🚨 Mystery EU victim drained for $106M, and the laundry is already running
An unnamed EU entity lost more than $106 million from several centralized exchange accounts on Sunday, Nov 1, according to onchain sleuth ZachXBT. No victim name, no exchange names. Days after the Binance hack, and the stolen money is already being laundered like it's a side hustle.
▪️ The funds left the exchanges as USDC and USDT, the two stablecoins whose issuers can freeze them. Somebody did their homework.
▪️ Within 24 hours the attacker swapped USDC into ETH to shake off the stablecoin trail. Classic: if the issuer can freeze it, turn it into something they can't.
▪️ Funds went through instant exchanges WellWallet and Kyrrex, which barely check who you are. KYC? Never heard of her.
▪️ Part was converted into Monero through the Wagyu swap service. Monero hides senders, receivers and amounts. Nothing to see here, just a quarter-million-dollar magic trick.
▪️ Assets were bridged across several blockchains. ZachXBT has tied 11 wallet addresses to the funds, so the trail exists, it's just messy.
▪️ ZachXBT says with 'a high degree of confidence' it isn't North Korea's Lazarus Group, citing multiple laundering indicators. Relax, nobody's getting a sanctions-era fairy tale today.
📊 Wallet addresses tied to EU theft:
📊 Solana arbitrage bot drain:
💬 «This pattern strongly suggests a potential wallet compromise.» — Onchain Lens
🔮Who parks $106M on EU exchanges, then needs it washed through Monero in a day? Open question. I'd bet the answer isn't a Sunday hobbyist.
@holder_finance
An unnamed EU entity lost more than $106 million from several centralized exchange accounts on Sunday, Nov 1, according to onchain sleuth ZachXBT. No victim name, no exchange names. Days after the Binance hack, and the stolen money is already being laundered like it's a side hustle.
▪️ The funds left the exchanges as USDC and USDT, the two stablecoins whose issuers can freeze them. Somebody did their homework.
▪️ Within 24 hours the attacker swapped USDC into ETH to shake off the stablecoin trail. Classic: if the issuer can freeze it, turn it into something they can't.
▪️ Funds went through instant exchanges WellWallet and Kyrrex, which barely check who you are. KYC? Never heard of her.
▪️ Part was converted into Monero through the Wagyu swap service. Monero hides senders, receivers and amounts. Nothing to see here, just a quarter-million-dollar magic trick.
▪️ Assets were bridged across several blockchains. ZachXBT has tied 11 wallet addresses to the funds, so the trail exists, it's just messy.
▪️ ZachXBT says with 'a high degree of confidence' it isn't North Korea's Lazarus Group, citing multiple laundering indicators. Relax, nobody's getting a sanctions-era fairy tale today.
📊 Wallet addresses tied to EU theft:
11📊 Solana arbitrage bot drain:
$786KIf your stables sit on a centralized exchange, this is the reminder that the exchange is the weak link, not your conviction. Hodling is great until the platform holding your coins turns out to be a sieve. The Binance precedent shows issuers can freeze fast: Tether froze stolen USDT in 37 minutes and Circle froze $823M in USDC, per Elliptic. Nobody has confirmed whether any EU funds got frozen, and the attacker is already fleeing USDC and USDT, so don't hold your breath for a happy ending. Meanwhile Brazil's Mercado Bitcoin halted withdrawals after a $40M hack of its own, and BTCPay Server told merchants to switch off their servers amid hot wallet attacks. Translation: the hot wallets are getting picked like a pocket on payday.
💬 «This pattern strongly suggests a potential wallet compromise.» — Onchain Lens
🔮
@holder_finance
Binance got gutted for $6.3B, 95% 'refilled', and now fake support clowns are sliding into your DMs
Binance lost about $6.3 billion in crypto after an Oct 29 attack on its hot wallets. The exchange says 95% of the hit is already replaced with company money. Cool story. Now it's warning that the real second wave isn't a hacker. It's a fake Binance support agent in the DMs of people waiting on their withdrawals.
▪️ Withdrawals reopen in phases from Nov 1. Next phase is Nov 3, and Binance hasn't said which coins and networks come back. Sit tight, boys.
▪️ The script: fake Binance staff in emails, DMs and group chats offer to speed up your pending withdrawal or sell you 'priority queue' access. Yeah, a VIP line to get robbed faster.
▪️ More bait: fake compensation claims, fake proof-of-reserves sites, and 'move your coins to a secure wallet' instructions. Classic hamster feeding.
▪️ The killer move: you approve a malicious wallet permission, and the attacker moves your assets without asking you again. No undo button. Your coins are gone, and so is your sense of humor.
▪️ Binance says it doesn't charge fees to unlock withdrawals and never asks you to authorize wallet transactions to regain access. So anyone asking you to do that is the thief. No grey zone here.
▪️ Refill split: 95% from company resources, the last 5% in less-liquid coins bought on the market and OTC. Tracing the stolen funds is a separate track, so don't hold your breath on that one.
📊 Replaced from company resources:
📊 Assets in Oct 31 reserve proof:
📊 Time to generate next proof (Nov 4 snapshot):
🔮Full refill or a pretty shop window? The proof is an Oct 31 snapshot, not today's books.
@holder_finance
Binance lost about $6.3 billion in crypto after an Oct 29 attack on its hot wallets. The exchange says 95% of the hit is already replaced with company money. Cool story. Now it's warning that the real second wave isn't a hacker. It's a fake Binance support agent in the DMs of people waiting on their withdrawals.
▪️ Withdrawals reopen in phases from Nov 1. Next phase is Nov 3, and Binance hasn't said which coins and networks come back. Sit tight, boys.
▪️ The script: fake Binance staff in emails, DMs and group chats offer to speed up your pending withdrawal or sell you 'priority queue' access. Yeah, a VIP line to get robbed faster.
▪️ More bait: fake compensation claims, fake proof-of-reserves sites, and 'move your coins to a secure wallet' instructions. Classic hamster feeding.
▪️ The killer move: you approve a malicious wallet permission, and the attacker moves your assets without asking you again. No undo button. Your coins are gone, and so is your sense of humor.
▪️ Binance says it doesn't charge fees to unlock withdrawals and never asks you to authorize wallet transactions to regain access. So anyone asking you to do that is the thief. No grey zone here.
▪️ Refill split: 95% from company resources, the last 5% in less-liquid coins bought on the market and OTC. Tracing the stolen funds is a separate track, so don't hold your breath on that one.
📊 Replaced from company resources:
95%📊 Assets in Oct 31 reserve proof:
10📊 Time to generate next proof (Nov 4 snapshot):
40-50 hoursGot a pending withdrawal? The only real channels are the app and Binance's official verification service. Anyone in your DMs offering to unlock your funds for a fee works for the thieves, full stop. The proof covers balances at 00:00 UTC on Oct 31 and shows at least 1:1 backing for that snapshot. It doesn't show current solvency and it doesn't audit the exchange. A PR tool is not a balance sheet, so don't let it pass for one.
🔮
@holder_finance
📉 BTC at $76,844, ZEC bleeds 10.9% on $182M, Fear at 26. The chat is sulking
Bitcoin is down 1.93% to $76,844.01 and Ether is down 1.65% to $2,253.98. The whole board is red and the crowd is sulking. Zcash took the biggest hit among the high-volume names, while everything else just slid down with it.
▪️ ZEC -10.9% on $182M, the heaviest volume on the loser list. Somebody is getting shaken out with size, and it's not you, unless it is.
▪️ NEAR -10.6% on $104M. SOXLB -15.4% on $35M is the deepest drop on the board, with INTCB -9.2% and SNDKB -9.1% right behind it. Nobody's catching these knives for free.
▪️ TRX is the only real green: +2.1% on $40M. USDC printed $1,656M in volume and went nowhere. Stablecoins doing their boring job, as always.
▪️ An unidentified European entity pulled more than $106M out of centralized exchange accounts on Sunday, days after the Binance hack. That's not a coincidence you're supposed to shrug off.
▪️ Binance's November 2 update says full proof for its $6.3B hack recovery is complete and replenishment stands at about 95%, with broader token coverage planned.
▪️ A Polymarket account bought the Arizona Cardinals at 1.4 cents when Arizona trailed Dallas by 10 with under four minutes left. Either someone knew something or got very lucky.
🔮Fear at 26 and falling. Who's buying this panic, and who's left holding the bag?
@holder_finance
Bitcoin is down 1.93% to $76,844.01 and Ether is down 1.65% to $2,253.98. The whole board is red and the crowd is sulking. Zcash took the biggest hit among the high-volume names, while everything else just slid down with it.
▪️ ZEC -10.9% on $182M, the heaviest volume on the loser list. Somebody is getting shaken out with size, and it's not you, unless it is.
▪️ NEAR -10.6% on $104M. SOXLB -15.4% on $35M is the deepest drop on the board, with INTCB -9.2% and SNDKB -9.1% right behind it. Nobody's catching these knives for free.
▪️ TRX is the only real green: +2.1% on $40M. USDC printed $1,656M in volume and went nowhere. Stablecoins doing their boring job, as always.
▪️ An unidentified European entity pulled more than $106M out of centralized exchange accounts on Sunday, days after the Binance hack. That's not a coincidence you're supposed to shrug off.
▪️ Binance's November 2 update says full proof for its $6.3B hack recovery is complete and replenishment stands at about 95%, with broader token coverage planned.
▪️ A Polymarket account bought the Arizona Cardinals at 1.4 cents when Arizona trailed Dallas by 10 with under four minutes left. Either someone knew something or got very lucky.
Fear & Greed is at 26, Fear, down from 37 yesterday. The room is scared and the sellers have the mic. Binance's second-wave warning is the thing to keep an eye on, because affected users are still waiting to see how the rest of the recovery gets handled, and that's where the next leg of panic usually comes from.
🔮
@holder_finance