Binance Attacker Swaps Stolen Solana For Bitcoin
Key Summary
The hacker behind the $6.34B Binance breach continues laundering stolen funds into Bitcoin via THORChain, bypassing federal blockades.
Key Bullets
- On-chain data provider Lookonchain confirmed Tuesday that the Binance attacker converted 970,522 SOL tokens worth $95.9M into Bitcoin.
- Federal authorities and the FBI previously demanded that cross-chain protocols freeze $2.85B in intercepted assets from the security breach.
- The multi-step laundering path routed funds from Solana through USDC, Ethereum, and THORChain to obscure transaction trails completely.
- Binance reported that the massive security incident compromised $6.34B in digital assets across multiple interconnected trading platforms.
Stolen Solana Converted Into Bitcoin Assets
Blockchain monitoring firm Lookonchain published data Tuesday indicating that the hacker responsible for the monumental Binance security breach is actively converting stolen Solana holdings into Bitcoin. Public on-chain records show the attacker moved 970,522 tokens valued at $95.9M across multiple fresh wallets during the routing sequence. This operational cadence highlights persistent vulnerabilities in cross-chain bridge security architecture. Liquidity moved continuously through decentralized channels.
The laundering route begins by splitting large token balances into separate wallets before swapping the holdings for USDC stablecoins. That capital then bridges from Solana to Ethereum to purchase native ether tokens before entering the THORChain protocol for final conversion into Bitcoin. Federal law enforcement agencies struggle to maintain custody over the floating capital. The digital trail vanishes into decentralized pools.
Cross-Chain Liquidity Protocols Bypass Federal Freezes
Official disclosures filed by Binance put total losses from the security breach at $6.34B in compromised digital assets across international markets. Exchange security teams managed to freeze or intercept $2.85B of the stolen funds by Nov. 3 through direct coordination with centralized custody providers. US federal investigators attribute the multi-billion-dollar breach to TraderTraitor, a state-sponsored hacking collective operating out of North Korea. Investigators face steep hurdles tracking cross-chain movements.
The FBI formally requested that decentralized liquidity networks blacklist wallets associated with the incident to prevent further asset transfers. However, automated smart contracts process cross-chain swaps without human intervention or mandatory compliance checks. The hacker executed a single hourly transfer involving 486,970 tokens worth $46.4M via Relay Protocol before pivoting to THORChain. Automated protocols ignored federal requests.
Exchanges Scramble As Laundering Operations Continue
Trading desks across major CEX venues monitor the ongoing Bitcoin conversion sequence for signs of sudden spot market selling pressure. Order-book depth metrics analyzed by institutional desks show minimal immediate impact on spot prices despite the massive capital influx. Market makers adjusted their risk parameters to account for potential sudden liquidations. Order books held firm against the inflows.
Security analysts point out that decentralized cross-chain architectures actively undermine centralized asset recovery mandates issued by courts and regulators. Protocol developers face mounting pressure to implement mandatory compliance gates inside automated liquidity pools. The hacker continues shifting balances across networks. On-chain monitoring tools track every single transaction.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.