Is Binance hacked? As of the evening of October 29, 2026, the only evidence is an X thread claiming more than $5 billion left Binance-labeled addresses that day. No statement from Binance, Tether or Circle appears in it. Treat the claim as unverified, and meanwhile check the API keys, withdrawal settings and admin logins your website controls.
CISA added CVE-2026-41709, a VMware ESX logging flaw scored just CVSS 2.7, to its Known Exploited Vulnerabilities catalog on October 28, 2026, after CrowdStrike tied it to zero-day use by the China-nexus group Warp Panda. The bug lets someone with admin rights on the hypervisor act without leaving a log entry, which undermines every audit trail, incident report and compliance control that depends on that host.