Binance hack: where the money is right now, across all 10 chains.
Frozen, about 2.76B USD: 2.21B USD in USDT and USDC on Ethereum, 379M USD in USDT on Tron, 89.0M USD in tokenized gold, USD1 and FDUSD, 40.5M USD in RLUSD, 30.9M USD pulled back on Arbitrum and 14.6M USD in stablecoins on Avalanche and Polygon.
Still with the attacker, about 3.09B USD: 18,270 BTC (1.42B USD), 511,859 ETH (1.14B USD) almost all in 8 wallets that never sent a transaction, 233.5M XRP (292M USD), 637.2M TRX (213M USD) and 29.1M USD on Base, Optimism, Avalanche and Polygon.
Moving right now: between 10:15 and 10:20 UTC the attacker emptied its parked Tron stash, 638.2M TRX (213M USD), into 5 wallets each created 3 seconds earlier. At 10:20 the first 120M went on to TRBdWq…2PRki, the wallet that has been splitting 46.4M stolen TRX across fresh wallets since 02:19.
Solana's 970,554 SOL hasn't moved, and nothing on chain ties it to the hack. Follow for updates on the Binance trace.
Frozen, about 2.76B USD: 2.21B USD in USDT and USDC on Ethereum, 379M USD in USDT on Tron, 89.0M USD in tokenized gold, USD1 and FDUSD, 40.5M USD in RLUSD, 30.9M USD pulled back on Arbitrum and 14.6M USD in stablecoins on Avalanche and Polygon.
Still with the attacker, about 3.09B USD: 18,270 BTC (1.42B USD), 511,859 ETH (1.14B USD) almost all in 8 wallets that never sent a transaction, 233.5M XRP (292M USD), 637.2M TRX (213M USD) and 29.1M USD on Base, Optimism, Avalanche and Polygon.
Moving right now: between 10:15 and 10:20 UTC the attacker emptied its parked Tron stash, 638.2M TRX (213M USD), into 5 wallets each created 3 seconds earlier. At 10:20 the first 120M went on to TRBdWq…2PRki, the wallet that has been splitting 46.4M stolen TRX across fresh wallets since 02:19.
Solana's 970,554 SOL hasn't moved, and nothing on chain ties it to the hack. Follow for updates on the Binance trace.
