Binance hack: the attacker's Tron root wallet is empty.
From Oct 30 00:06 to Nov 1 05:33 UTC the root TRBdWqHnDVSZCVGfgHdKFLQPirQcA2PRki took in 684.6M TRX, about $214M at today's price. 46.4M came straight from the theft wallet, then five lots of 120M to 158.2M TRX. At 05:34 UTC it holds 131 TRX.
All of it went out in 1,113 transfers to 220 addresses, and from there into ETH and BTC through THORChain, Relay, the Bitget Wallet bridge and other routes. The ETH we traced out of Tron sits on 874 addresses we track: 70,932 ETH.
The big piles have not moved: 18,270.20 BTC on 19 addresses, 522,409 ETH in 8 wallets, 233.46M XRP.
Two notes on earlier posts. About 1,170 ETH on 35 addresses we count under THORChain came through the Bitget Wallet bridge, so the route split shifts and the total does not. And the NEAR account from our Oct 31 post made its first moves today: four small transfers between 02:29 and 04:59 UTC, 61.5 NEAR in total, all to one new account. The other 12.41M NEAR has not moved.
From Oct 30 00:06 to Nov 1 05:33 UTC the root TRBdWqHnDVSZCVGfgHdKFLQPirQcA2PRki took in 684.6M TRX, about $214M at today's price. 46.4M came straight from the theft wallet, then five lots of 120M to 158.2M TRX. At 05:34 UTC it holds 131 TRX.
All of it went out in 1,113 transfers to 220 addresses, and from there into ETH and BTC through THORChain, Relay, the Bitget Wallet bridge and other routes. The ETH we traced out of Tron sits on 874 addresses we track: 70,932 ETH.
The big piles have not moved: 18,270.20 BTC on 19 addresses, 522,409 ETH in 8 wallets, 233.46M XRP.
Two notes on earlier posts. About 1,170 ETH on 35 addresses we count under THORChain came through the Bitget Wallet bridge, so the route split shifts and the total does not. And the NEAR account from our Oct 31 post made its first moves today: four small transfers between 02:29 and 04:59 UTC, 61.5 NEAR in total, all to one new account. The other 12.41M NEAR has not moved.
