A wallet linked to the Binance hack sent about 233.45 million XRP to six new wallets between 03:52 and 04:00 UTC on November 2. As of 04:37 UTC, none of the six had sent funds onward. Native XRP cannot be frozen by an issuer; recovering it depends on tracing the funds and exchanges blocking deposits.
Analysts reported that the attacker had moved about $242 million through Tron-related routes after Tether froze about 378.7 million USDT. They said another $41.7 million went through Bitget Wallet, but its destination was unconfirmed. U.S. authorities have attributed the theft to North Korea, and Binance says it has covered about 95% of the affected amount with company funds.
