The Arcus hacker has transferred 150 ETH, 100 of which went to Binance.
According to monitoring by Arisk, the attacker’s address 0xefb…0b3dd first transferred 100 ETH to address 0x7546…9f2633, then sent it to a Binance hot wallet about 4 minutes later. The other 50 ETH was transferred to address 0xa91f…33a3e2, which had previously used Relay to swap ETH for BTC. Those 50 ETH are still there.
· The 100 ETH entering an exchange hot wallet marks the first point in this fund flow where the platform could identify it.
The attacker’s address still holds about 325.06 ETH.
· The BTC conversion route only appeared in the other address’s past activity; the 50 ETH in this transfer has not been converted.
At this pace, will the remaining 325.06 ETH be moved to exchanges in batches, or swapped first?
According to monitoring by Arisk, the attacker’s address 0xefb…0b3dd first transferred 100 ETH to address 0x7546…9f2633, then sent it to a Binance hot wallet about 4 minutes later. The other 50 ETH was transferred to address 0xa91f…33a3e2, which had previously used Relay to swap ETH for BTC. Those 50 ETH are still there.
· The 100 ETH entering an exchange hot wallet marks the first point in this fund flow where the platform could identify it.
The attacker’s address still holds about 325.06 ETH.
· The BTC conversion route only appeared in the other address’s past activity; the 50 ETH in this transfer has not been converted.
At this pace, will the remaining 325.06 ETH be moved to exchanges in batches, or swapped first?
