Research
What we learn about how attacks and scams work, published when it's worth reading.
Has the Binance hack’s bitcoin operator done this before?
On 29 October 2026 a script split 18,270 BTC taken from Binance’s hot wallet in a single block. We read the fingerprint that script left and searched six months of Bitcoin for the same hand at work. The closest match is a small run six weeks earlier: a fingerprint match, not an identification.
Read the summary