Ethereum validators captured the bulk of nearly $30 million in payments generated during the trading frenzy surrounding Binance's $6.3 billion hack.
According to an Oct. 30 investigation by Bitquery, the attackers lost approximately $119 million by exchanging stolen cryptocurrency at unfavorable prices while racing to move funds beyond the reach of stablecoin issuers.
The hurried transactions created extraordinary arbitrage opportunities, allowing trading firms and automated bots to retain approximately $60 million in profits after costs.
Another $29.5 million flowed to Ethereum block builders and validators as traders competed to exploit price differences created by the attackers' massive transactions.
Bitquery found that Ethereum block builders received 10,251 ETH in tips between 20:30 UTC on Oct. 29 and 01:00 UTC on Oct. 30, compared with just 4.6 ETH during the equivalent period the previous night.
The more than 2,200-fold increase followed aggressive cryptocurrency swaps by the hackers, who were converting stolen stablecoins and other assets into ETH and TRX before their holdings could be frozen.
On Ethereum alone, the attackers paid approximately $71.5 million above prevailing market prices to acquire ETH.
The buying pressure pushed prices in Uniswap's main WETH/USDT liquidity pool as much as 38% above the broader market, creating opportunities for arbitrage bots to purchase ETH elsewhere and sell it into the inflated pool.
However, capturing those profits required priority access to Ethereum's limited blockspace, triggering an intense bidding war among automated traders.
The competition unfolded through Ethereum's maximal extractable value (MEV) market, where traders pay specialized block builders to prioritize transactions and capture profitable trading opportunities.
Those builders subsequently bid for validators to propose their blocks, passing much of the revenue to the network participants responsible for finalizing transactions.
Bitquery's payment tracing showed that validators received approximately 11,217 ETH during the four-and-a-half-hour period, while builders retained about 564 ETH after distributing the payments, largely through Titan's relay.
Validators operating through staking services such as Lido can also distribute execution rewards to participating stakers, extending the windfall to investors securing the Ethereum network.
The frenzy also overwhelmed some trading strategies. Bitquery recorded 10,235 failed Ethereum transactions during the period, compared with approximately 3,500 the previous night, as bots paid gas fees while competing for the same opportunities.
The profit opportunities extended to other assets and blockchains.
On Tron, the hackers exchanged approximately 234 million USDT for TRX, paying $22.4 million above market prices. Traders exploiting the resulting discrepancies generated another $12.4 million before fees.
The attackers also sacrificed approximately $24.8 million by selling stolen tokens, including UNI, PEPE and ENA, below market prices.
Some arbitrage firms captured substantial gains from the discounted tokens, although the intense competition proved costly for others.
Bitquery identified a wallet associated with the prominent MEV bot jaredfromsubway that captured $2.87 million in trading discounts but paid $2.95 million in fees, leaving it with a loss of roughly $110,000.
Another unnamed bot paid $3.51 million to capture $3.24 million in trading opportunities, recording a loss of approximately $820,000.
