Key Takeaways
- The bitcoin conversion: Hackers remodeled $175 million in stolen altcoins into 2,300 BTC, in line with Elliptic.
- The vanishing path: Over 20,000 wallets and 65,000 transactions obscure the stolen funds.
- The untouched fortune: The hackers’ main bitcoin and ethereum holdings stay dormant.
How Did Binance Hackers Flip Stolen Altcoins Into 2,300 BTC?
The Oct. 29, 2026, Binance hack stands as the most important cryptocurrency alternate breach in U.S. greenback phrases, with the attackers making off with a rare haul. Final week, Bitcoin.com News detailed how the perpetrators siphoned 18,270.2 BTC from the buying and selling platform, whereas onchain data and blockchain forensic analysts now point out that their bitcoin stockpile is rising significantly bigger.
This week, Elliptic co-founder and chief scientist Dr. Tom Robinson printed an in depth examination of the incident, incorporating updates through Saturday, Nov. 7, 2026. Robinson’s findings reveal that altcoins stolen throughout the Binance breach have since been transformed into roughly 2,300 BTC, valued at $175 million based mostly on bitcoin costs as of Nov. 7.
“The laundering is extremely advanced and clearly automated,” Robinson’s report particulars. “For the reason that theft it has used greater than 20,000 wallets on 16 blockchains, at the least 36 companies and at the least 65,000 transactions. That’s roughly one new pockets each 30 seconds and one transaction each 10 seconds.”
From Solana to Bitcoin, a Multichain Laundering Operation
The Elliptic co-founder detailed how the attackers transferred roughly $90 million in stolen solana (SOL), with a lot of the proceeds finally transformed into bitcoin. XRP additionally emerged as a considerable contributor to the attackers’ increasing bitcoin holdings, whereas stolen tron (TRX) was equally exchanged for BTC.
Ethereum (ETH) accounted for a smaller portion of the conversions, whereas the attackers additionally employed Thorchain to facilitate cross-chain asset swaps. All through Robinson’s evaluation, the Elliptic boss repeatedly ties the hackers to North Korea, and the nation is talked about eight occasions.
How Are the Hackers Obscuring Their Bitcoin Path?
A portion of the newly acquired bitcoin subsequently flowed via Wasabi Wallet coinjoins, a transaction approach that commingles bitcoin from a number of members to complicate blockchain tracing efforts. By Nov. 7, Robinson’s evaluation indicated that roughly 88 BTC, valued at $6.7 million, had been processed via this obfuscation methodology.
The Elliptic co-founder additional famous:
“On NEAR, roughly 412,000 NEAR ($1.5 million) left the primary accounts in small batches. In complete, roughly 2,300 BTC ($175 million) now sit in newly created bitcoin addresses following conversions from different stolen cryptocurrencies. In the meantime, the first bitcoin and ETH holdings stay untouched.”
On the identical time, knowledge gathered by Bitcoin.com Information from blockchain analytics platform Arkham Intelligence paints a considerably completely different image, displaying no corresponding addition of 2,300 BTC, though the unique 18,270.2 BTC attributed to the attackers had climbed to 18,384.725 BTC as of 10 a.m. ET on Nov. 7, 2026.
Arkham’s transaction records however reveal bitcoin deposits originating from Thorchain vaults on Saturday, alongside TRX token swaps executed via Solar.io, a distinguished decentralized finance (DeFi) protocol working on the Tron community.













