XRP news turned to the Binance hack on Friday after Arkham said the hacker’s first $300 million came out in XRP, and the ledger shows all 233.46 million XRP still sitting untouched in one wallet that nobody can freeze.
The XRP drain was the opening move of the $6.36 billion theft. Five Binance accounts emptied into a brand-new address in four minutes on Thursday evening, a few minutes before the attacker hit Solana, TRON, Bitcoin and Ethereum.
That stash, worth about $292 million at today’s $1.25 price, is now the biggest open question for XRP holders. It equals roughly 7.6% of a full day’s XRP trading volume, and if the attacker tries to cash it out, the selling lands on XRP’s order books.
The Binance Hacker drained $6.3B in total from Binance.
First $300M on XRP, and $6B across 141 transfers on nine chains, between 20:10 and 23:05 UTC.
$4.90B of it arrived in the first 14 minutes, with $2.53B drained in a single transaction – the hacker’s largest movement. pic.twitter.com/qQzjAtjQMc
— Arkham (@arkham) October 30, 2026
XRP News: What the XRP Ledger Shows About the Binance Hacker’s Wallet
Arkham’s breakdown puts the XRP first in line: $300 million on XRP, then $6 billion across 141 transfers on nine other chains between 20:10 and 23:05 UTC. Of that, $4.90 billion moved in the first 14 minutes, including a single $2.53 billion transaction.
The XRP Ledger’s own records fill in the detail. The receiving account, rK21t6…gfzMx, didn’t exist until the first payment created it at 20:05 UTC. Four more Binance accounts followed, the last at 20:09:20 UTC:
A few details stand out:
- One big hit, then sweeps. The first payment alone moved 185.02 million XRP, 79% of the total. The other four, between 8.66 million and 14.69 million XRP each, look like the attacker emptying smaller hot wallets.
- A tell in the fees. Each of the five payments paid a 0.006 XRP fee, far above the ledger’s 0.00001 XRP minimum. Bitquery noted the fee was higher than on Binance’s own payments that day and used it, with the timing, to tie the XRP to the rest of the attack.
- Spam followed right away. Within 30 seconds of each payment, a different address sent the wallet 0.00001 XRP, the dust pattern bots use to plant look-alike addresses in a wallet’s history. Someone also sent an uncashed Check at 22:35 UTC.
- Nothing has left. As of Friday at 11:30 UTC, the wallet still held 233,461,943 XRP and had never sent a single transaction.
The XRP wallet also stands apart from the rest of the haul. Arkham’s “Binance Hacker” entity tracks 73 addresses holding $5.58 billion, mostly USDT, Bitcoin, ether and USDC, and XRP doesn’t appear in it. Bitquery found the XRP Ledger account shares no address with the rest of the attack.
XRP News: Why the Stolen Coins Matter for Holders
The stolen XRP sits in a different position from most of the haul. Tether, Circle and other issuers can freeze their own tokens, and TRM Labs counted about $2.7 billion in stablecoins frozen, including 40.5 million of Ripple’s RLUSD. XRP itself is the ledger’s native coin, and neither Ripple nor anyone else can freeze it or claw it back.
So the 233.46 million XRP stays the hacker’s to move. Here is how big it is next to the market:
| Measure | Value |
|---|---|
| Stolen XRP | 233.46 million XRP |
| Value at $1.25 | About $292 million |
| Share of circulating supply (63.35 billion) | 0.37% |
| Share of 24-hour global trading volume ($3.85 billion) | About 7.6% |
A third of a percent of supply won’t change XRP’s long-term story. But $292 million sold in a few hours would be a heavy one-off seller for a market that trades about $3.85 billion a day. Exchanges and analytics firms are already watching the address, which makes a quick sale on a major venue unlikely.
So far, XRP has taken the hack better than most large coins. Measured from the 20:00 UTC hourly open on Thursday, when the drain started, to 11:00 UTC on Friday:
| Coin | Deepest drop | Change now |
|---|---|---|
| XRP | −6.4% | −2.5% |
| Solana | −7.5% | −3.0% |
| Bitcoin | −5.4% | −4.0% |
| Ether | −7.0% | −4.0% |
| Dogecoin | −8.9% | −4.4% |
| BNB | −8.7% | −5.8% |
XRP fell from $1.2824 to $1.2233 within the hack hour, bottomed at $1.2002 just after midnight UTC, and has climbed back to about $1.25.
DISCOVER: 15+ Best Crypto IPO to Watch in 2026
XRP Price Analysis: Below Both Averages Since Mid-October
The daily chart since early August shows the hack hit XRP when it was already weak. XRP has closed below its 50-day EMA ($1.3511) and its 200-day EMA ($1.3683) every day since October 12, and the 50-day crossed under the 200-day on October 22.
The key levels:
- Resistance: $1.3444 is Tuesday’s high, where XRP was rejected the day before the hack. Above that, $1.3992 is the October 21 high, just above both EMAs.
- Support: $1.2002 is Friday’s low, XRP’s lowest price since August. Below it, $1.0879 is the August 20 low, where the late-summer breakout began.
Friday’s long lower wick shows buyers stepped in at $1.20. The hacker’s wallet is the wild card.
| Path | What has to happen | Next stop |
|---|---|---|
| Push higher | A daily close above $1.3444 | $1.3992 and the two EMAs between $1.35 and $1.37 |
| Stall | XRP holds between $1.2002 and $1.3444 while the hacker’s wallet stays quiet | Range trading around $1.25 |
| Slip | A daily close below $1.2002, or the stolen XRP starts moving to exchanges | $1.0879, the August 20 low |
For XRP news over the next few days, the one address to watch is rK21t6…gfzMx. As long as its 233.46 million XRP sits still, the hack’s direct hit on XRP stays limited to Thursday’s selloff.
EXPLORE: Best Meme Coin ICOs to Invest in 2026
Follow 99Bitcoins on X For the Latest Market Updates, and Subscribe on YouTube For Daily Expert Market Analysis.
The post Binance Hacker’s First $300 Million Came Out in XRP, and All 233 Million Coins Are Still Sitting in One Wallet Nobody Can Freeze: What It Means for XRP appeared first on 99Bitcoins.
