The attackers behind the Binance hack have moved about 81% of the Solana they stole, Cointelegraph reported on November 4. Arkham data shows wallets tagged to the Binance hacker entity still holding 182,443 SOL, worth about $16.9 million, or 18.8% of the 970,522 SOL taken.
According to on-chain tracker Lookonchain, the attackers split the SOL across many wallets, sold it for USDC, bridged to Ethereum to buy ether and then swapped ETH for bitcoin through THORChain. The hackers shifted to Solana on Sunday after emptying most of their Tron holding wallets; Chainalysis estimated that around $500 million in total value moved through Tron, including repeated transfers between wallets. Investigator SomaXBT estimated that about 54% of more than 47,600 transactions on Tron and Solana were automated.
THORChain halted swaps on Saturday after an unrelated refund bug and restored trading on Bitcoin, Ethereum and other chains on Wednesday. Chainalysis said the halt inadvertently slowed the laundering. The FBI, which attributed the attack to North Korea’s TraderTraitor group on Saturday, has urged service providers, including THORChain node operators, to block linked transactions. Kim Yo Jong, sister of Kim Jong Un, dismissed the accusations as “absurd rhetoric.”
Binance said on Tuesday that it had replenished 98% of affected tokens and will absorb the losses itself. With THORChain trading again, attention now turns to whether node operators act on the FBI’s request.
Track the market yourself with AiTraderView’s FREE tools: Crypto Cockpit for charts and 75+ indicators, Crypto Screener to find setups, and Crypto Portfolio to follow your holdings. Just create a FREE account and try them yourself!
Sources:
⚠️ RISK WARNING & AI DISCLOSURE
- This information is generated by Artificial Intelligence (AI) and complex algorithms. While advanced, these systems can contain errors or inaccuracies and are for educational purposes only.
- Technical analysis provides no guarantees; this information is purely informative.
- All discussed scenarios are hypothetical and do not constitute predictions or expectations.
- Past performance is not an indicator of future results.
- This is not financial advice and is not intended as a call-to-action for the reader.
- No implicit direction is claimed, and no specific behavior of market participants is suggested.

