
Attackers move 81% of stolen Solana as Binance replenishes funds and FBI points to North Korea.
The hackers behind the $6.3 billion Binance exploit have moved 81% of stolen Solana, laundering funds via THORChain while the FBI attributes the attack to North Korea.
AI-generated summary
Binance suffered a major security breach involving stolen funds on Solana, Tron, and other blockchains.
The attackers behind the $6.3 billion Binance hack have moved about 81% of the stolen Solana (SOL) as they continue laundering assets through the cross-chain swap protocol THORChain.
Wallets grouped under the Binance hacker entity held 182,443 SOL (worth $16.9 million), or roughly 18.8% of the total 970,522 SOL stolen during the exploit, according to blockchain data platform Arkham.
Lookonchain reported on Wednesday that the attackers split SOL across multiple wallets, selling it for USDC, bridging to Ethereum to buy Ether, and ultimately swapping ETH for Bitcoin (BTC) via THORChain.
Binance suffered a record-setting hack on Thursday after attackers compromised employee devices through fake job interviews and malicious software downloads, the exchange said. Binance said Tuesday it replenished 98% of affected tokens and would absorb losses.
The US Federal Bureau of Investigation attributed the attack to North Korea’s TraderTraitor hackers on Saturday and urged crypto service providers, including THORNode operators, to block transactions linked to stolen assets.
Kim Yo Jong, sister of North Korean leader Kim Jong Un, dismissed the accusations as “absurd rhetoric.”
North Korea-linked hacking groups are suspected of using THORChain to launder proceeds from some of the largest cryptocurrency hacks, including the $1.4 billion Bybit hack.
THORChain resumes swaps after halt delayed laundering
THORChain restored trading on Bitcoin, Ethereum and several other chains on Wednesday. Services had been halted on Saturday after an Ethereum block reorganization exposed a refund bug. The halt inadvertently delayed Binance hackers’ laundering activity, according to Chainalysis.
Blockchain investigator SomaXBT estimated that about 54% of the attackers’ more than 47,600 transactions on Tron and Solana were automated.
Binance hackers expanded their laundering activity to Solana on Sunday after emptying most of their temporary holding wallets on Tron. Chainalysis estimated that about $500 million in total value moved through Tron, including repeated transfers between wallets.
AI outlook — possibilities, not facts
Crypto service providers will block transactions linked to stolen assets.
Likely · Within days

US spot Bitcoin ETFs recorded over $1 billion in net outflows across three trading sessions, driven by market volatility following the Binance hack. However, Bitwise researchers state that institutional adoption remains steady.

Democrats have won majorities in both the US Senate and House of Representatives in midterm elections, flipping key Republican seats and reshaping the future of cryptocurrency regulation, including the stalled CLARITY Act.

US midterm elections are underway with all 435 House seats and 35 Senate seats contested. Early results show Democrats leading in both chambers, which could influence stalled crypto legislation like the CLARITY Act and intensify scrutiny of Trump's crypto ventures. Crypto industry groups have spent millions on key races, including Ohio, Nebraska, Texas, Wyoming, and Maine.

Binance disclosed it detected and prevented 57 suspected North Korea-linked cyber threats in 2026, but a fake recruitment interview compromised an engineer and contributed to the $6.34 billion cryptocurrency theft on October 29, according to its November 3 security report.

US midterm elections determine whether President Donald Trump's Republican Party retains Congress, with all 435 House seats and 35 Senate seats contested. Crypto industry groups have spent approximately $176 million across more than 100 races, and results could influence stalled cryptocurrency regulation including the CLARITY Act and scrutiny of Trump's crypto ventures.

With US midterm voting underway, 1inch deputy general counsel Maylea Ma expects federal agencies—the SEC, CFTC, and Treasury—to drive crypto regulation rather than Congress, as the stalled CLARITY Act leaves policy dependent on agency guidance that future administrations can reverse, keeping institutional capital on the sidelines.