A Binance hack worth billions, a DHS staff leak, fake PS5 emulators and Reddit’s login wall
TF’s 30 October 2026 cybercrime round-up tracks a Binance hack, a DHS leak, fake PS5 emulators and Reddit’s login wall. Binance is the largest case by value. The other three cases involve government staff, gamers and web users.
What’s Happening & Why It Matters
Binance Reports a Multi-Billion-Dollar Hack
Binance (@binance) suspended deposits and withdrawals after a suspected hack of its hot wallets. The exchange says it will cover all losses. Binance puts the total impact at about $6.3 billion (about €5.6 billion). Chainalysis estimates $5.9 billion at the time of the theft. Either figure is almost four times the $1.5 billion Bybit theft of February 2025.
Frozen assets are rising. Verified freezes total $2.5 billion to $3 billion (about €2.2 billion to €2.7 billion), per Binance and press tallies. Tether froze about $1.6 billion in USDT, and Circle froze over $800 million in USDC. No source supports the headline claim of more than $25 billion frozen.
The cause is unclear. Binance’s early review points to a compromised engineer’s laptop, with no attribution yet. The exchange keeps a reserve fund of about $1 billion, known as SAFU, as a buffer.
DHS Leak Exposes 41,000 Staff
A hacktivist group called the Department of Peace supplied records on 41,191 Department of Homeland Security employees. Distributed Denial of Secrets received them. The transparency collective published the index on 28 October as Icepick. It lists names, offices, contact details and 55,603 internal groups.
Group records refer to undercover agents and operation names. The hacktivists say the data came from a DHS single sign-on service run by Okta. Okta denies a breach. Reuters verified some records, and DHS says it is aware of a potential breach.
Fake PS5 Emulators Spread Infostealers
NordVPN researchers found GitHub repositories posing as PS5 emulators, named KytyPS5 and AnyPS5. The pages copy real emulation projects. A download adds exclusions to Microsoft Defender, drops a data-stealing program and runs a script to wipe its traces.
Advice is simple. Confirm a GitHub link belongs to the real developers, and treat new repositories with few reviews as suspect. Never switch off antivirus to install an emulator.
Reddit Moves Toward a Login Wall
Reddit (@reddit) will require accounts for most content, Chief Executive Steve Huffman confirmed. He cites bot scraping, AI crawlers and ad quality as reasons. Tests start outside the US.
The homepage stays open to everyone, and search and shared links will keep working. Details are unsettled. The plan treats bots as a security cost, and lost search traffic as a business risk.
My take: Binance shows the weak point is often a person, a laptop or a signing process. The cryptography seldom fails. The DHS leak shows the danger of single sign-on as a single point of failure. Gamers should stay with official sources, and Reddit’s wall will drive scrapers toward paid data deals.
TF Summary: What’s Next
Binance will release a post-mortem and a final loss figure. Okta and DHS will face questions on the origin of the Icepick records. GitHub will remove the fake emulator repositories. Reddit will share first test results in its next update.
MY FORECAST: Binance will reopen withdrawals within two weeks. Total confirmed losses will stay above $5 billion. Investigators will name a suspected culprit by the end of 2026.
Related Stories
- TF Cybercrime Round-up: 6–11 October 2026
- PHP2Shell: PHP Vulnerabilities, AI Research and Patches
- Sweden Blocks ChatGPT and Claude on Government Computers
- Google Unveils Gemini 4 Carbon, a Vulnerability-Hunting Model Few Can Use
- US Bars DeepSeek From Federal Civilian Agencies