Binance CEO Changpeng Zhao acknowledges temporarily suspending accounts over “abnormal” altcoin trading, following a spat with a high-profile crypto trader
The company says the observed activity had nothing to do with compromised accounts or leaked API keys.
DecryptAndré Beganski
Context & Ripple Effects
Binance had already been managing heightened user sensitivity: Zhao described a slight increase in withdrawals in November, and a staff memo two days after this episode warned of a bumpy several months amid massive withdrawals. The account suspensions add trading controls to an operating environment already shaped by confidence pressures.
Binance has also previously paused bitcoin withdrawals over a transaction backlog, making this latest intervention another instance in which the exchange has had to explain a disruption while distinguishing it from a security failure.
First-order effects
Accounts tied to the flagged altcoin activity temporarily lose access while Binance investigates; the company’s statement seeks to assure other users that compromised accounts and leaked API keys were not involved.
Changpeng Zhao and Binance must defend the decision after the public dispute with a prominent trader, turning an internal market-surveillance action into a visible trust test.
Second-order effects
Users already responding to reports of increased withdrawals may scrutinize Binance’s explanations for trading restrictions more closely, increasing the premium on clear and consistent incident communications.
Other exchanges face added pressure to show how they identify abnormal trading and when they will freeze accounts, especially when enforcement actions become public disputes.
Third-order effects
Repeated operational interruptions—from a bitcoin-withdrawal pause caused by a transaction backlog to account suspensions—make reliability and transparent controls central to exchanges’ efforts to close crypto’s legitimacy gap.
If exchanges normalize rapid account restrictions for suspected market activity, competition will increasingly hinge on whether their compliance controls appear predictable to traders rather than discretionary.
The trend: Crypto exchanges are being judged not only on market access but on how credibly they explain and govern abrupt interventions in customer activity.
Based on our investigations so far, this appears to be just market behavior. One guy deposited funds and started buying. (Hackers don't deposit). Other guys followed. Can't see linkage between the accounts. 1/3 https://twitter.com/...
This activity does not appear to be due to compromised accounts or stolen API keys; funds are SAFU. We will update this thread should there be any new information.
We are aware of the abnormal price movements for certain trading pairs on #Binance, involving assets such as $SUN, $ARDR, $OSMO, $FUN and $GLM. Our team is investigating and taking appropriate actions in regards to the suspicious accounts.
@coinmamba @cz_binance Your account was placed into withdrawal only mode. The decision was in response to threats you made to our CS, not related to our Twitter dialogue. We pulled together a team of over 20 case agents to try and help you. We are sorry it has come to this, but w…
We are aware of the concept of too much intervention from the platform, “too centralized” attacks, etc. There is a balance to how much we should intervene. Sometimes, these happen in free market, and we need to let it play out. 🙏 3/3.
@cz_binance ... the keys are not leaking from our side. We push users to use fast connect with Binance and work with your team closely. The majority of the users disappear after our support tries to reach out to them. We push everyone to reach out to local police and file claims.
Yeap, @cz_binance just closed my Binance account because of my tweets. Not sure what to say. This is unacceptable and I'm sure most of you will agree with me on this..
Hey guys. Unfortunately two days ago my Binance account got exploited through an API which I've created 2 years ago and haven't used since which I assumed I deleted but apparently didn't. It was used to make trades on low cap coins to push up the price to make profit.
@Siopers12 @coinmamba We just discussed this internally. We may block all 3Comma access if they don't have good ways to fix API key leaks in their side.
Pure speculation, but what I suspect happened is that the hackers who got ahold of the binance api keys (3comma breach) used them as part of bigger pump and dumps involving hundreds of people just there for pnd This way can get cash out undetected Sort of like a cex coinjoin http…
@coinmamba Where are you actually going to go though? Binance never processed my KYC and don't really know where im supposed to go now lmao. Back to Bitfinex? Bitmex??
We temporarily locked withdrawals on some of the profiting accounts, which caused a lot of complaints on social media, all from different countries. 2/3 https://twitter.com/...
CZ just revealed his playbook. When he eventually locks withdrawals for all accounts, he will blame it on “market behavior” https://www.theblock.co/...
@coinmamba We have more than 20 people investigating. I now have knowledge of the size of your loss, Ip address, etc. Honestly, this is not a case for compensation. Social influence won't change that. We treat all users equally. Ensuring your api key is secure is important. 🙏
As a private business you have a right to deny someone your service. But Binance is not just any company it's a crypto company. Crypto is about giving everyone a chance to participate regardless of their identity or opinion. What they are doing is against these values..
@coinmamba @cz_binance CZ is denying you service after you threatened to destroy his business on social media if he didn't pay you back for a scam he wasn't responsible for. Not saying I necessarily agree with his decision, but this is not as egregious as you make it sound. Seems…