Late on October 29 (UTC), attackers moved billions of dollars out of Binance's wallets. Binance puts the total impact at about $6.3 billion; Chainalysis estimates $5.912 billion at the time of theft, roughly four times what was taken from Bybit in 2025. According to Binance, the verified amount frozen is about $3 billion, most of it by Tether and Circle. Binance paused withdrawals, said on October 30 that it expected to begin resuming them within 48 hours, and says it will cover all losses. Figures are as of October 30 (UTC) and may change as the investigation continues.
The detail worth slowing down for is how it happened. Binance's initial investigation points to a compromised DevOps engineer's laptop, which may have let the attacker into a service container and from there submit unauthorized withdrawal transactions. Binance says it has found no evidence that any wallet private key leaked.
So nobody needed the keys. They needed a system that was already allowed to ask for signatures. That's the same question you should ask before letting an AI agent anywhere near your money: what can it submit, and does a person have to approve it first? Below we answer that for the three ways to use Nina, including the one place where the answer depends on an exchange.
Is your money safe on an exchange?
When you hold crypto on an exchange, the exchange holds it for you. Your balance is a claim on the exchange, and the coins sit in wallets the exchange controls and signs for. That arrangement is called custodial. It has real advantages: a lost password can be reset, and a large exchange can absorb a loss like this one, as Binance says it will.
It also means the exchange's security is your security, and the exchange decides when money moves. During the pause, Binance users couldn't withdraw until Binance finished its checks. None of that says one exchange is safe or unsafe; it describes what custodial means. This article doesn't recommend keeping funds on or off any exchange.
Custodial vs non-custodial: what changes
In a non-custodial setup you hold the keys, usually in a wallet app or a hardware wallet, and every transaction needs your signature. No company can pause your withdrawals, and an attack on a company's servers can't sign for you.
The trade-off is that no one covers you either. If you sign a malicious approval, type your seed phrase into a phishing site or lose it, the loss is yours. Non-custodial moves the risk from the company's systems to your own habits. It doesn't remove it.
Is it safe to let an AI agent trade for you?
It depends on what the agent can do without you. An agent that can only draft a transaction and hand it to you for signing can make mistakes, but it can't move money on its own. An agent holding a key with withdrawal rights is, structurally, the service container in the Binance story: if someone takes it over, or it misreads an instruction, nothing stands in the way.
We wrote about the same pattern after an exchange lost $387.5 million without a stolen key. Nina is one AI agent with three ways in, and each one draws that line in a different place:
| Nina App | Sentinel | MCP server | |
|---|---|---|---|
| Who it is for | Anyone who wants answers on crypto, prediction markets or US stocks, and may act on them | People holding positions or following events they can't watch all day | People who work inside an AI agent or coding tool, and developers building agents |
| Where it runs | antalpha.com on the web, plus iOS and Android apps | Inside the iOS and Android app | Any MCP client, such as Claude Code, Cursor, Windsurf, Gemini CLI, Codex |
| Can it move funds? | Only after you sign each transaction in your own wallet | No | On-chain tools return a page you sign; exchange tools act through an API key you configure |
| Where control stops | Your wallet signature | You | Your wallet signature, or the permissions on your exchange API key |
Nina App: every trade stops at your signature
The app is the full product. You ask in plain language and get a conclusion first, then the evidence and a chart, with the source and freshness of each figure marked. It covers crypto, prediction markets and US stocks, and you can trade from it without handing over custody:
- Token swaps across six EVM chains and Solana on the web, and five EVM chains plus Solana and Tron in the app, with cross-chain routes compared through LI.FI and Relay.
- Tokenized US stocks on Solana and Robinhood Chain, including limit orders.
- Polymarket outcomes, settled on Polygon.
- Perpetual futures on Hyperliquid, with liquidation-price warnings and take-profit and stop-loss.
Every trade takes the same path. You connect a wallet, which shares your address only. Nina drafts an unsigned transaction. The app checks your live account state instead of a cached one. Then you sign in your own wallet, and only then is anything broadcast. Antalpha's documentation calls that step the signature gate. Nina never holds a key that could skip it.
The app doesn't place orders on centralized exchanges and doesn't hold your keys or funds. Nina takes no cut of principal or profits; a transparent routing fee applies when you execute. Depending on local regulation, some ordering, such as prediction-market orders, may be unavailable in your region, while data and analysis remain available.
Sentinel: watches, explains, never trades
Sentinel answers a narrower question: what changed while I wasn't looking, and does it matter. You pick a prediction-market event or a US stock and switch a sentinel on. Nina then tracks the probability or price, the key levels and related news, and when something material changes it sends a push notification with the change, the reason and the likely impact. It reminds you again as an event approaches its close.
Sentinel lives on the home screen of the iOS and Android app, version 1.1 or later. It watches prediction-market events and individual US stocks, the latter in beta. It has no ability to trade. If an alert makes you want to act, the order goes through the same signature step as any other.
MCP server: it depends on the tool
Model Context Protocol (MCP) is an open standard that lets an AI agent such as Claude or Cursor discover and call a service's tools. An MCP server is the service side of that connection. Antalpha's server at https://mcp-skills.ai.antalpha.com/mcp exposes Nina's data and tools to any compatible client, and setup is one prompt you paste into your agent.
On October 29, 2026 the live server listed 121 tools. Seventeen can change state; the rest only read. You can check this yourself, because the server answers the standard tools/list call without an account. Where control stops depends on which of the seventeen your agent calls:
- On-chain actions, such as
swap-fullfor a token swap andpoly-buyfor a Polymarket order, return a signing page. Nothing happens until you open it and sign in your own wallet. - Transfers through
transfer-requesttake two steps, a risk preview and then a signing page, and both need your approval. - Exchange tools for OKX and Binance, such as
cex-spot-place-order, work through an API key you configure for your own exchange account. There is no per-trade wallet signature on this path. According to the cex-trader documentation, the key is supplied through environment variables and sent to the server with each authenticated call, and withdrawal and transfer permissions must not be granted to it.
That third path deserves a plain statement. Funds you trade through exchange tools stay on the exchange, under the exchange's custody, which is exactly the position Binance users were in after the hack. Nina's signature gate doesn't reach them. What limits the damage is how you set up the key: trade-only, no withdrawal permission, and an IP whitelist. Most large exchanges, Binance and OKX included, also let you restrict withdrawals to addresses you've whitelisted in advance.
If you want the data without any write tools, most MCP clients let you allowlist specific tools. We'd leave the trading tools off until you need them. How each of the seventeen is constrained is covered in 120 tools, 17 that can write.
Which one should you use
- You want answers and may occasionally act: start with the Nina App.
- You hold a position or follow an event and can't watch it all day: turn on a Sentinel in the app.
- You spend your day inside Claude, Cursor or another agent, or you're building one: connect the MCP server, and decide deliberately which write tools your agent gets.
The app and Sentinel are one install. MCP is separate and doesn't need the app.
What stays the same across all three
The data comes from the same eight named sources, including Hyperliquid, exchange market data from OKX and Binance, FMP for US stocks, DeBank, Nansen, GoPlus, Moralis and DefiLlama, and each conclusion names its source and update cadence. When there isn't enough data, Nina says so. Nina doesn't custody funds or trade on your behalf, and nothing it produces is investment advice.
Frequently asked questions
What happened in the Binance hack?
Late on October 29, 2026 (UTC), attackers moved funds out of Binance's wallets. Binance estimates the total impact at about $6.3 billion and says about $3 billion has been frozen. Its initial investigation points to a compromised DevOps engineer's laptop that may have let the attacker submit unauthorized withdrawal transactions, with no evidence of a private-key leak. Binance paused withdrawals, said on October 30 that it expected to begin resuming them within 48 hours, and says it will cover all losses. Figures are as of October 30 (UTC).
Is it safe to keep crypto on an exchange like Binance?
Funds on an exchange are custodial: the exchange holds them, secures them and decides when they can move. Binance says user funds are safe and that it will cover all losses from this incident, but withdrawals were paused while it investigated. Whether that trade-off suits you depends on how you weigh convenience and recovery options against control. We don't recommend keeping funds on or off any exchange.
What is the difference between custodial and non-custodial?
In a custodial setup a company holds your crypto and signs transactions for you. In a non-custodial setup you hold the keys and every transaction needs your own signature. Non-custodial removes the company's systems as a point of failure, but losses from phishing, malicious approvals or a lost seed phrase are yours to bear.
Is it safe to let an AI agent trade for you?
It depends on what the agent can do without your approval. An agent that drafts transactions for you to sign can't move funds on its own. An agent holding a key with withdrawal rights can, if it is compromised or misreads an instruction. In the Nina App every trade needs your wallet signature, Sentinel can't trade at all, and over MCP the limit is your wallet signature or the permissions on your exchange API key.
What is an MCP server?
An MCP server is the service side of the Model Context Protocol, an open standard that lets AI agents discover and call external tools. Antalpha's MCP server at https://mcp-skills.ai.antalpha.com/mcp gives compatible agents such as Claude Code, Cursor or Codex access to Nina's data and tools. On October 29, 2026 it listed 121 tools, 17 of which can change state.
Can an AI agent connected through the MCP server move my funds?
Not on its own for on-chain actions: swaps, Polymarket orders and transfers return a signing page that you must sign in your own wallet. Exchange tools for OKX and Binance act through an API key you configure, without a per-trade signature, and the funds stay in custody on the exchange. Give that key trade-only permission, no withdrawal or transfer rights, and an IP whitelist.
What is the difference between the Nina App and Sentinel?
The Nina App is the full product: conversational analysis, market data and non-custodial trading on the web, iOS and Android. Sentinel is a mode on the home screen of the iOS and Android app, version 1.1 or later, that watches the prediction-market events and US stocks you choose and sends a push alert with the reason when something material changes. Sentinel never places trades.
Does Nina cost money?
Current features can be used without one. Nina takes no cut of principal or profits. A transparent routing fee applies on the execution path when you trade.
What is the Nina app called on the App Store and Google Play?
On both the App Store and Google Play it is listed as Nina: Crypto AI Chat & Markets, published by Antalpha. Download it through the links on antalpha.com to avoid impersonation apps.
Sources for the Binance incident: Binance's statements on X, TechCrunch, Cointelegraph, AFP and U.Today, as of October 30, 2026 (UTC). Figures are preliminary.
Nina is the Web3-native AI agent from Antalpha (NASDAQ: ANTA), covering crypto, prediction markets and US stocks: conclusion-first analysis with named sources and freshness badges, and Sentinel mode for continuous monitoring. Self-custodial. Never holds funds, never trades for the user, takes no cut of principal or profits; a transparent routing fee applies on the execution path. Nothing here is investment advice or a price prediction. Official channels: antalpha.com, the Nina app on the App Store and Google Play, x.com/antalpha_ai.
Related reading: Get started with Nina in 5 minutes: from finding an opportunity to posting a Sentinel.
