Changpeng Zhao

“If you use SignalPlus for any other exchange platform, it's time to revoke all your API keys. It is generally recommend that you do not store your API keys with any 3rd party platform. (Deribit also/first reported this.)”

“A hack of this scale means serious security failures occurred. No platform is unhackable, but that cannot be an excuse. Every incident exposes weaknesses that should have been prevented. Some details are embarrassing. Public explanations also simplify what appears to have been a prolonged multi month/year attack targeting hundreds of employees and systems, with a few ultimately compromised. Sharing those details,…”

“Binance hourly deposits EXCEED withdrawals. According to public reports, only 6-10% of withdrawals went to other CEX. Majority went to self-custody wallets, and have not interacted with a DEX yet. Stay safe.”

“Screenshots and videos are easy to fake. The chat in image 3 is fake. I can’t verify the other claims. People who can predict the future would trade bitcoin or use prediction markets to make money, they won't be small accounts posting on X.”

“User funds are safe! It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don't manage Binance (.com) anymore, but as a shareholder, I expect all user funds will be fully covered.”

“4 data leaks reported today: 1. Coinbase's vendor Amplitude exposed some users’ contact data (funds unaffected). 2. Bithumb (Korea) had user data leaks. In TradFi, two securities firms in Korea leaked data: 3. Mirae Asset 4. Daishin Securities You can't prevent a leak, but you can protect yourself. Leaked exchange data (names, emails, phone numbers, addresses, ID documents, transaction history) is mostly used for…”

“That's very cool. The limiting factor will become the 10 year trial/approval process. Maybe they will also use AI to review and approve? Maybe from a competing brand?”

“Everyone worried about AI hacking crypto, but the internet and banking systems rely on weaker encryption. That said, AI doesn’t need to break Bitcoin’s cryptography to cause damage, leaked data already enables more phishing, social engineering, etc, Stay SAFU!”

“Call me paranoid, but be extra careful visiting ANY web site in the next few days, as some web admins are not always up-to-date with security patches. Two vulnerabilities (CVE-2026-109618 and CVE-2026-109619) reported for PHP, the web programming language, affecting servers running popular apps like WordPress and Magento, with patches released October 21, 2026 after details leaked early. Exploitation was confirmed…”

“Saw some comments about my post on this topic 1. I am always supportive of any blockchain making any progress in any country. BTC, ETH, BNB, XRP, SOL, HYPE, ZEC, SIGN, all stablecoins, etc, you name it.. 2. I was happy that SOL can advertise and get an office in Shanghai. It would open the path for others to follow. It would also indicate that 'China unbanned crypto', which would be positive news for all of us. Bu…”

“What they don't think about is: Would you trust someone who does business unethically to custody your crypto? Paying to FUD a competitor is the best way to destroy trust for their own exchange. And decent advertising for the exchange being FUDed, even if a bit annoying.”

“Beware if you use a Ledger hardware wallet, especially if you bought one recently. Based on information so far, it seems to be localized to a supply chain attack with one vendor. A small number of people probably bought fake (or tampered) Ledgers. Ledger is one of the most secure and oldest hardware wallets in the industry. Stood the test of time. But these things happen. I expect and know all BNB ecosystem player…”