The "200,000,007 USDT from Binance to unknown wallet" alert at 01:06 UTC is not the hacker. It is Binance's new Tron hot wallet.
Oct 30, 00:36-04:41 UTC: 10 Binance hot wallets on Tron (Arkham labels) sent 454.09M USDT to Binance's cold wallet. One of them, TDqSquX, is the wallet the hacker drained of 612.7M USDT on Oct 29. All 10 have been silent since Oct 30.
Oct 31, 13:33 UTC: a new wallet appeared, TJTKCzQpsG19CSMYF9TPtxz6wSHPSyeKfa. Since Nov 1 it got 454.12M net from the cold wallet, almost exactly what the old ones sent there, plus 300M from Tether's treasury. It now pays out about 480 withdrawals an hour.
We found no direct link between it and the hacker's known addresses.
Oct 30, 00:36-04:41 UTC: 10 Binance hot wallets on Tron (Arkham labels) sent 454.09M USDT to Binance's cold wallet. One of them, TDqSquX, is the wallet the hacker drained of 612.7M USDT on Oct 29. All 10 have been silent since Oct 30.
Oct 31, 13:33 UTC: a new wallet appeared, TJTKCzQpsG19CSMYF9TPtxz6wSHPSyeKfa. Since Nov 1 it got 454.12M net from the cold wallet, almost exactly what the old ones sent there, plus 300M from Tether's treasury. It now pays out about 480 withdrawals an hour.
We found no direct link between it and the hacker's known addresses.
