Forwarded from Kairos Research
Update, 5:52 PM ET:
$5.78B has now left Binance across Ethereum, Bitcoin, and Tron, with all 63 swept tokens priced at live prices. $2.57B (44%) is frozen by Tether, Circle, Tether Gold, and World Liberty, or 59% excluding the 17,270 BTC that hasn’t moved
The attacker’s code is still attached to the Binance hot wallet and swept another 200M USDT at 5:44 PM, which landed frozen
Before Tether’s freeze, the attacker deposited $60M USDT on Aave and borrowed 19.8K ETH ($45M). Aave then froze nearly all of its Ethereum markets at 5:47 PM, so no new deposits or borrows. About $850M in ETH keeps hopping between fresh, unfrozen wallets, Binance’s own wBETH ($75M) is not frozen, and nothing has gone to Tornado Cash
https://x.com/Kairos_Res/status/2115925491831972093?a=HxLjIi8ah428iW6S0qw&s=20
$5.78B has now left Binance across Ethereum, Bitcoin, and Tron, with all 63 swept tokens priced at live prices. $2.57B (44%) is frozen by Tether, Circle, Tether Gold, and World Liberty, or 59% excluding the 17,270 BTC that hasn’t moved
The attacker’s code is still attached to the Binance hot wallet and swept another 200M USDT at 5:44 PM, which landed frozen
Before Tether’s freeze, the attacker deposited $60M USDT on Aave and borrowed 19.8K ETH ($45M). Aave then froze nearly all of its Ethereum markets at 5:47 PM, so no new deposits or borrows. About $850M in ETH keeps hopping between fresh, unfrozen wallets, Binance’s own wBETH ($75M) is not frozen, and nothing has gone to Tornado Cash
https://x.com/Kairos_Res/status/2115925491831972093?a=HxLjIi8ah428iW6S0qw&s=20
❤1👨💻1
Forwarded from Cielo Premium Bot #4
#BinanceHackerUNI
🔴 Swapped 200,000 #UNI ($611,515.46) for 266.17 #WETH On #UniswapV4 @ $3.06 | MC: $3.1b | Age: 2236d
➖ Sold: 4.63% | 💰 Holds: 0.41% ($12.6M)
Token:
#ethereum | Cielo | ViewTx | Chart | X
🔴 Swapped 200,000 #UNI ($611,515.46) for 266.17 #WETH On #UniswapV4 @ $3.06 | MC: $3.1b | Age: 2236d
➖ Sold: 4.63% | 💰 Holds: 0.41% ($12.6M)
Token:
0x1f9840a85d5af5bf1d1762f925bdaddc4201f984#ethereum | Cielo | ViewTx | Chart | X
😢2
Forwarded from Kairos Research
Update, 6:40 PM ET:
Tether froze the compromised Binance hot wallet at 6:07 PM, but the attacker’s code is still attached, and at 6:39 PM it swept another 122 tokens (about $47M) to a new wallet. The frozen total is $2.59B. World Liberty froze another 27.8M USD1, Coinbase blacklisted three attacker wallets from cbETH, Compound paused deposits on its USDC, WETH, and USDT markets at 5:43 PM, and Aave froze its Ethereum markets at 5:47 PM.
The attacker has now swapped $458M of stolen funds into ETH. 435M USDT went for $364M of ETH between 4:34 and 5:11 PM, a roughly 17% haircut, and 48M RLUSD for $46.5M. Since 5:51 PM they have also sold 6.71M UNI ($38.2M), 522K LINK ($5.3M), 534B PEPE ($2.4M), and 10K AAVE ($1.2M) into Uniswap pools.
About $284M of tokens are still unsold, including Binance’s wBETH ($75M), which is still not frozen. The attacker holds about 418K ETH ($949M) across eight wallets. All 18,270 BTC ($1.44B) sits untouched in 19 wallets, and nothing has gone to Tornado Cash.
https://x.com/Kairos_Res/status/2115937978174353658?a=HvSst6jiIPeRF_c9MbM&s=20
Tether froze the compromised Binance hot wallet at 6:07 PM, but the attacker’s code is still attached, and at 6:39 PM it swept another 122 tokens (about $47M) to a new wallet. The frozen total is $2.59B. World Liberty froze another 27.8M USD1, Coinbase blacklisted three attacker wallets from cbETH, Compound paused deposits on its USDC, WETH, and USDT markets at 5:43 PM, and Aave froze its Ethereum markets at 5:47 PM.
The attacker has now swapped $458M of stolen funds into ETH. 435M USDT went for $364M of ETH between 4:34 and 5:11 PM, a roughly 17% haircut, and 48M RLUSD for $46.5M. Since 5:51 PM they have also sold 6.71M UNI ($38.2M), 522K LINK ($5.3M), 534B PEPE ($2.4M), and 10K AAVE ($1.2M) into Uniswap pools.
About $284M of tokens are still unsold, including Binance’s wBETH ($75M), which is still not frozen. The attacker holds about 418K ETH ($949M) across eight wallets. All 18,270 BTC ($1.44B) sits untouched in 19 wallets, and nothing has gone to Tornado Cash.
https://x.com/Kairos_Res/status/2115937978174353658?a=HvSst6jiIPeRF_c9MbM&s=20
❤1