$BTC-USD $ETH-USD $COIN
- The Binance-linked attacker held roughly 18,270 BTC as of early Friday, a stash that exceeds Coinbase’s reported corporate Bitcoin holdings.
- The same attacker reportedly controls more than 500,000 ETH, making the combined haul one of the largest privately held crypto balances tied to a single incident.
- Bitcoin traded near $77,800, down about 4.25% on the day, while Ether changed hands around $2,253.80, down roughly 4.37%.
- The disclosure puts a criminal actor’s balance sheet above that of a major U.S.-listed exchange operator, sharpening scrutiny of custody and treasury disclosure norms.
The scale of the Binance-linked theft has crossed a symbolic threshold. According to reporting, the attackers held approximately 18,270 BTC as of early Friday, a balance that tops the corporate Bitcoin treasury reported by Coinbase. The same wallets reportedly hold more than 500,000 ETH. In plain terms, an entity that acquired its coins through an exploit now sits above a publicly traded exchange operator on a pure Bitcoin-holdings basis.
Why the Comparison Matters
Corporate Bitcoin treasuries have become a fixture of the listed-company landscape, and Coinbase has been among the more closely watched holders given its role as a custodian and exchange. When a hacker’s balance exceeds a named company’s disclosed holdings, the headline writes itself, but the substance is about disclosure. Corporate treasuries are reported through filings and periodic updates; attacker wallets are tracked on-chain by analysts who watch for movement. The two are not measured the same way, and the figures should be read with that caveat in mind.
The Ether figure is arguably the more consequential detail. A stash above 500,000 ETH represents a meaningful share of circulating supply relative to typical exchange balances, and large holders of that size are watched for signs of distribution. If any portion moves to centralized venues, it could weigh on liquidity and sentiment in a market already trading defensively.
Market and Custody Implications
For exchanges, the episode reinforces a familiar lesson: custody risk is not abstract. The incident has kept attention on how large balances are secured, how quickly suspicious flows are flagged, and how transparently firms communicate with customers and shareholders. Coinbase’s treasury disclosure gives the market a benchmark, and the fact that a criminal balance now exceeds it is a reputational data point for the sector as much as a financial one.
What to Watch Next
On-chain analysts will focus on whether the attacker wallets move coins, and if so, where. Deposits to exchanges, conversions through mixers, or transfers to newly created addresses would all draw attention. For investors, the practical takeaway is that headline supply overhangs can affect pricing even when the underlying coins are not actively for sale. With Bitcoin near $77,800 and Ether near $2,253.80, both markets are already pricing in risk aversion; a large, visible overhang adds another variable to that calculus.
The story also feeds into a broader debate about transparency in crypto. Public blockchains make balances visible, but visibility is not the same as accountability. Until the funds are recovered or rendered unusable, the attacker’s holdings will remain a live question for exchanges, regulators, and the companies whose treasury disclosures now serve as the yardstick.
Sources: cointelegraph.com · BTC Newsroom · Binance