# After the Binance Hack, 1inch Wants to Make Stolen Crypto Harder to Trade

> A thief can move stolen crypto to a new wallet in minutes. 1inch is using alerts from zeroShadow to help it recognize that wallet before the next trade.

By Lidia Yadlos · November 6, 2026

Canonical: https://blockster.com/1inch-zeroshadow-stolen-crypto-binance-hack

When hackers stole $6.3 billion from Binance on October 29, they took some of 1inch’s own tokens. Even 1inch couldn’t freeze them. But its team could do something else. If the hackers showed up at 1inch to trade those tokens for another currency, 1inch could turn them away.

Within the first hour, 1inch says it worked with security teams to block trades from wallets linked to the theft. That bought time. But the hackers could still send the money to a new wallet and try again. [Read Blockster’s coverage of the Binance hack.](https://blockster.com/binance-6-3-billion-hack-crypto-security-musk)

[Post from @1inch on X](https://twitter.com/1inch/status/2116023549211406829)

## How do you spot the next wallet?

Say a thief moves stolen crypto from wallet A to wallet B. An investigator follows the money and identifies wallet B. A minute later, someone uses that wallet to ask 1inch to trade one token for another. Whether the trade goes through may depend on whether the investigator’s warning has reached 1inch.

That’s the problem [1inch](https://1inch.com/) and security firm [zeroShadow](https://zeroshadow.io/) are tackling. On November 5, 1inch announced it had added zeroShadow’s alerts to its trading service. The alerts bring together verified reports from investigators, law enforcement and crypto security teams. The list of flagged wallets updates every **two to ten seconds**. When 1inch finds a match, it can decline the trade. The funds stay in the wallet.

The companies tested the system from April through July, months before the Binance hack. It flagged **194 attempted trades worth $10.03 million across 68 high-risk wallets**. Some had escaped the existing checks. The $10.03 million is the value of the trades flagged for risk. The companies haven’t said how much was stolen or how much anyone got back.

[Post from @1inch on X](https://twitter.com/1inch/status/2118343302164435186)

## What this means for the crypto industry

Today, a thief who gets turned away by one trading service can try another. That’s why Binance co-founder Changpeng “CZ” Zhao [called for a crypto security alliance](https://www.theblock.co/news/regulation/2026-11-03-cz-calls-for-crypto-security-alliance-ai-driven-attacks-accelerate-binance-hack-432458) after the hack. If several services receive the same verified warning, each can recognize the wallet when it shows up. One investigator’s work can give a dozen trading desks a heads-up before any of them handles the money.

For exchanges and apps that help people trade, that means they can act on a theft spotted elsewhere, even if none of their own customers reported it. For ordinary traders, the accuracy of those alerts matters just as much as their speed. A mistaken warning shared across several apps could leave an innocent person struggling to trade on all of them.

> “Stopping bad assets should never harm legitimate users.”
>
> — Colin Graham, co-founder and head of threat intelligence, zeroShadow

The Binance case shows both the promise and the limit. 1inch can refuse a trade, but the wallet holder still controls the money. The more services that recognize where it came from, the fewer places a thief has to turn stolen tokens into something they can spend.