BlocktoBlockto
Strangers Flood Binance Hacker’s Bitcoin Wallets With Tiny Payments and Pleading Notes
News

Photo: Illustrative

Strangers Flood Binance Hacker’s Bitcoin Wallets With Tiny Payments and Pleading Notes

Since Thursday, the 19 wallets holding 18,270 stolen BTC have not sent out a single coin, yet they keep receiving payments worth less than a dollar. Each one carries a short note from a stranger. Bitcoin allows this through an output type called OP_RETURN, which permanently writes up to 80 bytes of text into the blockchain.

Tristan R.
By Tristan R.

Senior Author · November 2, 2026

2 min
Key takeaways
Since Thursday, the 19 wallets holding 18,270 stolen BTC have not sent out a single coin, yet they keep receiving payments worth less than a dollar.
Each one carries a short note from a stranger.
Bitcoin allows this through an output type called OP_RETURN, which permanently writes up to 80 bytes of text into the blockchain.

Since Thursday, the 19 wallets holding 18,270 stolen BTC have not sent out a single coin, yet they keep receiving payments worth less than a dollar. Each one carries a short note from a stranger. Bitcoin allows this through an output type called OP_RETURN, which permanently writes up to 80 bytes of text into the blockchain.

The Help Me Bro Plea

One sender typed the same three words, “help me bro,” to every wallet three separate times. Two rounds went out on Friday and a third followed early Sunday, each worth roughly 78 cents per wallet. Altogether the person spent about $46 plus fees to appeal to a thief the FBI links to North Korea.

Crypto Scams and Token Promotions Targeting the Hacker

Not every note was a plea. Two messages on Friday urged the hacker to use a THORChain lookalike swap site and never hand funds back to CZ. The longer version also warned against accepting any whitehat deal. The link leads to a page made to resemble a real swap platform, even though the genuine network paused trading on 10 of 13 chains over the weekend. A self-described Turkish crypto influencer also pitched his own $NST token, and another sender joked about Halloween treats.

No Reply From the Attacker

None of the messages has received an answer, and the stash is still growing. On Sunday, the attacker started converting 970,522 stolen SOL, worth about $96 million, into bitcoin through the Relay bridge.

How markets are positioning

Live market reaction

OWTI Crude
+3.4% ▲
★Gold
+1.8% ▲
₿Bitcoin
-1.8% ▼
$DXY
+0.6% ▲

Disclaimer

This content is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency trading involves risk and may result in financial loss.

Exclusive partner offer

Start trading
with BloFin today

Up to $500 sign-up bonus and zero-fee trading on your first 30 days.

Buy crypto now

You will be redirected to BloFin

Share article

About the author

Tristan R.
Tristan R.

8+ years covering crypto markets, macro, and geopolitics. Previously at Decrypt and CoinDesk. Focused on the intersection of digital assets and traditional finance.