Five Binance wallets sent 233.46 million XRP, worth about $296 million, to one attacker address over roughly four minutes on Oct. 29, according to TRM Labs’ transaction tracing. TRM said the transfers were signed normally and its assessment pointed to compromised signing access across networks.
TRM confirmed that Ripple froze 40.5 million stolen RLUSD, its dollar-backed stablecoin. That freeze control does not apply to XRP; Elliptic said the stolen XRP had not moved as of 5 a.m. UTC on Oct. 31.
Binance said in its Oct. 31 update that XRP and nine other cryptocurrencies were fully backed, while reporting 90% replenishment overall. It maintained a Nov. 1 target for reopening withdrawals, subject to security checks and validation of affected systems, and expected a full proof of reserves for the ten assets by Nov. 3.
