Binance hacker begins mixing stolen funds through CoinJoin; $3.24B in stolen assets remain in linked addresses.
Security & Exploits ·
The individual behind the Binance hack has begun mixing stolen cryptocurrency through CoinJoin, a privacy tool, by running 28 BTC through the service, according to blockchain analysis firm Elliptic. The move represents the first known attempt to obscure the flow of assets taken in what remains one of the largest cryptocurrency thefts.
Approximately $3.24 billion in stolen funds continues to reside across addresses linked to the attacker, predominantly held in ETH and BTC. The funds have remained largely stationary since the initial theft, though the recent mixing activity signals a shift toward potential laundering or dispersal.
The timing and method of the CoinJoin deployment remain unclear, as do the hacker's next steps and whether additional stolen assets will follow through privacy mixers. Tracking the full volume of stolen funds and their ultimate destination depends on continued monitoring of linked addresses and any on-chain activity.