CZ says Binance is facing a "second front", with 1,083 accounts posting 11,700 hostile messages over 78 hours.

Binance founder CZ retweeted a lengthy article, describing it as "another attack on Binance". According to the piece’s statistics, between 05:00 on October 30 and 20:00 on November 2, spanning roughly 78 hours, 1,083 accounts posted 11,700 hostile tweets regarding Binance’s hot wallet hack, generating approximately 20.93 million impressions. Of these posts, 79.6% were replies, and 3,354 were classified as false information, falling into 15 rumor categories. The article contends that alongside the actual security incident, a coordinated, synchronized narrative campaign emerged on X, with themes shifting as Binance’s response progressed—including claims of "insider betrayal", "insolvency / second FTX", "refusal to open withdrawals", "bank runs as soon as withdrawals are allowed", and exaggerated net outflows. It further notes that among the 641 most active accounts, 452 had collaborative links, and 444 formed a single connected network; 89% of sampled accounts posted no more than 0.2 Binance-related posts per day on average under normal conditions, a figure that surged to roughly 24.6 times the baseline during the incident. When withdrawals were gradually restored, posts mobilizing "immediate withdrawal / bank run" reached a peak intensity of 11.2 posts per hour, marking the highest level of narrative activity across all stages.