Binance hacker token-selling progress report · Update: The hacker favors $ETH and keeps accumulating more ETH; 15.6% of the TRX has been sold (about $34 million)!
About $3.1 billion is controlled by the hacker, and about $2.4 billion has been frozen.
Next to watch: those 18,000 $BTC . Given the hacker’s preference for ETH, if this BTC is sold for ETH, it would mean about $1.4 billion in BTC selling pressure.
【ETH: More and more accumulating】
- Since the theft, the hacker has sold various altcoins on Ethereum, receiving about 122,500 ETH in total
- About 510,000 ETH are visible (a lower-bound estimate), roughly 14,000 more than the 495,000 at 10:15 Beijing time on October 30; not all the ETH converted back via THORChain is included yet
- The two largest addresses hold 197,000 and 138,000 ETH, respectively, and neither has moved a single coin since October 30
【TRX: 15.6% sold】
- Of this batch of 638 million, 99.32 million have been sold, leaving 539 million; 518 million of those are spread across four addresses, with none moved
- Since the theft, about 130 million TRX have been converted out on the Tron side, worth about $44 million; the routes out were THORChain, Chainflip, and the USDT0 cross-chain bridge—all decentralized channels
- The THORChain route is getting more congested: about 16% of the TRX sent in is returned to the original address
【Controlled by the hacker: about $3.13 billion】
- 18,270 BTC, about $1.41 billion, spread across 19 addresses, with none moved
- About 510,000 ETH, about $1.14 billion
- 233 million XRP, about $290 million, untouched
- About 546 million TRX, about $180 million
- 970,000 SOL, about $93 million (the community identifies these as the hacker’s first-hop addresses)
- About $15 million in remaining holdings such as OP, ZAMA, SOPH, and WLFI
【Frozen: about $2.44 billion】
- Tether: $1.175 billion in USDT on Ethereum, $313 million in USDT on Tron, plus XAUt and USDt on AVAX
- Circle: $823 million in USDC
- About $38.7 million combined in USD1, FDUSD, and PAXG
- Arbitrum’s Security Council seized about $30 million
【What to make of this】
Of the $3.1 billion controlled by the hacker, BTC accounts for nearly half. Whether and how it gets converted is the biggest variable going forward.
At the current pace, it will take another two or three days to finish selling the TRX; THORChain is seeing more and more failed transactions, and the selling is slowing down.
Binance says withdrawals will resume in phases around 13:30 Beijing time on November 1, and proof of reserves will be published on November 2.
Follow me to keep tracking the hacker’s addresses.
#币安 #SecurityIncident
About $3.1 billion is controlled by the hacker, and about $2.4 billion has been frozen.
Next to watch: those 18,000 $BTC . Given the hacker’s preference for ETH, if this BTC is sold for ETH, it would mean about $1.4 billion in BTC selling pressure.
【ETH: More and more accumulating】
- Since the theft, the hacker has sold various altcoins on Ethereum, receiving about 122,500 ETH in total
- About 510,000 ETH are visible (a lower-bound estimate), roughly 14,000 more than the 495,000 at 10:15 Beijing time on October 30; not all the ETH converted back via THORChain is included yet
- The two largest addresses hold 197,000 and 138,000 ETH, respectively, and neither has moved a single coin since October 30
【TRX: 15.6% sold】
- Of this batch of 638 million, 99.32 million have been sold, leaving 539 million; 518 million of those are spread across four addresses, with none moved
- Since the theft, about 130 million TRX have been converted out on the Tron side, worth about $44 million; the routes out were THORChain, Chainflip, and the USDT0 cross-chain bridge—all decentralized channels
- The THORChain route is getting more congested: about 16% of the TRX sent in is returned to the original address
【Controlled by the hacker: about $3.13 billion】
- 18,270 BTC, about $1.41 billion, spread across 19 addresses, with none moved
- About 510,000 ETH, about $1.14 billion
- 233 million XRP, about $290 million, untouched
- About 546 million TRX, about $180 million
- 970,000 SOL, about $93 million (the community identifies these as the hacker’s first-hop addresses)
- About $15 million in remaining holdings such as OP, ZAMA, SOPH, and WLFI
【Frozen: about $2.44 billion】
- Tether: $1.175 billion in USDT on Ethereum, $313 million in USDT on Tron, plus XAUt and USDt on AVAX
- Circle: $823 million in USDC
- About $38.7 million combined in USD1, FDUSD, and PAXG
- Arbitrum’s Security Council seized about $30 million
【What to make of this】
Of the $3.1 billion controlled by the hacker, BTC accounts for nearly half. Whether and how it gets converted is the biggest variable going forward.
At the current pace, it will take another two or three days to finish selling the TRX; THORChain is seeing more and more failed transactions, and the selling is slowing down.
Binance says withdrawals will resume in phases around 13:30 Beijing time on November 1, and proof of reserves will be published on November 2.
Follow me to keep tracking the hacker’s addresses.
#币安 #SecurityIncident
