Commentary · Updated November 1, 2026, 01:23 UTC
The Lowdown
CZ asked Elon Musk to stop trolling during Binance’s theft crisis, then reminded him of a $500 million investment. Our take: that is an awkward way to ask a business ally for sympathy. It also risks making a crisis for customers look like a personal dispute about respect.
Key Takeaways
- TRM Labs estimates about $6.36 billion was stolen from Binance wallets on October 29.
- CZ asked Musk to stop trolling and invoked Binance’s Twitter investment, according to Decrypt.
- Binance’s October 31 update reported 90% replenishment and targeted November 1 for withdrawals.
The Full Story
When Changpeng Zhao asked Elon Musk for support, he attached a reminder with a nine-figure price tag. Binance had backed Musk’s Twitter takeover. Now Binance was dealing with an enormous theft, and CZ wanted the jokes to stop.
“Bad time to troll. Please stop,” he wrote on October 30, in a post quoted by Decrypt. He pointed to the company’s $500 million Twitter investment and claimed its related SPCX holdings were worth more than $1 billion. Reuters reported the original investment in 2022; the billion-dollar valuation remains CZ’s claim.
Benzinga’s account describes Musk posting “Everyday is Zeroday” and replying with fire and laughing emojis to CZ’s earlier warning about suspicious email links. CZ plainly took the exchange as trolling. Musk’s short reactions offered little explanation of his intent.
What does a past favor buy?
The investment reminder is what makes this exchange worth examining. Our reading is that CZ was appealing to a familiar social expectation: when I have backed you, I expect some consideration when things go badly for me.
Most people recognize that argument. They have heard some version of it from a friend, a relative or a colleague who feels abandoned. Seeing it play out between hugely wealthy public figures makes it no less awkward. The size of the investment just gives the grievance a bigger number.
A financial relationship does not buy immunity from criticism. It is also possible to question a company’s response to a crisis without turning the moment into entertainment. The useful question is whether the exchange helps anyone understand what happened or what comes next.
The shareholding added another distraction. Decrypt reports that CZ later said he had not suggested selling the shares. His claimed valuation should not be mistaken for cash already used to cover the theft.
Customers need access, not an alliance
TRM Labs estimates that attackers took about $6.36 billion across ten blockchains on October 29, most of it within roughly 20 minutes. The FBI attributed the attack to North Korea on October 31, identifying the activity as TraderTraitor.
Binance said on October 31 that it had set aside more than $6.34 billion and replenished 90% of the affected assets. It was still buying the remaining tokens. Its statement targeted November 1 for withdrawals to resume and November 3 for the full zero-knowledge reserves proof. Those are company figures and targets. That October 31 update gave a reopening target, not an announcement that withdrawals had resumed.
FTX comparisons surfaced around the exchange, but a familiar-sounding reassurance or an emoji does not establish the same financial circumstances.
For customers, the test is more practical than whether Musk shows solidarity: can they access their assets, and has Binance done what it promised? A public show of friendship would not answer either question. The feud can wait.