Elliptic reported that hackers linked to the Oct. 29 Binance theft had converted about $124 million in stolen crypto into roughly 1,650 BTC. That included about $50 million in XRP moved from linked wallets since Thursday afternoon, most of which was swapped into bitcoin. Elliptic cautioned that moving or swapping assets does not mean the proceeds have been cashed out; it believes only a negligible amount has become spendable.
Elliptic estimated that $3.11 billion remained in addresses tied to the theft, mainly in bitcoin and ether, while about $2.85 billion of the original $6.43 billion had been frozen or seized. The original 18,270 stolen BTC had not moved since being split among 19 wallets shortly after the attack, and the largest ether holdings were also untouched. The FBI attributed the attack to North Korea’s TraderTraitor operation; Pyongyang denied responsibility.