The attackers linked to the $6.3 billion Binance hack were holding more Bitcoin than Coinbase’s reported corporate treasury on Friday, according to blockchain analysis cited by Cointelegraph.
Bitquery traced 18,270 BTC, worth approximately $1.4 billion, to 19 addresses associated with the attackers. That balance was 199 BTC higher than Coinbase’s combined holdings for investment and operations at the end of September.
The comparison excludes Bitcoin held by Coinbase on behalf of its customers. It concerns only the exchange’s reported corporate balances, making the hackers’ wallet total notable because it exceeded the holdings of a major publicly traded crypto company.
Bitcoin balance overtakes Coinbase
Coinbase reported 17,954 BTC for investment and another 117 BTC for operational purposes as of Sept. 30, for a total of 18,071 BTC. BitcoinTreasuries.net places Coinbase eighth among publicly traded companies by Bitcoin holdings, using the exchange’s investment balance.
Bitquery said 17 of the attacker-controlled addresses contained 1,000 BTC each. The remaining Bitcoin was held in two additional wallets. The coins were stolen from Binance hot wallets during a breach that affected nine blockchains in less than four hours on Thursday.
Binance confirmed on Friday that it had suffered the $6.3 billion hack. The exchange said roughly $3 billion in stolen assets had been frozen and pledged to cover all losses. TRM Labs attributed the attack to North Korea’s TraderTraitor hacking group. Binance also said investigators had identified additional breach points after initially focusing on a potentially compromised laptop used by a DevOps engineer.
Ether holdings also exceed a corporate treasury
The attackers’ holdings were not limited to Bitcoin. Bitquery’s snapshot showed 508,621 ETH in wallets linked to the group, above the 495,362 ETH attributed by BitcoinTreasuries.net to The Ether Machine, ranked third on that site’s list of corporate Ether holders.
The hackers initially took 200,630 ETH, Bitquery said. They accumulated the rest by exchanging stolen stablecoins and other tokens for Ether. A stablecoin is a crypto token designed to maintain a relatively stable value against an underlying reference asset, often a fiat currency.
The wallet balances represent assets traced to addresses linked to the attackers, rather than confirmed recoverable funds. Binance’s statement that about $3 billion had been frozen indicates that some stolen assets had been identified and restricted, while the remaining balances remained part of the investigation.
Current crypto market picture
Moneyiar market data at 22:39 on Oct. 25, 2026, shows Bitcoin at $80,430.51, down 0.08% over 24 hours and 1.32% over seven days. Ethereum was trading at $2,342.06, up 0.02% in 24 hours and down 1.77% over seven days.
BNB stood at $740.86, rising 0.81% in 24 hours and 3.32% over seven days. BAS was priced at $0.016924, down 1.24% over 24 hours and 7.19% over seven days.
