Summary: A recent update from blockchain intelligence firm Elliptic reveals that around $124 million of assets stolen from Binance in October have been converted into Bitcoin. This includes funds initially held in XRP and SOL. While on-chain tracking provides insight into fund movements, it cannot definitively identify the individuals behind wallet addresses or confirm that all converted funds have been liquidated.
Tracing the Movement of Stolen Cryptocurrencies
According to a technical analysis released by Elliptic on November 6, the investigation into the October cryptocurrency theft, believed to be orchestrated by actors linked to North Korea, is ongoing. The analysis found that approximately 1,650 BTC (worth about $124 million) have been identified in new addresses after conversion from stolen assets, with about $50 million worth of XRP also shifting toward Bitcoin, alongside the exchange and commingling of stolen Solana tokens.
Elliptic emphasizes that the numbers reported are fluid and subject to change as the investigation continues. Each transaction and wallet involved in the movement of these assets may evolve as further activity unfolds, complicating the tracking process.
Challenges in Identifying Actual Transactions
As of the latest reports, approximately $2.85 billion of the stolen assets have been frozen, while around $3.11 billion remains in addresses linked to the theft. Despite these significant figures, Elliptic warns that only a minimal portion of the stolen assets is likely to have been converted into actual cash. The ongoing tracking may reveal changing estimates as the investigation progresses.
It’s crucial to note that while cryptocurrencies like Bitcoin and Ether can be held for extended periods without converting to fiat currency, the public visibility of wallet transactions alone does not provide clarity on the ultimate owners or identities that control these assets. This ambiguity poses a significant concern for compliance services, which must continuously assess risks associated with illicit funds.
Insights Into Current Security Incidents
This evolving situation is underscored by concurrent security issues affecting another blockchain analytics firm, Chainalysis. Although Elliptic and Chainalysis have experienced incidents simultaneously, they have clarified that these are unrelated to each other. While Elliptic focuses on tracing funds linked to the Binance theft, the complexities of blockchain security remain evident.
These events serve as a reminder for businesses dealing with digital assets about the importance of infrastructure resilience, including custody practices and response protocols. Effective user protection is not limited to monitoring transactions across a single blockchain; it must encompass a broader strategy that includes managing withdrawals and counterparty risks.
Looking Ahead: What’s Next in the Investigation
The next updates are expected to focus on confirmed asset freezes, recognizable fund movements through identifiable services, and definitive evidence of cash disbursements. The data from Elliptic indicates that stolen funds are being actively transferred through intricate pathways, but details surrounding the ultimate beneficiaries and the potential recovery of these assets remain unclear.
This overview reflects the continuous adaptation of theft methodologies in the cryptocurrency space and emphasizes the need for ongoing vigilance and advanced tracking capabilities within the industry.
This piece was composed by Newsdesk and edited by Samuel Ray.
