By Isaac • October 30, 2026 8:06 am •
The first visible move in the record-setting Binance breach was not a giant Bitcoin transfer or an Ethereum sweep. It was XRP.
According to a detailed CryptoSlate summary of TRM Labs’ on-chain investigation, five Binance wallets on the XRP Ledger moved roughly 233.46 million XRP—worth about $296 million at the time—into one attacker-controlled address between 20:05 and 20:09 UTC on October 29.
Trending: Fox News digital editor found beaten to death in neighbor’s closet, police say
That was the opening bell for a much larger operation. Suspicious transfers began appearing on Solana and Optimism minutes later.
By 20:20 UTC, a Binance Bitcoin wallet had sent 18,270 BTC worth approximately $1.47 billion, while activity on Tron and Ethereum followed almost simultaneously.
The XRP movement was the earliest obvious sign that something
Continue reading
Join the conversation!
Please share your thoughts about this article below. We value your opinions, and would love to see you add to the discussion!