A day after FTX filed for bankruptcy, the firm’s hot wallets were drained by hackers, walking away with nearly $650 million in altcoins.
Now, after various bridgings and on-chain chicanery, the attacker is left with holdings of more than $367 million across various major blockchains.
The attacker laundered proceeds using decentralized exchanges (DEX) and cross-chain bridges, reported blockchain intelligence firm Arkham Intelligence.
A total of almost $20 million in PAXG was frozen across the attacker's 4 addresses that hold PAXG.
The attacker also attempted to obfuscate fund transfers on BSC by 'swapping' tokens with the recipient address set to a separate address, 0x2cb. pic.twitter.com/dLxYyWPuNf
According to Elliptic, cross-chain bridges are widely used by hackers to launder stolen funds. “Chain hopping,” the movement of stolen funds between different blockchains, helps hackers evade tracing by enforcement agencies.
Here’s how it went down.
On November 12, 2022, roughly $650 million in ill-gotten funds were routed from FTX’s hot wallet to two wallet addresses, one on Solana and the other on Ethereum.
Since then, the hacker’s wallet address bridged the funds to different blockchain networks, including Binance Smart Chain, Polygon, and Avalanche, according to data from respective block explorers.
Law enforcement agencies were, however, able to freeze nearly $20 million in Paxos Gold (PAXG) tokens linked to the attack on November 14.
Hacker’s wallet holdings across Ethereum, Binance Smart Chain, Polygon, and Avalanche. Source: Debank
According to data from debank, the hacker’s wallet address holds nearly 229,000 Ethereum (ETH) and 8,184.9 Paxos Gold (PAXG) tokens on Ethereum.
On Binance Smart Chain, the wallet holds nearly 108.454 million BNB and 1.685 million DAI stablecoin. Avalanche hosts about 3.970 million in Tether’s stablecoin USDT in the hacker’s wallet address.
SatLayer, a Bitcoin restaking platform, announced Wednesday it’s extending Bitcoin’s use in decentralized finance to Sui, the speedy layer-1 blockchain launched last year.
With Sui’s focus on fast transaction speeds, SatLayer’s integration will enable developers to leverage Bitcoin’s $2.1 trillion footprint in building DeFi applications, which aim to exclude third parties from transactions in areas like trading and lending, SatLayer said in a statement.
Sui’s network is already home to a budding...
It's been a big week of DeFi news for the Donald Trump-backed crypto venture, World Liberty Financial (WLFI). Earlier this week, the project expanded its portfolio with $5 million worth of investment in three major assets: Ethereum (ETH), Chainlink (LINK), and Aave (AAVE).
The acquisitions include 2,631 ETH at $3,801 each, 41,335 LINK at $24.2, and 3,357 AAVE at $297.8, according to on-chain analytics platform Lookonchain.
The purchases mark WLFI’s first foray into LINK and AAVE, diversifying it...
Crypto yield marketplace Superform announced Wednesday the launch of SuperUSDC, a product billed as a “set and forget” opportunity for earning high yield on Circle’s stablecoin.
Since its launch in early access this year, the platform has functioned as a decentralized marketplace for yield protocols. Projects can list vaults on Superform, which are linked to yield opportunities on Ethereum as well as dedicated scaling solutions like Arbitrum or Base.
SuperUSDC offers DeFi users “automated, non...