Binance exploit suspects shift $1B in ether to fresh wallets
Security & Exploits ·
Wallets linked to a reported $5.8B Binance exploit have moved over $1B in ETH to new addresses, a sign funds may be headed toward laundering channels.
The transfers were flagged in an on-chain tracking report, which identified the movement as originating from the group tied to the $5.8B exploit. The reported destination wallets include one address visible on Etherscan, part of a cluster of six addresses cited in the report, though two of the listed links point to the same address.
Moving large sums to new, unlabeled wallets is a common precursor to laundering through privacy tools such as Tornado Cash and other mixers, which obscure the trail between stolen funds and their eventual destination. The report states the funds are likely being prepared for exactly this kind of mixer-based laundering, though no transactions into Tornado or other mixing services have yet been confirmed.
The underlying exploit, reported at $5.8B, has not been independently detailed beyond its citation in this tracking report, leaving open questions about how the breach occurred and whether Binance has issued its own confirmation or response. Only one distinct source is currently covering this cluster, meaning the figures and the attribution to a single hacker group remain unverified by additional reporting.
What remains unresolved is whether the $1B in ETH actually reaches Tornado Cash or comparable mixers, whether exchanges or compliance tools succeed in freezing any portion of the funds before they are obscured, and whether further on-chain analysis will corroborate the $5.8B exploit figure itself. Tracking of the six flagged addresses is likely to continue as the funds move.