Attackers behind the reported $6.3 billion Binance hack have moved about 81% of the stolen Solana, according to the source. Arkham data showed wallets grouped under the “Binance hacker” entity still held 182,443 SOL, worth $16.9 million, or about 18.8% of the 970,522 SOL stolen. Lookonchain reported that the attackers moved SOL through multiple wallets, sold it for USDC and used THORChain to swap assets into Bitcoin.
Binance said attackers compromised employee devices through fake job interviews and malicious downloads. It said it had replenished 98% of affected tokens and would absorb losses. The FBI attributed the attack to North Korea’s TraderTraitor hackers; Kim Yo Jong rejected the accusation. THORChain restored trading after a halt that Chainalysis said had delayed the attackers’ laundering activity.
