Binance hackers move 81% of stolen Solana, route funds via THORChain

What happened

Attackers behind the $6.3 billion Binance hack moved about 81% of the stolen Solana through multiple wallets, according to the article. They reportedly sold SOL for USDC, moved it to Ethereum to buy Ether, then swapped Ether for Bitcoin using THORChain.

Confirmed

Global impact / market context

The attackers reportedly moved about 81% of the stolen Solana and routed funds through several tokens using THORChain. This path may spread selling or buying activity across those tokens, while calls to block linked transactions could limit services’ ability to process swaps.

Analyst inference

The article reports that Binance replenished 98% of affected tokens and said it would absorb losses, which may limit direct customer losses. The reported laundering route and request to block linked transactions put focus on crypto services’ security controls and transaction restrictions.

Analyst inference

What to watch

1. Watch for updates on the stolen Solana: the article says wallets held 182,443 SOL, worth $16.9 million, after the reported transfers. Analyst inference
2. Watch whether THORNode operators or other crypto services act on the request to block transactions linked to stolen assets, which could restrict the reported route. Analyst inference
3. Track whether attackers continue converting SOL to USDC, then Ether and Bitcoin; further swaps could spread transaction activity across these tokens. Analyst inference

Affected assets

• USDC — USD Coin
• SOL — Solana
• BTC — Bitcoin
• ETH — Ethereum

Evidence

• cointelegraph.com