Elliptic estimates that attackers drained $6.43 billion from Binance hot wallets across 11 blockchains, with the largest losses occurring on Ethereum. The attackers abused EIP-7702 delegation and apparently manipulated Binance's signing infrastructure, while issuers and ecosystem participants froze approximately $2.84 billion of the stolen assets. Elliptic assesses DPRK involvement as likely based on co-mingling with proceeds from the suspected DPRK-linked Bitget exploit and operational similarities to the Bybit theft, but emphasizes that no official attribution has been issued. Billions of dollars in ETH, BTC, XRP, and TRX remain outside issuer-controlled freezing mechanisms and are being dispersed through cross-chain and laundering activity.