Binance hacker group intensifies TRX fund movement across wallets
Security & Exploits ·
A group linked to the Binance hack has escalated its laundering activity on Tron, moving tens of millions of dollars through a fast-expanding web of wallets.
The group transferred 120M TRX, worth approximately $38.78M, in a transaction that can be viewed on Tronscan, with further distributions following the initial move. The activity was flagged as unlike anything seen from the group before, according to a post on X.
The laundering method relies on automated transfers that repeatedly split funds across multiple wallets. Portions of the funds are routed back to earlier addresses before being redistributed again to new destinations. The repeated splitting, looping, and redistribution is designed to obscure the trail of the funds as they move through the Tron network.
The scale and automation of the technique mark a departure from prior patterns associated with the group's fund movements, though the underlying objective—breaking the on-chain link between the original hack proceeds and their eventual destination—remains consistent with earlier laundering attempts tied to the case.
A separate report in the same cluster corroborates the core transfer, noting that 120M TRX, valued at $39.8M, originating from the 2026 Binance hack was moved to an unknown wallet, a figure close to but not identical to the $38.78M valuation cited elsewhere, likely reflecting differing price snapshots at the time of reporting.
What remains unknown is the final destination of the funds, whether an exchange, a mixer, or further wallets, and whether the new wallet-splitting and routing method will complicate tracing efforts enough to prevent recovery. It is also unclear whether this transfer represents an isolated escalation or the start of a sustained pattern of larger, more frequent movements. Analysts following the case will likely watch subsequent transactions from the newly funded wallets for signs of consolidation toward an exchange or additional obfuscation layers.