Binance exploit: about $242M laundered through the Tron leg in two days
2026-11-01 • Soma XBT •
SomaXBT traced approximately $242 million laundered through the Tron portion of the Binance exploit during its first two days, after Tether froze 378.7 million USDT from the $628 million stolen on Tron. The attackers routed funds mainly through Relay, THORChain, Chainflip, and Symbiosis, dispersing assets across hundreds of Ethereum and Bitcoin addresses. Relay's largest disclosed receiver collected 2,804 ETH and 1.02 million USDT through 97 payments, while failed swaps repeatedly returned funds to new Tron wallets for reuse. About $7.5 million remained on Tron, and more than $3 billion held on other chains was reportedly still largely untouched.
Indicators of Compromise
| Type | Value | First Seen | Last Seen |
|---|---|---|---|
| WALLET | 0xc8D516a53e28909d9eAB926429387… | 2026-11-01 | 2026-11-01 |