Aave Freezes Lending Across 16 Networks

Binance Exploit Drains 195,000 ETH Throughout A number of Blockchains

Decentralized finance (DeFi) lending protocol Aave froze lending markets throughout 16 blockchain networks Thursday following a significant safety breach involving Binance scorching wallets, through which attackers drained greater than 195,000 ethereum (ETH) and tens of millions of {dollars} in altcoins throughout a number of chains.

In keeping with a press release, the exploit started at 3:24 p.m. EST on Oct. 29, 2026, when an attacker initiated a single transaction transferring 167,464 ETH and 63 different tokens from an Ethereum-based Binance scorching pockets to an unidentified tackle. Minutes later, the identical attacker obtained a further 28,006 ETH from a second Binance pockets, together with belongings transferred throughout Arbitrum, Optimism and Avalanche. The assertion added that the continued inflows, together with 444,537 AVAX on Avalanche at 5:04 p.m. EST, indicated that the vulnerability remained energetic for greater than two hours.

Following the preliminary breach, the attacker dispersed funds throughout greater than 20 pockets addresses and started promoting tokens akin to Uniswap (UNI), Chainlink (LINK) and Aave (AAVE) for ether on decentralized exchanges (DEXs).

Attacker Deposits $60 Million Into Aave Earlier than Emergency Freeze

Between 3:58 p.m. EST and 4:01 p.m. EST, earlier than protecting measures had been carried out, a pockets linked to the attacker deposited $60 million in tether (USDT) into Aave V3 Ethereum Core and borrowed 19,762 wrapped ether (WETH), valued at roughly $44.6 million. Safety analysts confirmed that the place stays overcollateralized, with $59.9 million in USDT collateral backing $43.8 million in debt. Because of this, the place poses no direct insolvency danger to Aave liquidity suppliers and stays topic to straightforward liquidation mechanisms.

In response to the exploit, safety groups from Aave Labs, Tokenlogic, Certora and companion safety suppliers established a joint emergency response group inside 10 minutes of the preliminary experiences to coordinate containment efforts. To forestall the attacker from depositing stolen tokens into different swimming pools, protocol guardians carried out a worldwide freeze relatively than selectively pausing particular person token reserves or ready for a five-day group governance vote to decrease provide caps.

Guardian multisignature wallets executed emergency freeze actions between 4:42 p.m. EST and 6:04 p.m. EST, halting 175 reserves on Aave V3 throughout 16 networks and 117 reserves on Aave V4 throughout 4 networks.

The freeze impacts main networks, together with Ethereum, Arbitrum, Avalanche, Base, Optimism, Polygon and BNB Chain. Nevertheless, the permissioned Horizon real-world asset (RWA) market stays operational, and the crew prevented full contract pauses.

“We additionally monitor the exploiter in actual time. We comply with each pockets in its cluster on Ethereum, Arbitrum, Optimism and Avalanche, look ahead to any interplay with Aave, and monitor the Chainlink worth feeds that Aave depends on,” Aave stated in a press release.

Underneath the present restrictions, current customers can repay money owed and withdraw collateral, however new deposits and borrowing stay blocked.

Binance Identifies Further Breach Factors

In the meantime, in a brand new replace, Binance revealed that the safety breach was extra complicated than initially believed, with investigators figuring out further factors of compromise past a probably compromised laptop computer.

“Our preliminary investigation instructed that the safety incident could have concerned a compromised laptop computer, nevertheless our subsequent investigation has uncovered further factors of breach,” Binance stated.

The trade stated it was coordinating with legislation enforcement to research the assault and get better affected belongings. Binance additionally confirmed that roughly $3 billion in impacted belongings had been frozen by way of cooperation with its companions.

In keeping with the trade, the unauthorized outflows stopped after it suspended withdrawal providers. Binance stated deposits remained unaffected and that it was nonetheless on monitor to renew withdrawals inside its beforehand introduced 45-hour timeline.

Binance additionally pledged to reimburse all losses utilizing its Safe Asset Fund for Customers (SAFU) and firm funds, assuring clients that their belongings remained protected.

“This was a fancy assault, and we’re doing all we will in coordination with legislation enforcement to resolve it,” Binance stated. “We’re nonetheless gathering the details, and can share extra immediately as we now have them.”

The trade added that it will proceed offering updates by way of its official communication channels as investigators verified further info.

Crypto Markets Slide as Aave Prepares for Staged Restoration

Cryptocurrency markets got here beneath fast strain following the exploit, with bitcoin plunging to $76,320 and ether falling to $2,170. Tokens immediately offered by the attacker skilled steeper declines, with AAVE and LINK every falling 9%, UNI dropping 8% and Arbitrum (ARB) declining 6%.

Main fiat-backed stablecoins maintained their pegs, though Aave’s GHO stablecoin briefly slipped to $0.997 as customers redeemed 4.6 million GHO for USDT by way of its stability module.

Protocol engineers indicated that markets would stay frozen pending additional containment updates from Binance and stabilization of the attacker’s pockets exercise. A staged course of to elevate the restrictions can be evaluated as soon as these situations are met.

Binance’s preliminary investigation factors to a potential worker laptop computer compromise behind a safety incident with an estimated $6.3 billion influence.…