Changpeng Zhao Denies ShinyHunters Stole 335 Million Binance Records

Changpeng Zhao has denied that the hacking group ShinyHunters stole 335 million Binance user records. The claim came bundled with an alleged ransom demand of $900,000. Zhao rejected both parts of the story outright.

The dispute is straightforward on its face. ShinyHunters said it had obtained records tied to Binance users and wanted payment for them. Zhao said no. As of now, the central question — whether the group actually holds the data — remains unresolved and in dispute.

What is Zhao's argument?

His reasoning is operational rather than forensic. Zhao argued that anyone holding private keys would simply move the funds instead of selling data. Why auction a database for $900,000 when you could drain wallets directly?

That distinction matters for how the industry reads incidents like this one. Zhao's response deliberately separates two things that often get blurred in breach reporting:

• Access to user records — names, identifiers, account metadata
• Control of crypto assets — the private keys that actually move funds

His position is that proof of the second makes the first irrelevant as a moneymaking exercise. An attacker with real key access has no rational need to run a ransom scheme. The incentive structure gives them away.

How did Zhao handle the coverage?

Not gently. Zhao also criticized the attention the claim received. He said he had seen the allegation the day before his response and thought it was obvious. He accused media outlets of covering it for headlines.

That jab fits Zhao's long-running posture toward press coverage of Binance. But it does not, by itself, settle the underlying factual question. The dispute now rests on competing assertions: ShinyHunters' claim of access versus Zhao's incentive-based reasoning for why the claim falls apart.

What does this change for Binance users?

The practical question is whether any user data actually leaked. Zhao's denial addresses plausibility, not evidence. He has not, according to the available account, produced an internal audit or third-party forensic finding confirming no records were taken.

For users, that leaves an awkward middle ground. If the records claim is false, nothing has changed. If it is true, exposed account metadata — even without private keys — can still feed phishing and social-engineering attacks. Stolen data has a second life even when funds stay put.

The operational consequence for Binance cuts both ways. A public denial from Zhao puts the exchange's credibility on the line. If evidence of a breach surfaced later, the statement would become a liability rather than a defense.

Where does this go next?

The claim is now in the hands of whoever can produce proof. ShinyHunters could release samples of the alleged 335 million records to substantiate its position. Binance could publish a forensic review to close the question. Until one of those things happens, the record shows a $900,000 demand, a flat denial, and a hacker group's word against a former CEO's.