34 hours, but through a phased rollout.
I understand security checks take time. But this isn't some small exchange dealing with a minor incident.
We're talking about Binance.
And I have some serious questions:
• How deep did this breach actually go?
• Have all compromised systems been identified?
• Can users fully trust the infrastructure again?
• What will the full investigation reveal?
Binance says it will cover the losses and has already replenished 90% of the stolen assets.
That's a big commitment.
But money isn't the only issue here. Trust is.
After everything crypto has been through, the last thing this industry needs is another major confidence crisis.
I really hope there's nothing more hiding beneath the surface.
Let's see what the next 48 hours reveal.
Rune Maxi retweeted
Replying to @binance
"Proof of Reserves" proves nothing
How do we know Binance isn't borrowing the $6.34B against user deposits as collateral?
Binance is a private entity that does not publicly disclose its balance sheet or liabilities making it impossible to know if they are insolvent or not
Rune Maxi retweeted
IT IS MORE LIKELY THAN NOT THAT BINANCE IS INSOLVENT RIGHT NOW
THE MOMENT THAT THEY OPEN WITHDRAWALS GET YOUR FUNDS OUT ASAP!!!!!!!!!
Rune Maxi retweeted
Replying to @cryptgodZ @CryptoJulzss
Banks are next.
If you're into Bitcoin and want to live your financial live onchain, give Xverse a try.
Rune Maxi retweeted
Full moon. Full bowl. Full cape. Come get your candy before Dracpup gets bloodthirsty.
Rune Maxi retweeted
Hey @X, when you type solana:dog1viwbb2vWDpER5FrJ4YFG6gq6XuyFohUe9TXN65u on desktop, the cashtag shows the wrong token.
The real solana:dog1viwbb2vWDpER5FrJ4YFG6gq6XuyFohUe9TXN65u is DOG•GO•TO•THE•MOON, a Rune on Bitcoin. And the badge shows Solana because it's pulling the wrapped DOG, not the original.
This creates confusion about who people are actually talking about, and it can mislead new people.
Please fix it 🙏
Rune Maxi retweeted
it’s important to remind people in times like these..
even though I no longer work at @krakenfx, I still believe in the ethos: security above all else
no grave dancing, just facts 🫳🏼
Rune Maxi retweeted
pretty funny elon commenting on druck's hyperliquid post and then trolling binance post hack in the same day
Rune Maxi retweeted
How tf did one engineer have access that unlocked $6 billion?!?!
There is no legit security protocol where this makes sense.
Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions. We have found no evidence of any wallet private key leak. We will share a detailed technical post-mortem once the investigation is complete and the facts are fully verified.
The estimated total impact sits at around $6.3B. We have worked with blockchain partners to freeze affected assets, with ~$3 billion frozen on-chain so far.
Binance will cover all losses from the SAFU fund and the company’s funds. User funds are safe. We will also publish an updated Proof of Reserves once the remediation is complete.
As an immediate precaution, Binance has:
- temporarily suspended deposits and withdrawals while security checks are completed;
- revoked the affected address authorisation;
- engaged law enforcement and blockchain intelligence partners to trace and recover funds.
Our teams are working around the clock to resolve this issue safely and thoroughly. We are working closely with our law enforcement partners to confirm the identity of these criminals and bring them to justice.
Please rely only on official Binance channels for updates. Please feel free to contact Binance Customer Support if you have any further questions.
binance.com/en/support/annou…
Rune Maxi retweeted
Binance hack could be another catalyst pushing more attention toward Hyperliquid
Whenever trust in CEXs gets shaken, traders start looking for alternatives. DEXs could benefit from that shift, but not every DEX is positioned to capture it.
The real winners will be platforms with proven security, deep liquidity, and strong user trust.
And @HyperliquidX is one of the strongest names in that category.
CEX uncertainty could be DEX opportunity. Hyperliquid is right in the spotlight.
Rune Maxi retweeted
The Binance hack is totally an inside job... How do you guess the right authorization number from limitless possibilities?
Clearly they just sprayed 50 to build the narrative that "the attacker just got lucky..."































