Ripple said it is actively freezing Ripple USD (RLUSD) holdings linked to attackers in a potential exploit involving Binance. Binance estimates the incident’s total impact at about $6.3 billion, but its investigation is still under way.
McDonald said on Oct. 29 that Ripple was monitoring reports of a potential Binance exploit and actively freezing affected RLUSD. He did not give a dollar amount.
In a separate post, Binance co-founder Yi He thanked Ripple for freezing approximately $200 million. She did not name the asset, so that figure cannot be independently identified as RLUSD from the posts.
Binance’s Oct. 30 incident update estimated the total impact at around $6.3 billion and said about $3 billion had been frozen on-chain. It said its initial investigation suggested a compromised DevOps engineer’s laptop may have allowed an attacker to access a service container and submit unauthorized withdrawals. The exchange said it had found no evidence of a wallet private-key leak.
Binance said it would cover all losses through its Secure Asset Fund for Users (SAFU) and company funds, and had temporarily suspended deposits and withdrawals. It plans to publish a technical post-mortem after the investigation and updated proof of reserves after remediation, without specifying when either will appear.
Ripple’s RLUSD terms allow the issuer to blacklist an address and block the associated wallet from sending or receiving the stablecoin under specified legal or compliance conditions. Whether the incident’s full estimated impact was stolen, and how much has been recovered, remain unconfirmed.
