CZ reposts analysis saying Binance is facing another attack, over 1,000 accounts posted a large volume of hostile posts within 78 hours
Binance founder CZ posted on X that there was another attack against Binance and reposted a long analytical article.
The article counted that from 05:00 on October 30, 2026 to 20:00 on November 2, 2026, over about 78 hours, 1,083 accounts posted about 11,700 hostile posts about the theft of Binance’s hot wallet, receiving about 20.93 million impressions. Of these, 79.6% were replies, and 3,354 posts were identified as misinformation, falling into 15 types of rumors.
The article argued that, alongside the real security incident, there was also a rhythmic narrative operation on X, with themes shifting in step with Binance’s response milestones, including an inside job, insolvency, a second FTX, being afraid to open withdrawals, a run as soon as withdrawals opened, and exaggerating net outflows.
The article also said that among the 641 most active accounts, 452 had coordinated links, and 444 formed the same connected network; 89% of the sample accounts normally posted no more than 0.2 Binance-related posts per day, rising to about 24.6 times the baseline during the incident. When withdrawals resumed in phases, the intensity of mobilization posts such as immediate exit and bank run reached 11.2 posts per hour.
Original source:
Title: CZ X post Publisher: CZ 🔶 BNB (@cz_binance) Publication date: 2026-11-04 URL: https://x.com/cz_binance/status/2117889279653531907 Source nature: personal social media statement (reposted analysis) Verification status: original post and related quoted content read in this translation Support content: CZ said that there was another attack on Binance and reposted an analytical article containing the statistical data above
ABAB AI Insight
CZ described this concentrated social media posting as another attack against Binance, alongside the previously confirmed hot-wallet theft incident. The reposted analysis was based on public account behavior statistics, classed some posts as misinformation, and pointed out that the narrative themes shifted with the company’s announcement milestones.
The analysis compared some accounts’ normally low activity with the sharp rise in posting during the incident and described a network of links among the accounts. Such patterns may reflect coordinated behavior, but public interaction data alone cannot directly prove paid direction or the involvement of a specific organization.
Binance previously confirmed that the security incident affected about $6.34 billion in assets and said it would cover the losses. Related reports also mentioned that the FBI pointed to North Korea-related parties. Panic-driven mobilization on social media and actual on-chain withdrawals and asset freezes are different levels.
The analysis author noted that the conclusions were based on inferences from public content and interaction patterns. CZ’s repost placed this analysis within official related discussion, but did not provide independent data verification.
ABAB News · Cognitive Law
CZ said that there was another attack against Binance and reposted the analysis.
The analysis counted about 11,700 hostile posts from 1,083 accounts within about 78 hours.
The analysis said some accounts rarely discussed Binance normally, but their posting volume rose sharply during the incident.