On-Chain Status: Over $3.2 Billion Remains in Linked Addresses
Blockchain analytics firm Elliptic revealed in a November 2nd report that approximately $3.24 billion worth of stolen cryptocurrency from Binance remains held in associated addresses. The assets are primarily composed of Ethereum (ETH) and Bitcoin (BTC).
Tracking the Fund Movements
The report also noted that an additional $2.85 billion in assets have been frozen or seized by law enforcement agencies. This indicates that despite the passage of time since the initial breach, a significant portion of the funds remains within the monitored ecosystem.
A Rapidly Deployed Laundering Network
Elliptic's analysis uncovered the remarkable speed and scale of the laundering operation. Within less than four days, the actors utilized approximately 12,000 distinct wallets to execute over 40,000 transactions across 11 different blockchains in an attempt to obfuscate the trail.
Frequent Use of Mixing Techniques
By the time of the report, monitoring data showed around 28 BTC had been processed through 18 separate CoinJoin transactions. This technique combines multiple transactions to significantly complicate the tracing of individual fund sources.
Minimal Successful Cash-Out Observed
Elliptic stressed in the report that to date, it is likely only a minimal fraction of the stolen funds has been successfully converted to fiat currency or moved outside the crypto ecosystem. The on-chain activity patterns suggest the use of conventional automated scripts for fund movement, with analysts finding no evidence yet of AI agents participating in decision-making.
Focus of Ongoing Surveillance
The report concludes that the pattern of asset movement indicates the operators are currently focused on evading detection rather than liquidating holdings. Elliptic and its partners will continue tracking the assets, with particular attention to any attempts to off-ramp through exchanges or over-the-counter trading desks.