Binance under scrutiny after transferring over $2 billion in crypto assets

On October 29, 2026, the Binance exchange transferred over 2 billion dollars in crypto assets, including a significant portion of Ethereum (ETH), to a newly created address linked to previous deposits via Tornado Cash. This movement, unexplained by the platform, has sparked fears of money laundering or theft, as regulators and markets closely monitor liquidity management by the sector's major players. Context Binance, the world's leading exchange by trading volume, has faced increasing regulatory pressure for several years. In 2026, the platform remains under scrutiny from European and American authorities, particularly following the implementation of the MiCA (Markets in Crypto-Assets) regulation in 2024, which imposes strict obligations regarding transparency and anti-money laundering. Meanwhile, the crypto-asset market is undergoing a consolidation phase: Ethereum (ETH), the second largest market cap behind Bitcoin, shows a 5.2% decline over seven days, amid increased volatility and the concentration of liquidity on a few major platforms. Tornado Cash, a cryptocurrency mixing service that allows the origin of funds to be obscured, was sanctioned by the United States in 2022 for its alleged use in illicit activities. Its involvement in this transfer fuels speculation, although public data does not allow for a direct link to be established with a fraudulent operation. Finally, Binance has not officially responded to these movements, a lack of communication that contrasts with the usual practices of major exchanges in the event of a technical or security incident. The Facts According to on-chain data cited by DiarioBitcoin and BeInCrypto , more than 2 billion dollars in assets, primarily ETH and various tokens, left wallets identified as belonging to Binance on October 29, 2026. Here are the key elements of the transfer: At 20:24 UTC, an initial transaction withdrew 167,464 ETH (approximately $388 million) from an address labeled "Binance 14," according to Etherscan . This same transaction also included 63 tokens, including approximately $1.6 billion in USDT (Tether). Twenty-four seconds later, a second address ("Binance 16") sent 28,005 ETH to the same destination address, which was newly created and had no activity history prior to October 29. Within the next fifteen minutes, the receiving address transferred 195,460 ETH (approximately $450 million) to another unknown address, while retaining tokens with an estimated value of $1.5 billion. The address at the origin of the movement had received three deposits of 0.1 ETH on October 28 and 29, all originating from Tornado Cash, according to DiarioBitcoin . These deposits, although minimal, attracted the attention of analysts due to the service's reputation. Tree News reported a total outflow close to $2.53 billion, spread across more than 60 tokens, suggesting a possible "key vulnerability" – a hypothesis not confirmed by Binance. No official statement from the exchange has been published to date. Data from CryptoScore Pro as of October 29, 2026, at 21:19 UTC indicate that Ethereum (ETH) had a market capitalization of $276 billion, with a daily volume of $14.07 billion. The TORN (Tornado Cash) token, for its part, had a capitalization of $30.33 million and a total value locked (TVL) of $809.56 million. The Crypto Fear & Greed index stood at 51/100, signaling a neutral sentiment in the markets. Understanding Key Concepts Wallet and On-Chain Addresses A wallet is a tool used to store, send, and receive crypto-assets. Each wallet is associated with one or more on-chain addresses , which are unique identifiers (like a bank account number) visible on the blockchain. For example, an Ethereum address looks like “0x71C7…6B46”. Exchanges like Binance use hot wallets ( hot wallets ), connected to the internet to facilitate transactions, and cold wallets ( cold wallets ), offline to secure reserves. Movements between these addresses are public, but their owner often remains anonymous without further analysis. Tornado Cash and Privacy Mixers Tornado Cash is a decentralized protocol that allows transactions to be mixed to obscure their trail. Specifically, a user deposits ETH into a smart contract and then withdraws it from another address, making it difficult to track the origin of the funds. This mechanism, legal in itself, is often used to preserve privacy, but also to launder illicit assets. In 2022, the United States sanctioned Tornado Cash, accusing the service of facilitating the financing of criminal activities. In the present case, the presence of deposits via Tornado Cash does not prove malicious intent, but it complicates the analysis of flows. Total Value Locked (TVL) The TVL ( Total Value Locked ) measures the sum of assets deposited in a DeFi (decentralized finance) protocol, such as Tornado Cash. It reflects adoption and user trust. For example, a TVL of 809.56 million dollars for Tornado Cash means that this sum is currently committed to its smart contracts. TVL is a key indicator for assessing the health of a project, but it does not guarantee its legitimacy: a protocol can have a high TVL while being used for illicit purposes. On-chain rerouting and reserve management An on-chain rerouting refers to the transfer of assets between different addresses of the same actor, often for technical or security reasons. Exchanges regularly perform these operations to optimize the management of their reserves. For example, Binance may move funds between its hot and cold wallets to balance liquidity and security. However, when these movements involve external addresses or services like Tornado Cash, they can raise questions, even if they are part of a common practice. The lack of transparent communication then exacerbates suspicions. Analysis: what is at stake This massive transfer of assets from wallets associated with Binance raises structural questions about liquidity and trust mechanisms in the crypto ecosystem. From an economic point of…