BlockBeats reports that on November 2, on-chain analyst SomaXBT posted a challenge to Arkham’s assessment that the “Binance hacker deposited funds to exchanges.” Arkham had previously claimed that the hacker behind the Binance incident deposited approximately $4 million into three Binance deposit addresses, and suggested that these addresses might correspond to nested services. SomaXBT pointed out that the address TH1YKH9...XAcpPrMv8B had been mislabeled as a hacker address, when it was actually a Thorchain Asgard vault. The related deposits to Binance were not made directly by the hacker, but paid by Thorchain accounts. The accounts SomaXBT identified included thor1g3mlm0...fyn799e8ya and thor1kqsy8...5zw3uk2, and SomaXBT provided a vault verification link for comparison.