Episode summary
Where Did Binance's Stolen $6 Billion Go?
Summary
The episode argues that the $6.3 billion Binance theft was only the beginning of a much larger laundering operation. The attackers first exploited hot wallets and an internal signing service, then rushed funds through lending protocols, decentralized exchanges, and cross-chain bridges before stablecoin freezes could fully lock them down. A major part of the haul was converted out of USDT and USDC, while the rest moved into wallets and assets that were harder or impossible for issuers to freeze.
The host says the laundering was preplanned: operator wallets were funded through Tornado Cash before the theft, and the stolen assets were pushed through about 12,000 wallets across 11 blockchains in under four days. The rush to escape freezes caused heavy slippage, with one estimate putting trading losses at $119 million. Tether, Circle, Ripple, and Aave all moved to freeze or pause parts of the flow, and by October 31 about $3 billion was reportedly locked up.
The episode also says the money is still moving, with around $3.3 billion remaining in thief-controlled addresses, mostly Bitcoin and Ether. It adds that the investigative ecosystem itself was shaken when Chain Analysis, whose Reactor tool is widely used to trace illicit crypto, disclosed a security incident and temporarily took systems offline.
Key takeaways
- The host says the Binance theft involved about $6.3 billion taken from hot wallets in roughly 20 minutes.
- The attackers used USDT and USDC’s freeze risk against them, swapping into ETH and other assets before issuers could blacklist addresses.
- The host says the laundering ran automatically across 11 blockchains and about 12,000 wallets, with more than 40,000 transactions in under four days.
- Tether, Circle, Ripple, and Aave froze or paused parts of the flow, and the host says about $3 billion was locked by October 31.
- The host says the rush to exit caused major slippage, with one estimate putting total market losses at $119 million.
Notable quotes
“11 blockchains and about 20 minutes later, the biggest crypto theft in history was complete”
“The theft took minutes, but turning that money into something the thieves can actually spend takes far, far longer”
“in a window of about three minutes, one wallet deposited $60 million of USDT into the lending protocol Aave”
“So, the laundering didn't start after the theft. It actually began at least 36 hours before it”
“The longer that money keeps moving, the harder it becomes to untangle wherever it's going”
Topics
- binance hack
- stolen crypto laundering
- stablecoin freezes
- cross-chain exploits
- investigation and recovery
Companies and tickers mentioned
- Binance
Watch the episode
Watch “Where Did Binance's Stolen $6 Billion Go?” on YouTube
Summary, takeaways and quote selection by Octagon. Quotes are short excerpts; the full conversation is in the episode.
More from Coin Bureau
Coin Bureau, this episode and its artwork belong to Coin Bureau. Octagon is not affiliated with the show; this page is an independent summary.