As of 30 October 2026, bad news moves markets, but forced selling moves them faster. After the Binance breach on 29 October 2026, bitcoin fell below $77,000, down about 4.5 percent in 24 hours to $76,664, before later trading around $77,984. The initial shock was the breach itself, estimated at about $6.3 billion and the largest crypto theft on record, but the mechanism that turned that shock into a sharp slide was leverage.

Leveraged traders borrow to take positions larger than their own funds, betting that prices will move in their favour. When prices move the other way, those positions can be closed automatically once losses reach a set level. That automatic closing is a liquidation, and in the 24 hours after the breach, more than $1 billion in leveraged positions was liquidated.

How a liquidation cascade works

Here is how the cascade works in sequence. First, breach news reaches traders, and some sell on fears about exchange security and wider market risk. Second, that selling pushes prices down. Third, falling prices trigger liquidations of leveraged long positions, which means those positions are sold whether their owners want to sell or not. Fourth, that forced selling adds fresh supply to the market, pushing prices down further and triggering still more liquidations.

The cascade matters because it breaks the link between the size of the original news and the size of the price move. A 4.5 percent fall in bitcoin in a day is already large, but it does not need $1 billion of voluntary selling to happen: a smaller initial sell-off can set off a much larger round of automatic selling. That is why price charts after a shock often show a steep leg down rather than a slow drift.

Ether and BNB fell in the same window, with ether down about 3.2 percent and BNB down about 3.9 percent. Those falls fit the same cascade pattern, since leveraged positions exist across major coins, not only bitcoin. The ether story also had its own trigger in the reported movement of around 204,500 ETH from Binance 14, after EIP-7702 was reportedly used to turn that wallet into a sweeper, leaving ETH backing near 94 percent, down from 100 percent on 1 October.

What liquidations do not explain

It would be wrong to claim that liquidations explain the whole move on their own. The verified facts establish the breach, the price falls, and the liquidation total, but they do not prove that every part of the fall came from liquidations, or that other market factors played no role. What can be said is that liquidations are the transmission mechanism that connects a single piece of news to a market-wide, fast fall.

The exchange response, while important, does not switch the cascade off once it has run. Binance co-CEO Yi He has said all losses will be covered from company funds and the SAFU emergency fund, which holds about $1 billion in bitcoin, and that user funds are safe, and about $3 billion has been frozen so far. Those steps address recovery and containment, but liquidated positions are already closed, and their selling has already happened.

Attribution and investigation details sit in the background of the market story rather than driving each price tick. The TraderTraitor and North Korea attribution is an investigators claim from TRM Labs, not a court finding, and the preliminary mechanism centres on a compromised DevOps engineer laptop giving access to a service container, with no evidence so far of a wallet private key leak. Traders reacted first to the scale of the breach, and the cascade did the rest.

Frequently asked questions

FAQ: What is a liquidation cascade? A chain in which falling prices force leveraged positions to close, and those forced sales push prices lower, triggering further closures. How large was it here? More than $1 billion in leveraged positions was liquidated in 24 hours. Does it predict a recovery? No; the verified facts do not show where prices go next, and this article gives no advice on buying, selling, or holding. Readers should follow official Binance channels for confirmed updates, since the investigation is ongoing and figures are preliminary.