{ "timeline": { "title": "Binance hot-wallet hack \u2014 on-chain timeline", "generated_et": "2026-10-29 08:40 PM ET", "as_of_block": 26301992, "as_of_et": "2026-10-29 08:30 PM ET", "price_sources": { "ETH/BTC/listed tokens": "Coinbase Exchange public 5-minute candles (close of the candle containing the event)", "stablecoins": "par $1.00", "WBETH": "ETH candle x Blockscout WBETH/ETH ratio", "unlisted tokens": "Blockscout exchange_rate snapshot read ~8:00-8:30 PM ET (NOT time-of-event; flagged per row)", "ARB, TRX": "CoinGecko spot ~8:30 PM ET (approximate)" }, "confidence_levels": { "onchain_verified": "transaction or state read directly from a public node/explorer API by us", "onchain_partial": "on-chain state verified but the event time, actor or origin is inferred", "reported_only": "from public reporting/posts; not checked on-chain by us" }, "address_book": { "B14": { "address": "0x28C6c06298d514Db089934071355E5743bf21d60", "label": "Binance 14 (hot wallet)", "role": "victim" }, "B16": { "address": "0xDFd5293D8e347dFe59E90eFd55b2956a1343963d", "label": "Binance 16 (hot wallet)", "role": "victim" }, "HW34": { "address": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "label": "Binance: Hot Wallet 34 (contract wallet)", "role": "victim" }, "B8": { "address": "0xF977814e90dA44bFA03b6295A0616a897441aceC", "label": "Binance 8 / Hot Wallet 20 (Binance-held)", "role": "cex" }, "B54ARB": { "address": "0xb38e8c17e38363af6ebdcb3dae12e0243582891d", "label": "Binance 54 (Arbitrum, label reported)", "role": "victim" }, "ATK": { "address": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "role": "attacker" }, "FUND2": { "address": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "label": "Attacker gas wallet (Tornado-funded)", "role": "attacker" }, "SWP": { "address": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "label": "Sweeper contract (EIP-7702 delegate)", "role": "sweeper" }, "SWP0": { "address": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "label": "Sweeper v1 (rehearsal delegate)", "role": "sweeper" }, "T1": { "address": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "label": "Rehearsal wallet 1", "role": "rehearsal" }, "T2": { "address": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "label": "Rehearsal wallet 2", "role": "rehearsal" }, "T3": { "address": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "label": "Rehearsal wallet 3 (final sweeper test)", "role": "rehearsal" }, "TC01": { "address": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "label": "Tornado Cash 0.1 ETH pool", "role": "mixer" }, "TC1": { "address": "0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3c2936", "label": "Tornado Cash 1 ETH pool", "role": "mixer" }, "RCV": { "address": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "role": "receiver" }, "RCV2": { "address": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "label": "Fresh receiver (later sweeps)", "role": "receiver" }, "COL1": { "address": "0x8532FA14ACAf483729C449b8458aedDb900543D4", "label": "ETH collector 1 (195,460 ETH)", "role": "collector" }, "COL2": { "address": "0xc887aF690E0301CD4edBbCe8F8d31b4EC65B286A", "label": "ETH collector 2 (122,310 ETH)", "role": "collector" }, "COL3": { "address": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "label": "ETH collector 3", "role": "collector" }, "COL4": { "address": "0x54401f80Da97893a15D43566184635B6674BC942", "label": "ETH collector 4 (AAVE/RLUSD proceeds)", "role": "collector" }, "COL5": { "address": "0x79e70d139fC05AA75F75611fDF2680E9952B544A", "label": "ETH collector 5 (WBTC/USDe proceeds)", "role": "collector" }, "U9749": { "address": "0x9749292D74Fd460982d0912eA9515EA24736C762", "label": "USDT hop A (500M)", "role": "hop" }, "U0DDF": { "address": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "label": "USDT hop B (200M)", "role": "hop" }, "U8D53": { "address": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "role": "hop" }, "U77ED": { "address": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "label": "USDT hop D (7702 smart account)", "role": "hop" }, "U7AA4": { "address": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "label": "USDT hop E (7702 smart account)", "role": "hop" }, "UCCBE": { "address": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "label": "USDT hop F", "role": "hop" }, "UB171": { "address": "0xb171cA86f82070282138352Ff7111b494060c8c3", "label": "USDT hop G (30M frozen)", "role": "hop" }, "U811F": { "address": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "label": "USDT hop H", "role": "hop" }, "UAA24": { "address": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "label": "USDT hop I (175M frozen)", "role": "hop" }, "S7F9D": { "address": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "label": "Seller: ENA + WBETH", "role": "seller" }, "S600D": { "address": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "label": "Seller: PEPE", "role": "seller" }, "SCF4C": { "address": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "label": "Seller: LINK", "role": "seller" }, "S42CD": { "address": "0x42CDF00c85005630CC8605731B9364F712077810", "label": "Seller: UNI + ONDO", "role": "seller" }, "SE702": { "address": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "label": "Seller: AAVE + RLUSD", "role": "seller" }, "SB3DD": { "address": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "label": "Seller: WBTC + USDe", "role": "seller" }, "S8C71": { "address": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "label": "Seller: WLD", "role": "seller" }, "S06EA": { "address": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "label": "Seller: FUN", "role": "seller" }, "S0084": { "address": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "label": "Seller: ZAMA", "role": "seller" }, "H5C23": { "address": "0x5C23023Ca6633F91DeD909b4a753a3cA00Fea4FC", "label": "RLUSD hop", "role": "hop" }, "ARBH": { "address": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "label": "ARB hop (Arbitrum)", "role": "hop" }, "ARBX": { "address": "0x0000000000000000000000000000000000000da0", "label": "0x\u20260DA0 (no code; ARB sink, purpose unknown)", "role": "burn" }, "AAVE": { "address": "0x23878914EFE38d27C4D67Ab83ed1b93A74D4086a", "label": "Aave v3 (USDT reserve)", "role": "lending" }, "UNIV4": { "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "label": "Uniswap v4 PoolManager", "role": "dex" }, "UNIV3": { "address": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "label": "Uniswap v3 WETH/USDT pool", "role": "dex" }, "TETHER": { "address": "issuer:tether", "label": "Tether (USDT / XAUt issuer)", "role": "issuer" }, "CIRCLE": { "address": "issuer:circle", "label": "Circle (USDC issuer)", "role": "issuer" }, "WLFI": { "address": "issuer:usd1", "label": "World Liberty Financial (USD1 issuer)", "role": "issuer" }, "SNXDAO": { "address": "0xEb3107117FEAd7de89Cd14D463D340A2E6917769", "label": "Synthetix protocolDAO", "role": "issuer" }, "SANDSAFE": { "address": "0x84A917f50B16d1564D53AC85C63d7c48b645D87D", "label": "Gnosis Safe that took SAND (issuer-side, unconfirmed)", "role": "issuer" }, "NULL": { "address": "0x0000000000000000000000000000000000000000", "label": "Null address (burn)", "role": "burn" }, "TRX_SRC": { "address": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "label": "Tron hop TPBk\u2026 (created 20:44 UTC Oct 29)", "role": "hop" }, "TRX_RCV": { "address": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "label": "Tron receiver TSpe\u2026 (638.2M TRX)", "role": "receiver" }, "BTC_SRC": { "address": "btc:binance", "label": "Binance BTC hot wallets (addresses not verified)", "role": "victim" }, "BTC_RCV": { "address": "btc:attacker", "label": "Attacker BTC address(es) (not verified)", "role": "receiver" }, "POOL_PEPE": { "address": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "label": "DEX pool/router used for PEPE (PEPE / WETH)", "role": "dex" }, "POOL_UNI": { "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "label": "DEX pool/router used for UNI (PoolManager)", "role": "dex" }, "POOL_ONDO": { "address": "0x7b1E5D984A43eE732de195628d20d05CFaBc3cC7", "label": "DEX pool/router used for ONDO (UniswapV3Pool)", "role": "dex" }, "POOL_LINK": { "address": "0xa6Cc3C2531FdaA6Ae1A3CA84c2855806728693e8", "label": "DEX pool/router used for LINK (UniswapV3Pool)", "role": "dex" }, "POOL_AAVE": { "address": "0x000000000004444c5dc75cB358380D2e3dE08A90", "label": "DEX pool/router used for AAVE (PoolManager)", "role": "dex" }, "POOL_RLUSD": { "address": "0xb2983625f32BF1fc358181b3382Cb53bBd076Cd6", "label": "DEX pool/router used for RLUSD (CurveAdapter)", "role": "dex" }, "POOL_WBTC": { "address": "0x4585FE77225b41b697C938B018E2Ac67Ac5a20c0", "label": "DEX pool/router used for WBTC (UniswapV3Pool)", "role": "dex" }, "POOL_USDE": { "address": "0xE6D7EbB9f1a9519dc06D557e03C522d53520e76A", "label": "DEX pool/router used for USDE (UniswapV3Pool)", "role": "dex" }, "POOL_WLD": { "address": "0x841820459769cd629B10a36FD12E603938cc2679", "label": "DEX pool/router used for WLD (UniswapV3Pool)", "role": "dex" }, "POOL_ENA": { "address": "0x08B8cebfcA0f49A9303bab1cC4e2C25D280f2c00", "label": "DEX pool/router used for ENA (UniswapV3Pool)", "role": "dex" }, "POOL_FUN": { "address": "0x05B0c1D8839eF3a989B33B6b63D3aA96cB7Ec142", "label": "DEX pool/router used for FUN (JamUniswapV2Pair)", "role": "dex" }, "POOL_ZAMA": { "address": "0x4d68B530920D26c3b01C99fecC19e21011B72bBD", "label": "DEX pool/router used for ZAMA (UniswapV3Pool)", "role": "dex" } }, "drained_ethereum_by_asset": { "USDT": { "amount": 1875464711.065362, "usd_at_time": 1875464711 }, "USDC": { "amount": 823000000.0, "usd_at_time": 823000000 }, "ETH": { "amount": 200630.004562, "usd_at_time": 463955733 }, "RLUSD": { "amount": 88541065.479797, "usd_at_time": 88541065 }, "WBETH": { "amount": 29934.013163, "usd_at_time": 77327969 }, "XAUT": { "amount": 12574.046797, "usd_at_time": 50517993 }, "UNI": { "amount": 7018792.332153, "usd_at_time": 49592309 }, "ENA": { "amount": 218478254.431356, "usd_at_time": 44939158 }, "PEPE": { "amount": 7772977017415.967, "usd_at_time": 40104869 }, "LINK": { "amount": 2574848.151132, "usd_at_time": 29636122 }, "USD1": { "amount": 27824039.936896, "usd_at_time": 27824040 }, "AAVE": { "amount": 128034.312131, "usd_at_time": 16858467 }, "WBTC": { "amount": 167.145791, "usd_at_time": 13415300 }, "ARB (Arbitrum)": { "amount": 74559805.2, "usd_at_time": 11183151 }, "USDE": { "amount": 9707546.773205, "usd_at_time": 9707547 }, "ONDO": { "amount": 21851870.659223, "usd_at_time": 8950406 }, "PAXG": { "amount": 1906.667729, "usd_at_time": 7675629 }, "WLD": { "amount": 17317869.012724, "usd_at_time": 7138426 }, "ZAMA": { "amount": 87853170.571863, "usd_at_time": 6476463 }, "FUN": { "amount": 714911344.008378, "usd_at_time": 6237988 }, "ZRO": { "amount": 3601631.162982, "usd_at_time": 6031292 }, "RSR": { "amount": 3382160847.124631, "usd_at_time": 5282915 }, "PROM": { "amount": 911984.828175, "usd_at_time": 4979437 }, "MORPHO": { "amount": 1763059.91224, "usd_at_time": 3915908 }, "GTC": { "amount": 14457610.138737, "usd_at_time": 3487176 }, "FET": { "amount": 19791934.709436, "usd_at_time": 3460741 }, "FDUSD": { "amount": 3454894.92308, "usd_at_time": 3454895 }, "BEAM": { "amount": 984249380.289819, "usd_at_time": 3269184 }, "PENDLE": { "amount": 1682533.416435, "usd_at_time": 3199495 }, "ERA": { "amount": 38603848.935214, "usd_at_time": 2757898 }, "SAND": { "amount": 58397344.209174, "usd_at_time": 2750510 }, "CRV": { "amount": 8148735.009458, "usd_at_time": 2623893 }, "EIGEN": { "amount": 13171428.415695, "usd_at_time": 2569917 }, "WLFI": { "amount": 48525612.00768, "usd_at_time": 2468401 }, "SHIB": { "amount": 499926072560.2619, "usd_at_time": 2434502 }, "SOPH": { "amount": 1693247180.546698, "usd_at_time": 2417906 }, "NIL": { "amount": 32825145.809786, "usd_at_time": 2378871 }, "ETHFI": { "amount": 3414721.29749, "usd_at_time": 2222984 }, "LDO": { "amount": 6244624.492298, "usd_at_time": 2216342 }, "LSK": { "amount": 9258136.282411, "usd_at_time": 1728068 }, "COMP": { "amount": 82650.673659, "usd_at_time": 1724093 }, "RED": { "amount": 11955689.546252, "usd_at_time": 1688741 }, "1INCH": { "amount": 19034040.18898, "usd_at_time": 1591703 }, "SNX": { "amount": 8405741.578047, "usd_at_time": 1575009 }, "WETH": { "amount": 668.132228, "usd_at_time": 1546152 }, "LA": { "amount": 27959136.70225, "usd_at_time": 1499840 }, "OGN": { "amount": 59506795.58997, "usd_at_time": 1481921 }, "QNT": { "amount": 7492.165691, "usd_at_time": 1374962 }, "AXS": { "amount": 1547423.266454, "usd_at_time": 1332677 }, "BNB": { "amount": 1936.943327, "usd_at_time": 1323203 }, "CFG": { "amount": 12731967.064872, "usd_at_time": 1292804 }, "RE": { "amount": 3621588.724525, "usd_at_time": 1283013 }, "NMR": { "amount": 127141.454377, "usd_at_time": 1215472 }, "ENS": { "amount": 235232.05402, "usd_at_time": 1150285 }, "PHA": { "amount": 25917840.74153, "usd_at_time": 1145701 }, "G": { "amount": 324356073.899508, "usd_at_time": 1117750 }, "YFI": { "amount": 569.267763, "usd_at_time": 1115287 }, "SUPER": { "amount": 6525851.915579, "usd_at_time": 1096200 }, "CVX": { "amount": 541770.235934, "usd_at_time": 1094376 }, "RAD": { "amount": 4067615.227511, "usd_at_time": 1093460 }, "IMX": { "amount": 8212155.867146, "usd_at_time": 1073394 }, "POL": { "amount": 11583666.826755, "usd_at_time": 1037202 }, "GRT": { "amount": 49573130.666899, "usd_at_time": 1024181 }, "USDS": { "amount": 1014445.385338, "usd_at_time": 1014445 }, "APE": { "amount": 8815018.804908, "usd_at_time": 1003537 }, "SKY": { "amount": 15035753.160126, "usd_at_time": 990555 }, "PLUME": { "amount": 66315587.465925, "usd_at_time": 964463 }, "SYRUP": { "amount": 5779551.427122, "usd_at_time": 887907 }, "SENT": { "amount": 43226345.984066, "usd_at_time": 842236 }, "ENSO": { "amount": 1435185.979083, "usd_at_time": 837530 }, "STRK": { "amount": 19533842.246661, "usd_at_time": 826282 }, "XUSD": { "amount": 819820.537296, "usd_at_time": 819821 }, "FF": { "amount": 8668785.752468, "usd_at_time": 795508 }, "CAKE": { "amount": 412039.694726, "usd_at_time": 795237 }, "SYN": { "amount": 4549096.931974, "usd_at_time": 777855 }, "CVC": { "amount": 33729589.291345, "usd_at_time": 762398 }, "ALLO": { "amount": 4415109.122625, "usd_at_time": 758979 }, "AVA": { "amount": 2245820.368297, "usd_at_time": 720875 }, "MANA": { "amount": 9948846.967614, "usd_at_time": 720157 }, "REZ": { "amount": 175256822.727546, "usd_at_time": 702210 }, "PROVE": { "amount": 3682597.756009, "usd_at_time": 701719 }, "OPEN": { "amount": 7895462.60642, "usd_at_time": 683021 }, "COW": { "amount": 5577737.823631, "usd_at_time": 668548 }, "TRB": { "amount": 41430.736795, "usd_at_time": 664135 }, "T": { "amount": 144744242.429048, "usd_at_time": 663137 }, "COTI": { "amount": 68849376.0119, "usd_at_time": 661382 }, "EUL": { "amount": 577306.133908, "usd_at_time": 658129 }, "KITE": { "amount": 6128949.713898, "usd_at_time": 657753 }, "JASMY": { "amount": 169179360.868545, "usd_at_time": 629882 }, "ZBT": { "amount": 9084893.037272, "usd_at_time": 620853 }, "AUCTION": { "amount": 189167.364355, "usd_at_time": 611011 }, "ARKM": { "amount": 5548456.295287, "usd_at_time": 608888 }, "ZKC": { "amount": 19655868.682776, "usd_at_time": 604085 }, "VIRTUAL": { "amount": 1004841.40834, "usd_at_time": 578563 }, "BUSD": { "amount": 572671.58168, "usd_at_time": 576680 }, "SPK": { "amount": 32742577.684657, "usd_at_time": 570730 }, "QKC": { "amount": 233423825.915538, "usd_at_time": 556854 }, "API3": { "amount": 2316857.086362, "usd_at_time": 555358 }, "HYPER": { "amount": 9357617.361507, "usd_at_time": 550808 }, "BBTC": { "amount": 6.903604, "usd_at_time": 545160 }, "MASK": { "amount": 1414407.00647, "usd_at_time": 530166 }, "ANKR": { "amount": 137925400.509923, "usd_at_time": 522104 }, "YGG": { "amount": 22504195.583921, "usd_at_time": 521575 }, "SAHARA": { "amount": 69818796.334061, "usd_at_time": 517269 }, "ENJ": { "amount": 21699453.581451, "usd_at_time": 508510 }, "BAT": { "amount": 3891717.977986, "usd_at_time": 499304 }, "DENT": { "amount": 10388488013.677933, "usd_at_time": 498128 }, "BIO": { "amount": 23360159.436332, "usd_at_time": 491952 }, "CYBER": { "amount": 1756591.729059, "usd_at_time": 489134 }, "AXL": { "amount": 10698949.652513, "usd_at_time": 469896 }, "EDEN": { "amount": 9132215.460444, "usd_at_time": 460108 }, "TREE": { "amount": 13132303.134275, "usd_at_time": 457845 }, "GALA": { "amount": 283007878.565433, "usd_at_time": 457731 }, "OCEAN": { "amount": 3361445.54921, "usd_at_time": 432252 }, "BIGTIME": { "amount": 64529969.29406, "usd_at_time": 422593 }, "ZKP": { "amount": 9952162.817816, "usd_at_time": 404766 }, "ROBO": { "amount": 78394794.248293, "usd_at_time": 401228 }, "NEXO": { "amount": 493107.152067, "usd_at_time": 387658 }, "AUDIO": { "amount": 27409671.117811, "usd_at_time": 378225 }, "PUNDIX": { "amount": 3747276.772055, "usd_at_time": 369478 }, "NEIRO": { "amount": 5728860425.548047, "usd_at_time": 362007 }, "CTSI": { "amount": 13881367.016866, "usd_at_time": 362001 }, "SLP": { "amount": 717109038.0, "usd_at_time": 358619 }, "BLUR": { "amount": 47064683.359366, "usd_at_time": 356603 }, "AGLD": { "amount": 2047684.985972, "usd_at_time": 354716 }, "ALICE": { "amount": 2762281.144454, "usd_at_time": 352754 }, "KERNEL": { "amount": 7573562.944217, "usd_at_time": 341359 }, "NEWT": { "amount": 8002418.781019, "usd_at_time": 338425 }, "SUSHI": { "amount": 1748617.358471, "usd_at_time": 335911 }, "BARD": { "amount": 3102719.86472, "usd_at_time": 331923 }, "AMP": { "amount": 495668535.34477, "usd_at_time": 327290 }, "WOO": { "amount": 31654227.742415, "usd_at_time": 315211 }, "BREV": { "amount": 3920273.740864, "usd_at_time": 314986 }, "ANIME": { "amount": 111178556.75027, "usd_at_time": 300623 }, "RARE": { "amount": 25997401.95856, "usd_at_time": 298842 }, "GLM": { "amount": 2852017.493649, "usd_at_time": 292372 }, "F": { "amount": 103201398.159479, "usd_at_time": 289797 }, "IDRT": { "amount": 5549598659.9, "usd_at_time": 288968 }, "ARPA": { "amount": 31465116.183347, "usd_at_time": 288716 }, "MDT": { "amount": 47126774.288844, "usd_at_time": 280192 }, "TURBO": { "amount": 363402600.65845, "usd_at_time": 279933 }, "ID": { "amount": 9532239.919172, "usd_at_time": 276854 }, "EPIC": { "amount": 2651242.689543, "usd_at_time": 268409 }, "CHZ": { "amount": 21956415.285051, "usd_at_time": 265235 }, "POND": { "amount": 171041883.011701, "usd_at_time": 251445 }, "SXT": { "amount": 32050145.047414, "usd_at_time": 251357 }, "HEI": { "amount": 2575357.566555, "usd_at_time": 246475 }, "POWR": { "amount": 4543599.805451, "usd_at_time": 241002 }, "RLC": { "amount": 484884.123389, "usd_at_time": 235476 }, "ESP": { "amount": 2936523.547424, "usd_at_time": 232370 }, "SSV": { "amount": 96402.947111, "usd_at_time": 225583 }, "SKL": { "amount": 58207810.202832, "usd_at_time": 221692 }, "SOLV": { "amount": 47352437.818575, "usd_at_time": 216806 }, "USDP": { "amount": 215657.653864, "usd_at_time": 215658 }, "ZRX": { "amount": 2086691.149086, "usd_at_time": 199632 }, "SHELL": { "amount": 8562488.319553, "usd_at_time": 196494 }, "ACH": { "amount": 40687129.218269, "usd_at_time": 187721 }, "DEXE": { "amount": 127565.27091, "usd_at_time": 186245 }, "DUSK": { "amount": 1892761.951108, "usd_at_time": 181194 }, "FARM": { "amount": 25396.383485, "usd_at_time": 181076 }, "NOM": { "amount": 113468436.681618, "usd_at_time": 177274 }, "DIA": { "amount": 1308353.910618, "usd_at_time": 167260 }, "SPELL": { "amount": 2109125003.337986, "usd_at_time": 160736 }, "KNC": { "amount": 1410169.418783, "usd_at_time": 159428 }, "BICO": { "amount": 9945183.187739, "usd_at_time": 158594 }, "PORTAL": { "amount": 12430758.721026, "usd_at_time": 157699 }, "HEMI": { "amount": 35881718.289972, "usd_at_time": 157043 }, "ILV": { "amount": 54450.269843, "usd_at_time": 156817 }, "DODO": { "amount": 6392316.351923, "usd_at_time": 156203 }, "UMA": { "amount": 462485.001205, "usd_at_time": 152709 }, "IQ": { "amount": 200430507.465935, "usd_at_time": 149377 }, "ACX": { "amount": 3300339.795052, "usd_at_time": 148582 }, "WXRP": { "amount": 102229.068963, "usd_at_time": 145165 }, "AI": { "amount": 7386003.498586, "usd_at_time": 126918 }, "EURI": { "amount": 113015.433439, "usd_at_time": 126577 }, "HIGH": { "amount": 4921282.174516, "usd_at_time": 125811 }, "TLM": { "amount": 114334242.0459, "usd_at_time": 123683 }, "DOLO": { "amount": 5376971.899108, "usd_at_time": 121676 }, "MEME": { "amount": 273907172.962524, "usd_at_time": 119539 }, "SIGN": { "amount": 11146152.946973, "usd_at_time": 113767 }, "CELR": { "amount": 48991018.872908, "usd_at_time": 113251 }, "DAR": { "amount": 3530547.655329, "usd_at_time": 111343 }, "RESOLV": { "amount": 7175469.04206, "usd_at_time": 110798 }, "LQTY": { "amount": 580061.55028, "usd_at_time": 104950 }, "TURTLE": { "amount": 3155489.861599, "usd_at_time": 104562 }, "HOT": { "amount": 314140554.859634, "usd_at_time": 103409 }, "FTT": { "amount": 445292.366341, "usd_at_time": 103176 } }, "frozen_verified": { "USDT": 1380464583.4099998, "USDC": 823000000.0, "XAUt": 12574 }, "sold_on_dex": { "PEPE": { "amount": 7772977017415.968, "received": 7772977017415.968, "usd": 35056126.34854601, "done": true }, "UNI": { "amount": 7018792.33215254, "received": 7018792.33215254, "usd": 45152273.91595541, "done": true }, "ONDO": { "amount": 21851870.65, "received": 21851870.65, "usd": 8319881.231281, "done": true }, "LINK": { "amount": 2568257.37, "received": 2568257.37, "usd": 27390750.212980002, "done": true }, "AAVE": { "amount": 127952.74, "received": 127952.74, "usd": 15553935.0744, "done": true }, "RLUSD": { "amount": 48000000.0, "received": 88541065.0, "usd": 48000000.0, "done": false }, "WBTC": { "amount": 167.14, "received": 167.14, "usd": 13180440.610899998, "done": true }, "USDE": { "amount": 1568475.0060836868, "received": 9707546.77, "usd": 1568475.0060836868, "done": false }, "WLD": { "amount": 17317869.01, "received": 17317869.01, "usd": 6634908.5644562505, "done": true }, "ENA": { "amount": 132931686.20169264, "received": 217497348.01079366, "usd": 23240446.698641926, "done": false }, "FUN": { "amount": 15375007.63632895, "received": 714911344.0, "usd": 134155.24413109373, "done": false }, "ZAMA": { "amount": 34523185.428966925, "received": 87853170.57, "usd": 2121449.7446100176, "done": false } }, "attacker_eth_held_now": { "0x8532FA14ACAf483729C449b8458aedDb900543D4": 195460.00320812868, "0xc887aF690E0301CD4edBbCe8F8d31b4EC65B286A": 122310.00053931857, "0x897C80d1a9729E94460e2Bd93178bD5215158DF3": 78415.25130735844, "0x54401f80Da97893a15D43566184635B6674BC942": 26825.0, "0x79e70d139fC05AA75F75611fDF2680E9952B544A": 5700.0, "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c": 2071.4012901839233, "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3": 9346.360513942294, "0x600d6F00eadAbDb514561Ceeb43730a7103e8298": 14049.916157000753, "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0": 11560.9242426874, "0x8c7111E9a3270457B76f0Bd137209089047a6aa4": 2726.297586363814, "0x0084847BB9384D2fc5E8836E663689467E3e4C81": 805.347782656254, "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB": 429.9210615628131, "0xa97bf7836f8a08f9ed91d41453d371493fae8d10": 3090.4019601503605, "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f": 39.773764083452505, "0x7C8601d4645b93cea45F71e118A729332e6B5CA0": 1.174424367551333 }, "eth_price_now": 2205.18, "events": [ { "unix": 1793173187, "t_utc": "2026-10-28T07:39:47Z", "t_et": "2026-10-28 03:39:47 AM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Tornado Cash withdrawal funds the attacker", "description": "The attacker wallet receives 0.0983 ETH from the Tornado Cash 0.1 ETH pool (a mixer that hides where money came from).", "from": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "from_label": "Tornado Cash 0.1 ETH pool", "to": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "to_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "token": "ETH", "amount": 0.09825699656315, "usd_at_time": 231, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26289786, "tx": "0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008", "tx_url": "https://etherscan.io/tx/0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TC01", "to_key": "ATK", "id": "E001", "seq": 1 }, { "unix": 1793177639, "t_utc": "2026-10-28T08:53:59Z", "t_et": "2026-10-28 04:53:59 AM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Tornado Cash withdrawal funds the attacker", "description": "The attacker wallet receives 0.0979 ETH from the Tornado Cash 0.1 ETH pool (a mixer that hides where money came from).", "from": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "from_label": "Tornado Cash 0.1 ETH pool", "to": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "to_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "token": "ETH", "amount": 0.09789260928915, "usd_at_time": 231, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26290156, "tx": "0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a", "tx_url": "https://etherscan.io/tx/0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TC01", "to_key": "ATK", "id": "E002", "seq": 2 }, { "unix": 1793240939, "t_utc": "2026-10-29T02:28:59Z", "t_et": "2026-10-28 10:28:59 PM ET", "chain": "ethereum", "type": "prep_deploy", "confidence": "onchain_verified", "title": "Attacker deploys sweeper v1 (rehearsal contract)", "description": "The attacker creates contract 0x19be\u2026f2bf. It is later used as the delegate in two rehearsal wallets.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "to_label": "Sweeper v1 (rehearsal delegate)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26295416, "tx": "0x6b76e8748ba1c6bc81e674c830a0b3603db6bde04ec4bd4a2d3126c1a12706d8", "tx_url": "https://etherscan.io/tx/0x6b76e8748ba1c6bc81e674c830a0b3603db6bde04ec4bd4a2d3126c1a12706d8", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x6b76e8748ba1c6bc81e674c830a0b3603db6bde04ec4bd4a2d3126c1a12706d8" ], "from_key": "ATK", "to_key": "SWP0", "id": "E003", "seq": 3 }, { "unix": 1793257715, "t_utc": "2026-10-29T07:08:35Z", "t_et": "2026-10-29 03:08:35 AM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Tornado Cash withdrawal funds a second attacker wallet", "description": "Gas wallet 0xe4F9\u202674cd receives 0.0979 ETH from the Tornado Cash 0.1 ETH pool. It later pays for the rehearsal and tops up the attacker.", "from": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "from_label": "Tornado Cash 0.1 ETH pool", "to": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "to_label": "Attacker gas wallet (Tornado-funded)", "token": "ETH", "amount": 0.09794177986075, "usd_at_time": 226, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26296803, "tx": "0x976630d1104ef15d6ab65a0a93f64014a92e0606fb109ec907f94004934707b6", "tx_url": "https://etherscan.io/tx/0x976630d1104ef15d6ab65a0a93f64014a92e0606fb109ec907f94004934707b6", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x976630d1104ef15d6ab65a0a93f64014a92e0606fb109ec907f94004934707b6" ], "from_key": "TC01", "to_key": "FUND2", "id": "E004", "seq": 4 }, { "unix": 1793262191, "t_utc": "2026-10-29T08:23:11Z", "t_et": "2026-10-29 04:23:11 AM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Tornado Cash withdrawal funds the attacker", "description": "The attacker wallet receives 0.0979 ETH from the Tornado Cash 0.1 ETH pool (a mixer that hides where money came from).", "from": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "from_label": "Tornado Cash 0.1 ETH pool", "to": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "to_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "token": "ETH", "amount": 0.09794285280185, "usd_at_time": 227, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26297174, "tx": "0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae", "tx_url": "https://etherscan.io/tx/0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TC01", "to_key": "ATK", "id": "E005", "seq": 5 }, { "unix": 1793281895, "t_utc": "2026-10-29T13:51:35Z", "t_et": "2026-10-29 09:51:35 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal: EIP-7702 delegation on rehearsal wallet 1", "description": "The attacker installs sweeper v1 as the delegate on a throwaway wallet it controls, testing the same trick later used on Binance 14. EIP-7702 is an Ethereum upgrade that lets an ordinary wallet run contract code.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "to_label": "Rehearsal wallet 1", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26298811, "tx": "0x16b5acc35a82d194aadb21a4a56d666310fe83982c387c974f4796275f499dca", "tx_url": "https://etherscan.io/tx/0x16b5acc35a82d194aadb21a4a56d666310fe83982c387c974f4796275f499dca", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x16b5acc35a82d194aadb21a4a56d666310fe83982c387c974f4796275f499dca" ], "from_key": "ATK", "to_key": "T1", "delegate": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "id": "E006", "seq": 6 }, { "unix": 1793281919, "t_utc": "2026-10-29T13:51:59Z", "t_et": "2026-10-29 09:51:59 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal: EIP-7702 delegation on rehearsal wallet 2", "description": "The attacker installs sweeper v1 as the delegate on a throwaway wallet it controls, testing the same trick later used on Binance 14. EIP-7702 is an Ethereum upgrade that lets an ordinary wallet run contract code.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "to_label": "Rehearsal wallet 2", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26298813, "tx": "0xec5af21dc34fc8a3ac131f694aa0df5b27c0525ea3a71d97daa7e597abcb21d9", "tx_url": "https://etherscan.io/tx/0xec5af21dc34fc8a3ac131f694aa0df5b27c0525ea3a71d97daa7e597abcb21d9", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xec5af21dc34fc8a3ac131f694aa0df5b27c0525ea3a71d97daa7e597abcb21d9" ], "from_key": "ATK", "to_key": "T2", "delegate": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "id": "E007", "seq": 7 }, { "unix": 1793282231, "t_utc": "2026-10-29T13:57:11Z", "t_et": "2026-10-29 09:57:11 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal wallet funded", "description": "Rehearsal wallet 1 receives 0.001 ETH of test money from 0xFD41dA53D1175b29D40599A0e63545067F58f408.", "from": "0xFD41dA53D1175b29D40599A0e63545067F58f408", "from_label": null, "to": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "to_label": "Rehearsal wallet 1", "token": "ETH", "amount": 0.001, "usd_at_time": null, "price_source": null, "block": 26298839, "tx": "0x4e4e44a38920677f26ca61678e8e783b54bca30ece2c0ff7aeb9b27aeeb0f9fb", "tx_url": "https://etherscan.io/tx/0x4e4e44a38920677f26ca61678e8e783b54bca30ece2c0ff7aeb9b27aeeb0f9fb", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x4e4e44a38920677f26ca61678e8e783b54bca30ece2c0ff7aeb9b27aeeb0f9fb" ], "from_key": null, "to_key": "T1", "id": "E008", "seq": 8 }, { "unix": 1793282279, "t_utc": "2026-10-29T13:57:59Z", "t_et": "2026-10-29 09:57:59 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal wallet funded", "description": "Rehearsal wallet 2 receives 0.002 ETH of test money from 0xFD41dA53D1175b29D40599A0e63545067F58f408.", "from": "0xFD41dA53D1175b29D40599A0e63545067F58f408", "from_label": null, "to": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "to_label": "Rehearsal wallet 2", "token": "ETH", "amount": 0.002, "usd_at_time": null, "price_source": null, "block": 26298843, "tx": "0x87add0f97fe300d9a1da69a0900ce2c0976cec8f2e32aa5f90ae17a4cadaba00", "tx_url": "https://etherscan.io/tx/0x87add0f97fe300d9a1da69a0900ce2c0976cec8f2e32aa5f90ae17a4cadaba00", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x87add0f97fe300d9a1da69a0900ce2c0976cec8f2e32aa5f90ae17a4cadaba00" ], "from_key": null, "to_key": "T2", "id": "E009", "seq": 9 }, { "unix": 1793283599, "t_utc": "2026-10-29T14:19:59Z", "t_et": "2026-10-29 10:19:59 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal sweep", "description": "The attacker calls the sweep function (selector 0x8a179be4) on rehearsal wallet 1; it checks USDT, USDC and DAI balances, the same pattern as the real drain.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "to_label": "Rehearsal wallet 1", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26298953, "tx": "0xa2e0cd4123cf4463cf43685232142d680e9994f5bd29f0540bf977a158216c4c", "tx_url": "https://etherscan.io/tx/0xa2e0cd4123cf4463cf43685232142d680e9994f5bd29f0540bf977a158216c4c", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xa2e0cd4123cf4463cf43685232142d680e9994f5bd29f0540bf977a158216c4c" ], "from_key": "ATK", "to_key": "T1", "id": "E010", "seq": 10 }, { "unix": 1793283851, "t_utc": "2026-10-29T14:24:11Z", "t_et": "2026-10-29 10:24:11 AM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal sweep", "description": "The attacker calls the sweep function (selector 0x8a179be4) on rehearsal wallet 2; it checks USDT, USDC and DAI balances, the same pattern as the real drain.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "to_label": "Rehearsal wallet 2", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26298974, "tx": "0x6aaae5bcb5e0bafd1e79e70670864f8f726624d50d99d16152c5e684f571ddf4", "tx_url": "https://etherscan.io/tx/0x6aaae5bcb5e0bafd1e79e70670864f8f726624d50d99d16152c5e684f571ddf4", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x6aaae5bcb5e0bafd1e79e70670864f8f726624d50d99d16152c5e684f571ddf4" ], "from_key": "ATK", "to_key": "T2", "id": "E011", "seq": 11 }, { "unix": 1793285687, "t_utc": "2026-10-29T14:54:47Z", "t_et": "2026-10-29 10:54:47 AM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Tornado Cash withdrawal funds a second attacker wallet", "description": "Gas wallet 0xe4F9\u202674cd receives 0.9944 ETH from the Tornado Cash 1 ETH pool. It later pays for the rehearsal and tops up the attacker.", "from": "0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3c2936", "from_label": "Tornado Cash 1 ETH pool", "to": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "to_label": "Attacker gas wallet (Tornado-funded)", "token": "ETH", "amount": 0.994396360882, "usd_at_time": 2328, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26299127, "tx": "0xf18e081599b0059de76a02f0013f51b053e4bd6916e959a6ed1fd3a58cd4cbc1", "tx_url": "https://etherscan.io/tx/0xf18e081599b0059de76a02f0013f51b053e4bd6916e959a6ed1fd3a58cd4cbc1", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xf18e081599b0059de76a02f0013f51b053e4bd6916e959a6ed1fd3a58cd4cbc1" ], "from_key": "TC1", "to_key": "FUND2", "id": "E012", "seq": 12 }, { "unix": 1793289551, "t_utc": "2026-10-29T15:59:11Z", "t_et": "2026-10-29 11:59:11 AM ET", "chain": "ethereum", "type": "prep_deploy", "confidence": "onchain_verified", "title": "Attacker deploys the final sweeper contract", "description": "Contract 0x63e8\u20266fAe is created by the attacker. Its source code is not published. This is the code Binance 14 is later delegated to.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "to_label": "Sweeper contract (EIP-7702 delegate)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26299449, "tx": "0x97408e7562eb2b28efcd24ba01609607b5749bc89448d007fa8b50ecf290329c", "tx_url": "https://etherscan.io/tx/0x97408e7562eb2b28efcd24ba01609607b5749bc89448d007fa8b50ecf290329c", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x97408e7562eb2b28efcd24ba01609607b5749bc89448d007fa8b50ecf290329c", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "ATK", "to_key": "SWP", "id": "E013", "seq": 13 }, { "unix": 1793290847, "t_utc": "2026-10-29T16:20:47Z", "t_et": "2026-10-29 12:20:47 PM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal: delegation to the final sweeper", "description": "The attacker delegates a third throwaway wallet to the final sweeper 0x63e8\u20266fAe.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "to_label": "Rehearsal wallet 3 (final sweeper test)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26299557, "tx": "0xb2148eb825cac75efe0ae7fb5c319e6b66df62631738ba252185960e50dc5782", "tx_url": "https://etherscan.io/tx/0xb2148eb825cac75efe0ae7fb5c319e6b66df62631738ba252185960e50dc5782", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xb2148eb825cac75efe0ae7fb5c319e6b66df62631738ba252185960e50dc5782" ], "from_key": "ATK", "to_key": "T3", "delegate": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "id": "E014", "seq": 14 }, { "unix": 1793291051, "t_utc": "2026-10-29T16:24:11Z", "t_et": "2026-10-29 12:24:11 PM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal wallet loaded with 1.01 ETH", "description": "The gas wallet sends 1.01 ETH into rehearsal wallet 3.", "from": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "from_label": "Attacker gas wallet (Tornado-funded)", "to": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "to_label": "Rehearsal wallet 3 (final sweeper test)", "token": "ETH", "amount": 1.01, "usd_at_time": 2379, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26299574, "tx": "0xfd3f9dd90ff7b7b5a3f5b9abed20afc3ac517f74d0f5edf3e77b2ecd9d9917cd", "tx_url": "https://etherscan.io/tx/0xfd3f9dd90ff7b7b5a3f5b9abed20afc3ac517f74d0f5edf3e77b2ecd9d9917cd", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xfd3f9dd90ff7b7b5a3f5b9abed20afc3ac517f74d0f5edf3e77b2ecd9d9917cd" ], "from_key": "FUND2", "to_key": "T3", "id": "E015", "seq": 15 }, { "unix": 1793291159, "t_utc": "2026-10-29T16:25:59Z", "t_et": "2026-10-29 12:25:59 PM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal: delegation to the final sweeper", "description": "The attacker delegates a third throwaway wallet to the final sweeper 0x63e8\u20266fAe.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "to_label": "Rehearsal wallet 3 (final sweeper test)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26299583, "tx": "0x7c5206cb7aa77ce5b54f030e94ad127af0184e856689526602ffcd21a238e95d", "tx_url": "https://etherscan.io/tx/0x7c5206cb7aa77ce5b54f030e94ad127af0184e856689526602ffcd21a238e95d", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x7c5206cb7aa77ce5b54f030e94ad127af0184e856689526602ffcd21a238e95d" ], "from_key": "ATK", "to_key": "T3", "delegate": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "id": "E016", "seq": 16 }, { "unix": 1793291411, "t_utc": "2026-10-29T16:30:11Z", "t_et": "2026-10-29 12:30:11 PM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal sweep through the final sweeper", "description": "The sweep function runs on rehearsal wallet 3 and touches USDT, USDC and DAI.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "to_label": "Rehearsal wallet 3 (final sweeper test)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26299604, "tx": "0x9c2dbed15322072e35e767c0c9b4cd962abf58fe51937e62a7020c742b834f2f", "tx_url": "https://etherscan.io/tx/0x9c2dbed15322072e35e767c0c9b4cd962abf58fe51937e62a7020c742b834f2f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x9c2dbed15322072e35e767c0c9b4cd962abf58fe51937e62a7020c742b834f2f" ], "from_key": "ATK", "to_key": "T3", "id": "E017", "seq": 17 }, { "unix": 1793292443, "t_utc": "2026-10-29T16:47:23Z", "t_et": "2026-10-29 12:47:23 PM ET", "chain": "ethereum", "type": "prep_rehearsal", "confidence": "onchain_verified", "title": "Rehearsal ETH pulled back out", "description": "A withdraw call on the sweeper returns 1 ETH from rehearsal wallet 3 to the gas wallet: the ETH-exit path works.", "from": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "from_label": "Rehearsal wallet 3 (final sweeper test)", "to": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "to_label": "Attacker gas wallet (Tornado-funded)", "token": "ETH", "amount": 1.0, "usd_at_time": null, "price_source": null, "block": 26299690, "tx": "0x2b8eb62a32408e96bd7cb6740ede11a054549581534de5d5111289c47355f58f", "tx_url": "https://etherscan.io/tx/0x2b8eb62a32408e96bd7cb6740ede11a054549581534de5d5111289c47355f58f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x2b8eb62a32408e96bd7cb6740ede11a054549581534de5d5111289c47355f58f" ], "from_key": "T3", "to_key": "FUND2", "id": "E018", "seq": 18 }, { "unix": 1793298047, "t_utc": "2026-10-29T18:20:47Z", "t_et": "2026-10-29 02:20:47 PM ET", "chain": "ethereum", "type": "prep_funding", "confidence": "onchain_verified", "title": "Gas wallet tops up the attacker", "description": "0xe4F9\u202674cd sends 1.082 ETH to the attacker for gas, two hours before the attack.", "from": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "from_label": "Attacker gas wallet (Tornado-funded)", "to": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "to_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "token": "ETH", "amount": 1.082218220676984, "usd_at_time": 2528, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26300155, "tx": "0x96cae1ec044b4b3e34c1f2113a7bcd1b0d3257370788f5d8a2b91e9c99c0ebe5", "tx_url": "https://etherscan.io/tx/0x96cae1ec044b4b3e34c1f2113a7bcd1b0d3257370788f5d8a2b91e9c99c0ebe5", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x96cae1ec044b4b3e34c1f2113a7bcd1b0d3257370788f5d8a2b91e9c99c0ebe5" ], "from_key": "FUND2", "to_key": "ATK", "id": "E019", "seq": 19 }, { "unix": 1793305259, "t_utc": "2026-10-29T20:20:59Z", "t_et": "2026-10-29 04:20:59 PM ET", "chain": "ethereum", "type": "delegation", "confidence": "onchain_verified", "title": "Binance 14 is delegated to the attacker's sweeper (EIP-7702)", "description": "The attacker submits a type-4 transaction carrying 50 authorizations signed by Binance 14's key, for account nonces 18,914,775\u201318,914,824. Only nonce 18,914,809 matched, and it installed sweeper 0x63e8\u20266fAe as Binance 14's code. Pre-signing a range of nonces is how you hit a moving target on a wallet that sends constantly. How the attacker obtained signatures from Binance's key is not known.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x28C6c06298d514Db089934071355E5743bf21d60", "to_label": "Binance 14 (hot wallet)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26300753, "tx": "0xad99264d5532ae0dd04b2004eebda05f25657e70dacb764f7ac8d4ccd051298b", "tx_url": "https://etherscan.io/tx/0xad99264d5532ae0dd04b2004eebda05f25657e70dacb764f7ac8d4ccd051298b", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xad99264d5532ae0dd04b2004eebda05f25657e70dacb764f7ac8d4ccd051298b", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto" ], "from_key": "ATK", "to_key": "B14", "delegate": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "authorizations": 50, "nonce_range": [ 18914775, 18914824 ], "valid_nonce": 18914809, "id": "E020", "seq": 20 }, { "unix": 1793305463, "t_utc": "2026-10-29T20:24:23Z", "t_et": "2026-10-29 04:24:23 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #1: Binance 14 swept to the main receiver", "description": "The attacker calls sweep() on Binance 14, which now runs the sweeper's code. It sends 167,464.25 ETH and 63 tokens (1,615,409,499 USDT, 29,934 WBETH, 62,597,240 RLUSD, 11,372 XAUT, 6,189,796 UNI, 198,369,717 ENA) to main receiver (\"binance hot wallet exploiter 2\"). Value at the time: $2,529.3M.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "ETH+tokens", "amount": 167464.24785655882, "usd_at_time": 2529293143, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26300770, "tx": "0x53bd38b816c23e74134786c29a8c18d792777998a3b9326047b583100e88e2f3", "tx_url": "https://etherscan.io/tx/0x53bd38b816c23e74134786c29a8c18d792777998a3b9326047b583100e88e2f3", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x53bd38b816c23e74134786c29a8c18d792777998a3b9326047b583100e88e2f3", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "RCV", "eth": 167464.24785655882, "token_breakdown": [ { "symbol": "USDT", "token": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "amount": 1615409498.97324, "usd": 1615409498.97324, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "RLUSD", "token": "0x8292Bb45bf1Ee4d140127049757C2E0fF06317eD", "amount": 62597239.679797046, "usd": 62597239.679797046, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "WBETH", "token": "0xa2E3356610840701BDf5611a53974510Ae27E2e1", "amount": 29934.01316314602, "usd": 77327969.01417188, "price_source": "Coinbase ETH-USD 5-min close x WBETH/ETH ratio (Blockscout)" }, { "symbol": "XAUT", "token": "0x68749665FF8D2d112Fa859AA293F07A622782F38", "amount": 11372.474505, "usd": 45690508.4702682, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "UNI", "token": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "amount": 6189795.754065382, "usd": 43738334.757376805, "price_source": "Coinbase UNI-USD 5-min candle close" }, { "symbol": "USD1", "token": "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", "amount": 27760801.816896472, "usd": 27760801.816896472, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "ENA", "token": "0x57e114B691Db790C35207b2e685D4A43181e6061", "amount": 198369716.75050876, "usd": 40830438.79875722, "price_source": "Coinbase ENA-USD 5-min candle close" }, { "symbol": "PEPE", "token": "0x6982508145454Ce325dDbE47a25d4ec3d2311933", "amount": 7175249471426.366, "usd": 37024287.272560045, "price_source": "Coinbase PEPE-USD 5-min candle close" }, { "symbol": "LINK", "token": "0x514910771AF9Ca656af840dff83E8264EcF986CA", "amount": 2263172.0827156613, "usd": 26051373.844139975, "price_source": "Coinbase LINK-USD 5-min candle close" }, { "symbol": "AAVE", "token": "0x7Fc66500c84A76Ad7e9c93437bFc5Ac33E2DDaE9", "amount": 127853.35898055628, "usd": 16835730.310559653, "price_source": "Coinbase AAVE-USD 5-min candle close" }, { "symbol": "USDE", "token": "0x4c9EDD5852cd905f086C759E8383e09bff1E68B3", "amount": 9707546.773204599, "usd": 9707546.773204599, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "ONDO", "token": "0xfAbA6f8e4a5E8Ab82F62fe7C39859FA577269BE3", "amount": 21844883.65922251, "usd": 8947664.34681754, "price_source": "Coinbase ONDO-USD 5-min candle close" }, { "symbol": "PAXG", "token": "0x45804880De22913dAFE09f4980848ECE6EcbAf78", "amount": 1898.4733148426897, "usd": 7642721.993028512, "price_source": "Coinbase PAXG-USD 5-min candle close" }, { "symbol": "WLD", "token": "0x163f8C2467924be0ae7B5347228CABF260318753", "amount": 17317869.012723826, "usd": 7138425.607044761, "price_source": "Coinbase WLD-USD 5-min candle close" }, { "symbol": "ZAMA", "token": "0xA12CC123ba206d4031D1c7f6223D1C2Ec249f4f3", "amount": 87536535.4791311, "usd": 6454944.126231127, "price_source": "Coinbase ZAMA-USD 5-min candle close" }, { "symbol": "FUN", "token": "0x419D0d8BdD9aF5e606Ae2232ed285Aff190E711b", "amount": 714911344.0083776, "usd": 6237987.528598859, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ZRO", "token": "0x6985884C4392D348587B19cb9eAAf157F13271cd", "amount": 3601631.162981805, "usd": 6031291.545529331, "price_source": "Coinbase ZRO-USD 5-min candle close" }, { "symbol": "RSR", "token": "0x320623b8E4fF03373931769A31Fc52A4E78B5d70", "amount": 3381874989.7747593, "usd": 5282488.734028175, "price_source": "Coinbase RSR-USD 5-min candle close" }, { "symbol": "PROM", "token": "0xfc82bb4ba86045Af6F327323a46E80412b91b27d", "amount": 911917.5662231178, "usd": 4979069.911578223, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WBTC", "token": "0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599", "amount": 82.54351401, "usd": 6625105.0451652, "price_source": "Coinbase BTC-USD 5-min candle close" }, { "symbol": "MORPHO", "token": "0x58D97B57BB95320F9a05dC918Aef65434969c2B2", "amount": 1762717.6737027296, "usd": 3915172.2250611326, "price_source": "Coinbase MORPHO-USD 5-min candle close" }, { "symbol": "GTC", "token": "0xDe30da39c46104798bB5aA3fe8B9e0e1F348163F", "amount": 14457610.138737494, "usd": 3487175.5654634833, "price_source": "Coinbase GTC-USD 5-min candle close" }, { "symbol": "FDUSD", "token": "0xc5f0f7b66764F6ec8C8Dff7BA683102295E16409", "amount": 3454894.9230800183, "usd": 3454894.9230800183, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "FET", "token": "0xaea46A60368A7bD060eec7DF8CBa43b7EF41Ad85", "amount": 19393579.709435716, "usd": 3395040.0639338163, "price_source": "Coinbase FET-USD 5-min candle close" }, { "symbol": "BEAM", "token": "0x62D0A8458eD7719FDAF978fe5929C6D342B0bFcE", "amount": 984249380.2898186, "usd": 3269184.3166326326, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PENDLE", "token": "0x808507121B80c02388fAd14726482e061B8da827", "amount": 1680932.636002673, "usd": 3196629.593886283, "price_source": "Coinbase PENDLE-USD 5-min candle close" }, { "symbol": "ERA", "token": "0xE2AD0BF751834f2fbdC62A41014f84d67cA1de2A", "amount": 38603848.93521382, "usd": 2757897.571780611, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SAND", "token": "0x3845badAde8e6dFF049820680d1F14bD3903a5d0", "amount": 58394929.20917366, "usd": 2750401.1657520793, "price_source": "Coinbase SAND-USD 5-min candle close" }, { "symbol": "QNT", "token": "0x4a220E6096B25EADb88358cb44068A3248254675", "amount": 6902.0135221360615, "usd": 1266657.52158241, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WLFI", "token": "0xdA5e1988097297dCdc1f90D4dFE7909e847CBeF6", "amount": 48525612.00768024, "usd": 2468400.831606678, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EIGEN", "token": "0xec53bF9167f50cDEB3Ae105f56099aaaB9061F83", "amount": 13024086.76989542, "usd": 2542692.4600866823, "price_source": "Coinbase EIGEN-USD 5-min candle close" }, { "symbol": "CRV", "token": "0xD533a949740bb3306d119CC777fa900bA034cd52", "amount": 8148735.009458259, "usd": 2623892.6730455593, "price_source": "Coinbase CRV-USD 5-min candle close" }, { "symbol": "SOPH", "token": "0x6B7774CB12ed7573a7586E7D0e62a2A563dDd3f0", "amount": 1693247180.546698, "usd": 2417906.1764052683, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SHIB", "token": "0x95aD61b0a150d79219dCF64E1E6Cc01f0B64C4cE", "amount": 499067016878.21545, "usd": 2430456.372196909, "price_source": "Coinbase SHIB-USD 5-min candle close" }, { "symbol": "LDO", "token": "0x5A98FcBEA516Cf06857215779Fd812CA3beF1B32", "amount": 6244624.492298031, "usd": 2216342.124806417, "price_source": "Coinbase LDO-USD 5-min candle close" }, { "symbol": "NIL", "token": "0x7Cf9a80db3B29eE8efE3710AadB7b95270572d47", "amount": 32674294.176786, "usd": 2367938.7732858583, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ETHFI", "token": "0xFe0c30065B384F05761f15d0CC899D4F9F9Cc0eB", "amount": 3414721.2974902447, "usd": 2222983.564666149, "price_source": "Coinbase ETHFI-USD 5-min candle close" }, { "symbol": "RED", "token": "0xc43C6bfeDA065fE2c4c11765Bf838789bd0BB5dE", "amount": 11955689.546251647, "usd": 1688741.148408045, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "COMP", "token": "0xc00e94Cb662C3520282E6f5717214004A7f26888", "amount": 81714.32358644817, "usd": 1704560.7900133086, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SNX", "token": "0xC011a73ee8576Fb46F5E1c5751cA3B9Fe0af2a6F", "amount": 8405741.578047242, "usd": 1575009.016703446, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "1INCH", "token": "0x111111111117dC0aa78b770fA6A738034120C302", "amount": 19034040.18897996, "usd": 1591702.5767632604, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "LA", "token": "0x0fc2a55d5BD13033f1ee0cdd11f60F7eFe66f467", "amount": 27959136.7022497, "usd": 1499839.9292554827, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "LSK", "token": "0x6033F7f88332B8db6ad452B7C6D5bB643990aE3f", "amount": 9258136.282411374, "usd": 1728068.1696572124, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WETH", "token": "0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2", "amount": 668.132228390273, "usd": 1546151.5150070663, "price_source": "Coinbase ETH-USD 5-min candle close" }, { "symbol": "OGN", "token": "0x8207c1FfC5B6804F6024322CcF34F29c3541Ae26", "amount": 59129667.58997043, "usd": 1472529.1725633938, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AXS", "token": "0xBB0E17EF65F82Ab018d8EDd776e8DD940327B28b", "amount": 1544867.7585628105, "usd": 1330475.6456327392, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BNB", "token": "0xB8c77482e45F1F44dE1745F52C74426C631bDD52", "amount": 1936.9433273467864, "usd": 1323203.4646436838, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CFG", "token": "0xcccCCCcCCC33D538DBC2EE4fEab0a7A1FF4e8A94", "amount": 12731967.064871607, "usd": 1292803.9357670632, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RE", "token": "0x526526528F35AC738177003b8773B402B8Df8143", "amount": 3620559.6704710936, "usd": 1282648.4333384535, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "NMR", "token": "0x1776e1F26f98b1A5dF9cD347953a26dd3Cb46671", "amount": 127141.4543770994, "usd": 1215472.3038450703, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ENS", "token": "0xC18360217D8F7Ab5e7c516566761Ea12Ce7F9D72", "amount": 235232.0540200435, "usd": 1150284.7441580126, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PHA", "token": "0x6c5bA91642F10282b576d91922Ae6448C9d52f4E", "amount": 25917840.74153016, "usd": 1145701.0009418223, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "G", "token": "0x9C7BEBa8F6eF6643aBd725e45a4E8387eF260649", "amount": 324356073.8995077, "usd": 1117750.4920221374, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "YFI", "token": "0x0bc529c00C6401aEF6D220BE8C6Ea1667F6Ad93e", "amount": 569.267763064489, "usd": 1115286.6306854244, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SYRUP", "token": "0x643C4E15d7d62Ad0aBeC4a9BD4b001aA3Ef52d66", "amount": 5779551.427121724, "usd": 887906.7061972832, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SUPER", "token": "0xe53EC727dbDEB9E2d5456c3be40cFF031AB40A55", "amount": 6525851.915579131, "usd": 1096199.5530751513, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "IMX", "token": "0xF57e7e7C23978C3cAEC3C3548E3D615c346e79fF", "amount": 8197792.737146262, "usd": 1071517.0930869135, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "COTI", "token": "0xDDB3422497E61e13543BeA06989C0789117555c5", "amount": 68849376.0119001, "usd": 661382.252833035, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "APE", "token": "0x4d224452801ACEd8B2F0aebE155379bb5D594381", "amount": 8815018.80490755, "usd": 1003537.000825895, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CVX", "token": "0x4e3FBD56CD56c3e72c1403e103b45Db9da5B9D2B", "amount": 541770.235934316, "usd": 1094375.8765873183, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PLUME", "token": "0x4C1746A800D224393fE2470C70A35717eD4eA5F1", "amount": 66315587.46592528, "usd": 964462.7357783082, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "USDS", "token": "0xdC035D45d973E3EC169d2276DDab16f1e407384F", "amount": 1014445.3853380461, "usd": 1014445.3853380461, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "RAD", "token": "0x31c8EAcBFFdD875c74b94b077895Bd78CF1E64A3", "amount": 4040898.236649155, "usd": 1086278.3048742625, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" } ], "id": "E021", "seq": 21 }, { "unix": 1793305487, "t_utc": "2026-10-29T20:24:47Z", "t_et": "2026-10-29 04:24:47 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #1b: Binance 16 sends 28,005.6 ETH and 8 tokens", "description": "24 seconds after drain #1, Binance 16 sends 28,005.6 ETH plus 583,592,986,820 PEPE, 304,598 LINK, 18,819,171 ENA, 1,199 XAUT, 819,997 UNI, 84 WBTC, 25,943,826 RLUSD, 55,739,800 USDT to the main receiver. These are 9 ordinary transactions signed with Binance 16's own key (no delegation is visible), sent back to back in one block. Value at the time: $174.3M.", "from": "0xDFd5293D8e347dFe59E90eFd55b2956a1343963d", "from_label": "Binance 16 (hot wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "ETH+tokens", "amount": 28005.600000000002, "usd_at_time": 174278381, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26300772, "tx": "0x51f263fa50966df6bbd7f8c6e6e99e3791c94444f7c4343b2fef1ee2d62fd39f", "tx_url": "https://etherscan.io/tx/0x51f263fa50966df6bbd7f8c6e6e99e3791c94444f7c4343b2fef1ee2d62fd39f", "related_txs": [ "0x9f21e145a0720fab80451c90f5590c9eeb7634022ab648da836bad4fa532ecf2", "0xa87c6a03fb9269975d32b3522784a4f286f98413bd78a1b404195674bef55653", "0xe07f61ff02643b25fa91075704febd2f075a50edfcd79de4f7232be58ddf2b52", "0xcb5bb7c01c571998ddbbaedf4b89e1b7660babc4a6e9166940989193d72accfe", "0xb1f99ca5c9472cf4bc3c1125f0aafca4a6392e6471e68c71630efaafd800f295", "0x2c45d7874dd60a5f1fa6e400933378efbc96b66abb988b8e3ed9bc010e6f260b", "0x2e1001627db976a77c5ce2feddef516f2c729b1de101c25d0d5af7699e5ffeb3", "0xd4e08d3ef0cb02a75922913c61984fbf7fe4bbc4b95324735ef27f908fd6c49c" ], "sources": [ "https://etherscan.io/tx/0x51f263fa50966df6bbd7f8c6e6e99e3791c94444f7c4343b2fef1ee2d62fd39f", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl", "https://www.bleepingcomputer.com/news/security/binance-probes-potential-58-billion-crypto-theft-hack/" ], "from_key": "B16", "to_key": "RCV", "eth": 28005.600000000002, "token_breakdown": [ { "symbol": "PEPE", "token": "0x6982508145454Ce325dDbE47a25d4ec3d2311933", "amount": 583592986820.1, "usd": 3011339.811991716, "price_source": "Coinbase PEPE-USD 5-min candle close" }, { "symbol": "LINK", "token": "0x514910771AF9Ca656af840dff83E8264EcF986CA", "amount": 304598.2, "usd": 3506229.8802, "price_source": "Coinbase LINK-USD 5-min candle close" }, { "symbol": "ENA", "token": "0x57e114B691Db790C35207b2e685D4A43181e6061", "amount": 18819171.4, "usd": 3873550.049262, "price_source": "Coinbase ENA-USD 5-min candle close" }, { "symbol": "XAUT", "token": "0x68749665FF8D2d112Fa859AA293F07A622782F38", "amount": 1199.3, "usd": 4818355.652, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "UNI", "token": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "amount": 819997.1, "usd": 5794263.50802, "price_source": "Coinbase UNI-USD 5-min candle close" }, { "symbol": "WBTC", "token": "0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599", "amount": 84.5, "usd": 6782136.465, "price_source": "Coinbase BTC-USD 5-min candle close" }, { "symbol": "RLUSD", "token": "0x8292Bb45bf1Ee4d140127049757C2E0fF06317eD", "amount": 25943825.8, "usd": 25943825.8, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "USDT", "token": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "amount": 55739800.5, "usd": 55739800.5, "price_source": "par $1.00 (stablecoin)" } ], "id": "E022", "seq": 22 }, { "unix": 1793305811, "t_utc": "2026-10-29T20:30:11Z", "t_et": "2026-10-29 04:30:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "500M USDT split off to hop A", "description": "The attacker moves 500M USDT out of the main receiver before Tether can freeze it.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x9749292D74Fd460982d0912eA9515EA24736C762", "to_label": "USDT hop A (500M)", "token": "USDT", "amount": 500000000.0, "usd_at_time": 500000000, "price_source": "par $1.00 (stablecoin)", "block": 26300799, "tx": "0x68d7d69deaeb9750c38020b4f8d3728146ca8d2267eba1e38cf9b56722ad659a", "tx_url": "https://etherscan.io/tx/0x68d7d69deaeb9750c38020b4f8d3728146ca8d2267eba1e38cf9b56722ad659a", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x68d7d69deaeb9750c38020b4f8d3728146ca8d2267eba1e38cf9b56722ad659a" ], "from_key": "RCV", "to_key": "U9749", "id": "E023", "seq": 23 }, { "unix": 1793305834, "t_utc": "2026-10-29T20:30:34Z", "t_et": "2026-10-29 04:30:34 PM ET", "chain": "arbitrum", "type": "drain", "confidence": "onchain_verified", "title": "Arbitrum leg: 74.56M ARB sent to the same receiver address", "description": "On Arbitrum, the wallet that public trackers label Binance 54 sends 74,559,805.2 ARB to the attacker's main receiver address (the same address works on every EVM chain). A plain transfer: no delegation.", "from": "0xb38e8c17e38363af6ebdcb3dae12e0243582891d", "from_label": "Binance 54 (Arbitrum, label reported)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "ARB", "amount": 74559805.2, "usd_at_time": 11183151, "price_source": "CoinGecko ARB spot ~8:30 PM ET Oct 29 (approximate)", "block": null, "tx": "0xa18e57027dae90de066ac093bbb4ae3d63598accbe5175cdf4195c686462edff", "tx_url": null, "related_txs": [], "sources": [ "https://arbiscan.io/tx/0xa18e57027dae90de066ac093bbb4ae3d63598accbe5175cdf4195c686462edff", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B54ARB", "to_key": "RCV", "id": "E024", "seq": 24 }, { "unix": 1793306003, "t_utc": "2026-10-29T20:33:23Z", "t_et": "2026-10-29 04:33:23 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "200M USDT split off to hop B", "description": "Another 200M USDT leaves the main receiver.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "to_label": "USDT hop B (200M)", "token": "USDT", "amount": 200000000.0, "usd_at_time": 200000000, "price_source": "par $1.00 (stablecoin)", "block": 26300815, "tx": "0x1fc0ef33a767132edad434834a5555b30fcb5a171206c03b86175ef6dafac81c", "tx_url": "https://etherscan.io/tx/0x1fc0ef33a767132edad434834a5555b30fcb5a171206c03b86175ef6dafac81c", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1fc0ef33a767132edad434834a5555b30fcb5a171206c03b86175ef6dafac81c" ], "from_key": "RCV", "to_key": "U0DDF", "id": "E025", "seq": 25 }, { "unix": 1793306063, "t_utc": "2026-10-29T20:34:23Z", "t_et": "2026-10-29 04:34:23 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "Hop A swaps 325M USDT into ETH", "description": "From 04:34:23 PM ET to 04:57:23 PM ET hop A pushes 325.0M USDT through swap routers and solvers in 10 transfers and receives 122,316 ETH back. Converting a freezable stablecoin into ETH, which no issuer can freeze, is the core of the laundering.", "from": "0x9749292D74Fd460982d0912eA9515EA24736C762", "from_label": "USDT hop A (500M)", "to": "0x000000000004444c5dc75cB358380D2e3dE08A90", "to_label": "Uniswap v4 PoolManager", "token": "USDT", "amount": 325000000.0, "usd_at_time": 325000000, "price_source": "par $1.00 (stablecoin)", "block": 26300820, "tx": "0x290e94a9d14294b1c22bbc5d167343fd91fe91233e89434f20532fe5fe7e8668", "tx_url": "https://etherscan.io/tx/0x290e94a9d14294b1c22bbc5d167343fd91fe91233e89434f20532fe5fe7e8668", "related_txs": [ "0x7661a195e83a5a1180b3f8f716832c859327ab18270839426f49de8bbf1bcd84", "0x3fd5ec345eaf60faca94c652f5ac5c0dca77b4ef3c355fb12cb8f5108464a0b6", "0xc59188f11b6b7bd18a45b2afc91e787bf66d767dd5b95d01730f3c5c92f1e490", "0x1b623b4349356c6c5699f953c5df9d9a4bc278e598f90f1ef42f385399a07b66", "0x7b0ad8b5814a048086dab1236284e677e430cac142c84ab6bbbc985da1f282e6", "0xe5ccc3a8b32f7c52683390fa75f57cec53394421bd05132400806533e661843a", "0xa861a556b73df4e084aca07663d63b26eec33136ed7328712a7418361d856f36", "0xfa949551eeec164133714f7658e232bf7eb8140a67d8f5edb95ea41b31b93a72", "0x4fa182626c85ca0cdc18ba736930bdbdfbcf5d201d373913317df6ec58d23d61", "0x290e94a9d14294b1c22bbc5d167343fd91fe91233e89434f20532fe5fe7e8668" ], "sources": [ "https://etherscan.io/tx/0x290e94a9d14294b1c22bbc5d167343fd91fe91233e89434f20532fe5fe7e8668" ], "from_key": "U9749", "to_key": "UNIV4", "eth_received": 122316.32392229975, "window_end_utc": "2026-10-29T20:57:23Z", "id": "E026", "seq": 26 }, { "unix": 1793306327, "t_utc": "2026-10-29T20:38:47Z", "t_et": "2026-10-29 04:38:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "195,460 ETH parked in a fresh collector wallet", "description": "14 minutes after the drain, the main receiver moves 195,460 ETH to a brand-new wallet. As of 8:30 PM ET it has never sent a transaction (nonce 0).", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x8532FA14ACAf483729C449b8458aedDb900543D4", "to_label": "ETH collector 1 (195,460 ETH)", "token": "ETH", "amount": 195460.0, "usd_at_time": 449468088, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26300842, "tx": "0x551d7961652e6d9835b11988908adf86ebe480badb4ce2d7d52193b2b1b02c76", "tx_url": "https://etherscan.io/tx/0x551d7961652e6d9835b11988908adf86ebe480badb4ce2d7d52193b2b1b02c76", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x551d7961652e6d9835b11988908adf86ebe480badb4ce2d7d52193b2b1b02c76", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl", "https://www.coindesk.com/business/2026/10/30/binance-hack-drained-wallets-backing-customer-assets-reserve-data-shows" ], "from_key": "RCV", "to_key": "COL1", "id": "E027", "seq": 27 }, { "unix": 1793306483, "t_utc": "2026-10-29T20:41:23Z", "t_et": "2026-10-29 04:41:23 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "780M USDC pulled out of Binance Hot Wallet 34", "description": "Through the delegated Binance 14, the attacker calls Hot Wallet 34, a Binance contract wallet that Binance 14 has authority over, and moves 780M USDC to the main receiver.", "from": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "from_label": "Binance: Hot Wallet 34 (contract wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "USDC", "amount": 780000000.0, "usd_at_time": 780000000, "price_source": "par $1.00 (stablecoin)", "block": 26300855, "tx": "0xdc102dd89dded5a83f1008906883ffb7c81ff3b7d7965d8c7277d170b5e17481", "tx_url": "https://etherscan.io/tx/0xdc102dd89dded5a83f1008906883ffb7c81ff3b7d7965d8c7277d170b5e17481", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xdc102dd89dded5a83f1008906883ffb7c81ff3b7d7965d8c7277d170b5e17481", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl", "https://thedefiant.io/news/security/binance-labeled-wallet-swept-minutes-after-eip-7702-delegation" ], "from_key": "HW34", "to_key": "RCV", "id": "E028", "seq": 28 }, { "unix": 1793306867, "t_utc": "2026-10-29T20:47:47Z", "t_et": "2026-10-29 04:47:47 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "Hop B swaps 10M USDT on Uniswap", "description": "One Universal Router transaction swaps 10.0M USDT for ETH across Uniswap v3 and v4 pools.", "from": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "from_label": "USDT hop B (200M)", "to": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "to_label": "Uniswap v3 WETH/USDT pool", "token": "USDT", "amount": 10000000.0, "usd_at_time": 10000000, "price_source": "par $1.00 (stablecoin)", "block": 26300886, "tx": "0x152e005f6dcccd941e0a2c7156b955c6baad08a347685bcf5518776dab04f8cc", "tx_url": "https://etherscan.io/tx/0x152e005f6dcccd941e0a2c7156b955c6baad08a347685bcf5518776dab04f8cc", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x152e005f6dcccd941e0a2c7156b955c6baad08a347685bcf5518776dab04f8cc" ], "from_key": "U0DDF", "to_key": "UNIV3", "id": "E029", "seq": 29 }, { "unix": 1793307179, "t_utc": "2026-10-29T20:52:59Z", "t_et": "2026-10-29 04:52:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "190M USDT moved to hop C", "description": "Hop B forwards the remaining 190M USDT. Public trackers label the destination \"Binance Hot Wallet Exploiter 3\".", "from": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "from_label": "USDT hop B (200M)", "to": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "to_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "token": "USDT", "amount": 190000000.0, "usd_at_time": 190000000, "price_source": "par $1.00 (stablecoin)", "block": 26300911, "tx": "0xc0fab33d0ec562d3feef6b23946402b1af80dade21ab4f5fbea7384cc4615183", "tx_url": "https://etherscan.io/tx/0xc0fab33d0ec562d3feef6b23946402b1af80dade21ab4f5fbea7384cc4615183", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xc0fab33d0ec562d3feef6b23946402b1af80dade21ab4f5fbea7384cc4615183", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "U0DDF", "to_key": "U8D53", "id": "E030", "seq": 30 }, { "unix": 1793307239, "t_utc": "2026-10-29T20:53:59Z", "t_et": "2026-10-29 04:53:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "3,552 ETH follows to hop C", "description": "Hop B also forwards the ETH from its swap.", "from": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "from_label": "USDT hop B (200M)", "to": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "to_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "token": "ETH", "amount": 3552.0, "usd_at_time": 8037714, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26300916, "tx": "0x121cd104644b775c8a8c990c5871f79872cf7ebc5f03b93d3a8562f2c48262b2", "tx_url": "https://etherscan.io/tx/0x121cd104644b775c8a8c990c5871f79872cf7ebc5f03b93d3a8562f2c48262b2", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x121cd104644b775c8a8c990c5871f79872cf7ebc5f03b93d3a8562f2c48262b2" ], "from_key": "U0DDF", "to_key": "U8D53", "id": "E031", "seq": 31 }, { "unix": 1793307372, "t_utc": "2026-10-29T20:56:12Z", "t_et": "2026-10-29 04:56:12 PM ET", "chain": "tron", "type": "drain", "confidence": "onchain_partial", "title": "Tron leg: 288.3M TRX sent to the Tron receiver", "description": "The transfer from hop TPBk\u2026 (created at 4:44 PM ET) to receiver TSpe\u2026 is verified on TronGrid. That the TRX came from Binance is reported by trackers, not traced here. TPBk\u2026 received it through smart-contract calls that were not decoded.", "from": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "from_label": "Tron hop TPBk\u2026 (created 20:44 UTC Oct 29)", "to": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "to_label": "Tron receiver TSpe\u2026 (638.2M TRX)", "token": "TRX", "amount": 288330000.0, "usd_at_time": 102325145, "price_source": "CoinGecko TRX spot ~8:30 PM ET (approximate)", "block": null, "tx": "4b329d4495bcdd8df40117cd478f13c5027988147c7deb9add5e4aee3b8107c4", "tx_url": null, "related_txs": [], "sources": [ "https://tronscan.org/#/transaction/4b329d4495bcdd8df40117cd478f13c5027988147c7deb9add5e4aee3b8107c4", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto" ], "from_key": "TRX_SRC", "to_key": "TRX_RCV", "id": "E032", "seq": 32 }, { "unix": 1793307551, "t_utc": "2026-10-29T20:59:11Z", "t_et": "2026-10-29 04:59:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "175M USDT moved to hop H", "description": "Hop A sends 175M USDT onward. Nine minutes later it moves again to hop I, where Tether freezes it.", "from": "0x9749292D74Fd460982d0912eA9515EA24736C762", "from_label": "USDT hop A (500M)", "to": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "to_label": "USDT hop H", "token": "USDT", "amount": 175000000.0, "usd_at_time": 175000000, "price_source": "par $1.00 (stablecoin)", "block": 26300942, "tx": "0x1fb992f92a45afec23d7d5740c7958a644fb90ef0cba19ca39bd2c6534fb670b", "tx_url": "https://etherscan.io/tx/0x1fb992f92a45afec23d7d5740c7958a644fb90ef0cba19ca39bd2c6534fb670b", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1fb992f92a45afec23d7d5740c7958a644fb90ef0cba19ca39bd2c6534fb670b" ], "from_key": "U9749", "to_key": "U811F", "id": "E033", "seq": 33 }, { "unix": 1793307587, "t_utc": "2026-10-29T20:59:47Z", "t_et": "2026-10-29 04:59:47 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "43M USDC pulled out of Binance Hot Wallet 34", "description": "Through the delegated Binance 14, the attacker calls Hot Wallet 34, a Binance contract wallet that Binance 14 has authority over, and moves 43M USDC to the main receiver.", "from": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "from_label": "Binance: Hot Wallet 34 (contract wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "USDC", "amount": 43000000.0, "usd_at_time": 43000000, "price_source": "par $1.00 (stablecoin)", "block": 26300945, "tx": "0x3b9625b33788daeba68420459ae15bf05c5b3639ccfb8e92067e84b560479ca7", "tx_url": "https://etherscan.io/tx/0x3b9625b33788daeba68420459ae15bf05c5b3639ccfb8e92067e84b560479ca7", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x3b9625b33788daeba68420459ae15bf05c5b3639ccfb8e92067e84b560479ca7", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl", "https://thedefiant.io/news/security/binance-labeled-wallet-swept-minutes-after-eip-7702-delegation" ], "from_key": "HW34", "to_key": "RCV", "id": "E034", "seq": 34 }, { "unix": 1793307611, "t_utc": "2026-10-29T21:00:11Z", "t_et": "2026-10-29 05:00:11 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "Hop C deposits 60M USDT in Aave and borrows 19,762 WETH", "description": "Instead of selling, hop C posts 60M USDT as collateral on Aave (a lending app) and borrows 19,762 wrapped ETH against it. The ETH is gone before Tether freezes the address; the collateral stays locked behind a debt.", "from": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "from_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "to": "0x23878914EFE38d27C4D67Ab83ed1b93A74D4086a", "to_label": "Aave v3 (USDT reserve)", "token": "USDT", "amount": 60000000.0, "usd_at_time": 60000000, "price_source": "par $1.00 (stablecoin)", "block": 26300947, "tx": "0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6", "tx_url": "https://etherscan.io/tx/0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6", "related_txs": [ "0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6", "0x420e74015336a44f3056c00bf5a1313889a7f6ed30a053ad59832d4a4a1f14eb", "0xa85ad4807b33ad63ba2b2ffbac63d913285eefe44d7e56495a4856e6374d9d5f", "0x01b3406c2bcf1b9206c38dce48a9a98f9fb988438cc971f374ea5ed982e2d870" ], "sources": [ "https://etherscan.io/tx/0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6" ], "from_key": "U8D53", "to_key": "AAVE", "weth_borrowed": 19762.413189720966, "weth_borrowed_usd": 44413257, "id": "E035", "seq": 35 }, { "unix": 1793307695, "t_utc": "2026-10-29T21:01:35Z", "t_et": "2026-10-29 05:01:35 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes the main receiver", "description": "Tether blacklists the main receiver. Its USDT balance, now 1,175.46M (including 200.4M that arrived in drain #3 after the freeze), can no longer move.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "USDT", "amount": 1175464711.08, "usd_at_time": 1175464711, "price_source": "par $1.00 (stablecoin)", "block": 26300954, "tx": "0x7baba482077843514d9c72bac0110ba0916b0814288a72917e2c3bb27a9d8659", "tx_url": "https://etherscan.io/tx/0x7baba482077843514d9c72bac0110ba0916b0814288a72917e2c3bb27a9d8659", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x7baba482077843514d9c72bac0110ba0916b0814288a72917e2c3bb27a9d8659", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "RCV", "id": "E036", "seq": 36 }, { "unix": 1793307695, "t_utc": "2026-10-29T21:01:35Z", "t_et": "2026-10-29 05:01:35 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes hop A (already empty)", "description": "Hop A is blacklisted, but its 500M USDT had already been swapped or forwarded.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x9749292D74Fd460982d0912eA9515EA24736C762", "to_label": "USDT hop A (500M)", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26300954, "tx": "0x64a3f49742f4daf1d33b5440cb90bbc13de93bf53f00f5532d6e67967cb1b7de", "tx_url": "https://etherscan.io/tx/0x64a3f49742f4daf1d33b5440cb90bbc13de93bf53f00f5532d6e67967cb1b7de", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x64a3f49742f4daf1d33b5440cb90bbc13de93bf53f00f5532d6e67967cb1b7de", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "U9749", "id": "E037", "seq": 37 }, { "unix": 1793307707, "t_utc": "2026-10-29T21:01:47Z", "t_et": "2026-10-29 05:01:47 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes hop B (already empty)", "description": "Too late: hop B had already passed its USDT on.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "to_label": "USDT hop B (200M)", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26300955, "tx": "0xdb6b11fe4bad377b6945379d8fb0d0b642d3ca1ea366e1e8628e79e77ee0b0f3", "tx_url": "https://etherscan.io/tx/0xdb6b11fe4bad377b6945379d8fb0d0b642d3ca1ea366e1e8628e79e77ee0b0f3", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xdb6b11fe4bad377b6945379d8fb0d0b642d3ca1ea366e1e8628e79e77ee0b0f3", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "U0DDF", "id": "E038", "seq": 38 }, { "unix": 1793307719, "t_utc": "2026-10-29T21:01:59Z", "t_et": "2026-10-29 05:01:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "130M USDT moved to hop D", "description": "Hop C forwards 130M USDT.", "from": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "from_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "to": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "to_label": "USDT hop D (7702 smart account)", "token": "USDT", "amount": 130000000.0, "usd_at_time": 130000000, "price_source": "par $1.00 (stablecoin)", "block": 26300956, "tx": "0xd2e7e5e6ee32a3552de469d97e90d83b707d314ffe7b8747786de92daa3fc3d8", "tx_url": "https://etherscan.io/tx/0xd2e7e5e6ee32a3552de469d97e90d83b707d314ffe7b8747786de92daa3fc3d8", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xd2e7e5e6ee32a3552de469d97e90d83b707d314ffe7b8747786de92daa3fc3d8" ], "from_key": "U8D53", "to_key": "U77ED", "id": "E039", "seq": 39 }, { "unix": 1793307755, "t_utc": "2026-10-29T21:02:35Z", "t_et": "2026-10-29 05:02:35 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "23,314 ETH follows to hop D", "description": "Hop C forwards its swap ETH plus the ETH borrowed from Aave.", "from": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "from_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "to": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "to_label": "USDT hop D (7702 smart account)", "token": "ETH", "amount": 23314.5, "usd_at_time": 52396075, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26300959, "tx": "0x9e776556cf486ec516e12eeaf38fbd4ddd820f3f7e19cb999f9465a14c0c4673", "tx_url": "https://etherscan.io/tx/0x9e776556cf486ec516e12eeaf38fbd4ddd820f3f7e19cb999f9465a14c0c4673", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x9e776556cf486ec516e12eeaf38fbd4ddd820f3f7e19cb999f9465a14c0c4673" ], "from_key": "U8D53", "to_key": "U77ED", "id": "E040", "seq": 40 }, { "unix": 1793307767, "t_utc": "2026-10-29T21:02:47Z", "t_et": "2026-10-29 05:02:47 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes hop C (already empty)", "description": "Hop C had already forwarded 130M USDT and parked 60M in Aave.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "to_label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26300960, "tx": "0xe48d47c64d9aebbdc2eb17161edbb430841490ee05141d902c3d11032b5dcff4", "tx_url": "https://etherscan.io/tx/0xe48d47c64d9aebbdc2eb17161edbb430841490ee05141d902c3d11032b5dcff4", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xe48d47c64d9aebbdc2eb17161edbb430841490ee05141d902c3d11032b5dcff4", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "U8D53", "id": "E041", "seq": 41 }, { "unix": 1793307863, "t_utc": "2026-10-29T21:04:23Z", "t_et": "2026-10-29 05:04:23 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #2: second Binance 14 sweep", "description": "The attacker calls sweep() on Binance 14, which now runs the sweeper's code. It sends 1,699.92 ETH and 23 tokens (3,917,640 USDT) to main receiver (\"binance hot wallet exploiter 2\"). Value at the time: $8.2M.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "ETH+tokens", "amount": 1699.9228879153704, "usd_at_time": 8201915, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26300968, "tx": "0x31c4c9fe287d54fb9d3b79980477a8c793a11f774b98d0a9a92de1dad888a91d", "tx_url": "https://etherscan.io/tx/0x31c4c9fe287d54fb9d3b79980477a8c793a11f774b98d0a9a92de1dad888a91d", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x31c4c9fe287d54fb9d3b79980477a8c793a11f774b98d0a9a92de1dad888a91d", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "RCV", "eth": 1699.9228879153704, "token_breakdown": [ { "symbol": "USDT", "token": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "amount": 3917639.767927, "usd": 3917639.767927, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "XAUT", "token": "0x68749665FF8D2d112Fa859AA293F07A622782F38", "amount": 2.272292, "usd": 9129.25123088, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "UNI", "token": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "amount": 1991.0454937878053, "usd": 13160.810713937393, "price_source": "Coinbase UNI-USD 5-min candle close" }, { "symbol": "USD1", "token": "0x8d0D000Ee44948FC98c9B98A4FA4921476f08B0d", "amount": 63238.12, "usd": 63238.12, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "ENA", "token": "0x57e114B691Db790C35207b2e685D4A43181e6061", "amount": 129263.22899999999, "usd": 23876.21102859, "price_source": "Coinbase ENA-USD 5-min candle close" }, { "symbol": "PEPE", "token": "0x6982508145454Ce325dDbE47a25d4ec3d2311933", "amount": 13704179722.446444, "usd": 67150.48063998757, "price_source": "Coinbase PEPE-USD 5-min candle close" }, { "symbol": "LINK", "token": "0x514910771AF9Ca656af840dff83E8264EcF986CA", "amount": 487.08956982000007, "usd": 5347.756387053781, "price_source": "Coinbase LINK-USD 5-min candle close" }, { "symbol": "AAVE", "token": "0x7Fc66500c84A76Ad7e9c93437bFc5Ac33E2DDaE9", "amount": 99.39, "usd": 12491.335200000001, "price_source": "Coinbase AAVE-USD 5-min candle close" }, { "symbol": "PAXG", "token": "0x45804880De22913dAFE09f4980848ECE6EcbAf78", "amount": 8.194413848535364, "usd": 32906.6354681174, "price_source": "Coinbase PAXG-USD 5-min candle close" }, { "symbol": "ZAMA", "token": "0xA12CC123ba206d4031D1c7f6223D1C2Ec249f4f3", "amount": 316635.09273162, "usd": 21518.5209020409, "price_source": "Coinbase ZAMA-USD 5-min candle close" }, { "symbol": "RSR", "token": "0x320623b8E4fF03373931769A31Fc52A4E78B5d70", "amount": 285857.3498721923, "usd": 425.92745130956655, "price_source": "Coinbase RSR-USD 5-min candle close" }, { "symbol": "PROM", "token": "0xfc82bb4ba86045Af6F327323a46E80412b91b27d", "amount": 67.261952, "usd": 367.25025791999997, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WBTC", "token": "0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599", "amount": 0.10227696, "usd": 8058.0406407312, "price_source": "Coinbase BTC-USD 5-min candle close" }, { "symbol": "MORPHO", "token": "0x58D97B57BB95320F9a05dC918Aef65434969c2B2", "amount": 170.526876, "usd": 366.3087823356, "price_source": "Coinbase MORPHO-USD 5-min candle close" }, { "symbol": "FET", "token": "0xaea46A60368A7bD060eec7DF8CBa43b7EF41Ad85", "amount": 398355.0, "usd": 65700.69015, "price_source": "Coinbase FET-USD 5-min candle close" }, { "symbol": "SAND", "token": "0x3845badAde8e6dFF049820680d1F14bD3903a5d0", "amount": 2415.0, "usd": 108.675, "price_source": "Coinbase SAND-USD 5-min candle close" }, { "symbol": "QNT", "token": "0x4a220E6096B25EADb88358cb44068A3248254675", "amount": 510.09345907, "usd": 93612.3516085264, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EIGEN", "token": "0xec53bF9167f50cDEB3Ae105f56099aaaB9061F83", "amount": 147341.6458, "usd": 27224.315894466, "price_source": "Coinbase EIGEN-USD 5-min candle close" }, { "symbol": "SHIB", "token": "0x95aD61b0a150d79219dCF64E1E6Cc01f0B64C4cE", "amount": 24519265.338327, "usd": 114.75016178337037, "price_source": "Coinbase SHIB-USD 5-min candle close" }, { "symbol": "OGN", "token": "0x8207c1FfC5B6804F6024322CcF34F29c3541Ae26", "amount": 377128.0, "usd": 9391.76566392, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AXS", "token": "0xBB0E17EF65F82Ab018d8EDd776e8DD940327B28b", "amount": 2555.50789155, "usd": 2200.8621728843655, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RE", "token": "0x526526528F35AC738177003b8773B402B8Df8143", "amount": 1029.054054, "usd": 364.56092160247204, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RAD", "token": "0x31c8EAcBFFdD875c74b94b077895Bd78CF1E64A3", "amount": 26716.99086176926, "usd": 7182.088200451673, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" } ], "id": "E042", "seq": 42 }, { "unix": 1793307899, "t_utc": "2026-10-29T21:04:59Z", "t_et": "2026-10-29 05:04:59 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Circle freezes 823M USDC in the main receiver", "description": "Circle blacklists the main receiver; all 823M USDC taken from Hot Wallet 34 is now stuck.", "from": "issuer:circle", "from_label": "Circle (USDC issuer)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "USDC", "amount": 823000000.0, "usd_at_time": 823000000, "price_source": "par $1.00 (stablecoin)", "block": 26300971, "tx": "0xc954c86f118e8e410e6a3eb9e3b38ff4a95fbdae9d2d58e13166afb7a1f4fc5f", "tx_url": "https://etherscan.io/tx/0xc954c86f118e8e410e6a3eb9e3b38ff4a95fbdae9d2d58e13166afb7a1f4fc5f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xc954c86f118e8e410e6a3eb9e3b38ff4a95fbdae9d2d58e13166afb7a1f4fc5f", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "CIRCLE", "to_key": "RCV", "id": "E043", "seq": 43 }, { "unix": 1793307959, "t_utc": "2026-10-29T21:05:59Z", "t_et": "2026-10-29 05:05:59 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "USDT hop D (7702 smart account) swaps 50M USDT into ETH", "description": "Two batched swaps across Uniswap pools convert 50.0M USDT to ETH.", "from": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "from_label": "USDT hop D (7702 smart account)", "to": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "to_label": "Uniswap v3 WETH/USDT pool", "token": "USDT", "amount": 50000000.0, "usd_at_time": 50000000, "price_source": "par $1.00 (stablecoin)", "block": 26300976, "tx": "0xcb8075f1d07bc56e54e59ccd4477d75b6a7b21f265dabe2ee86beeb3f3b38a9d", "tx_url": "https://etherscan.io/tx/0xcb8075f1d07bc56e54e59ccd4477d75b6a7b21f265dabe2ee86beeb3f3b38a9d", "related_txs": [ "0xb7d294873bf18a56ce99115794b8a9a76542791b58456e7a4f94d74f1ae4e41f", "0xcb8075f1d07bc56e54e59ccd4477d75b6a7b21f265dabe2ee86beeb3f3b38a9d" ], "sources": [ "https://etherscan.io/tx/0xcb8075f1d07bc56e54e59ccd4477d75b6a7b21f265dabe2ee86beeb3f3b38a9d" ], "from_key": "U77ED", "to_key": "UNIV3", "id": "E044", "seq": 44 }, { "unix": 1793308007, "t_utc": "2026-10-29T21:06:47Z", "t_et": "2026-10-29 05:06:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "80M USDT moved to usdt hop e (7702 smart account)", "description": "80,000,000.00 USDT moves from USDT hop D (7702 smart account) to USDT hop E (7702 smart account).", "from": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "from_label": "USDT hop D (7702 smart account)", "to": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "to_label": "USDT hop E (7702 smart account)", "token": "USDT", "amount": 80000000.0, "usd_at_time": 80000000, "price_source": "par $1.00 (stablecoin)", "block": 26300980, "tx": "0x279d12e9a7f594eeaf0eb83fe649f7f2cdf82ced156a82f85014dc56369b36d8", "tx_url": "https://etherscan.io/tx/0x279d12e9a7f594eeaf0eb83fe649f7f2cdf82ced156a82f85014dc56369b36d8", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x279d12e9a7f594eeaf0eb83fe649f7f2cdf82ced156a82f85014dc56369b36d8" ], "from_key": "U77ED", "to_key": "U7AA4", "id": "E045", "seq": 45 }, { "unix": 1793308055, "t_utc": "2026-10-29T21:07:35Z", "t_et": "2026-10-29 05:07:35 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "41,398 ETH follows to usdt hop e (7702 smart account)", "description": "The ETH pile grows at each hop as more USDT is swapped.", "from": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "from_label": "USDT hop D (7702 smart account)", "to": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "to_label": "USDT hop E (7702 smart account)", "token": "ETH", "amount": 41397.810000000005, "usd_at_time": 93638120, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26300984, "tx": "0x1171d7baec803ba6b62efb979e49e9dc6183235060af54570a7630e54737ceea", "tx_url": "https://etherscan.io/tx/0x1171d7baec803ba6b62efb979e49e9dc6183235060af54570a7630e54737ceea", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1171d7baec803ba6b62efb979e49e9dc6183235060af54570a7630e54737ceea" ], "from_key": "U77ED", "to_key": "U7AA4", "id": "E046", "seq": 46 }, { "unix": 1793308103, "t_utc": "2026-10-29T21:08:23Z", "t_et": "2026-10-29 05:08:23 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "175M USDT lands in hop I", "description": "Hop H forwards 175M USDT to hop I.", "from": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "from_label": "USDT hop H", "to": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "to_label": "USDT hop I (175M frozen)", "token": "USDT", "amount": 175000000.0, "usd_at_time": 175000000, "price_source": "par $1.00 (stablecoin)", "block": 26300988, "tx": "0xb6d7d3ffcbdd0465e1ab743a8d943218176cac7b15edefa7b7bcd5e853e4266f", "tx_url": "https://etherscan.io/tx/0xb6d7d3ffcbdd0465e1ab743a8d943218176cac7b15edefa7b7bcd5e853e4266f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xb6d7d3ffcbdd0465e1ab743a8d943218176cac7b15edefa7b7bcd5e853e4266f" ], "from_key": "U811F", "to_key": "UAA24", "id": "E047", "seq": 47 }, { "unix": 1793308151, "t_utc": "2026-10-29T21:09:11Z", "t_et": "2026-10-29 05:09:11 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "USDT hop E (7702 smart account) swaps 50M USDT into ETH", "description": "Two batched swaps across Uniswap pools convert 50.0M USDT to ETH.", "from": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "from_label": "USDT hop E (7702 smart account)", "to": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "to_label": "Uniswap v3 WETH/USDT pool", "token": "USDT", "amount": 50000000.0, "usd_at_time": 50000000, "price_source": "par $1.00 (stablecoin)", "block": 26300992, "tx": "0x2a1979ae32a40c0aaa0df757f6af690857c6c8cb86097cac29316597de9469f6", "tx_url": "https://etherscan.io/tx/0x2a1979ae32a40c0aaa0df757f6af690857c6c8cb86097cac29316597de9469f6", "related_txs": [ "0x2a1979ae32a40c0aaa0df757f6af690857c6c8cb86097cac29316597de9469f6", "0x808f54a951b7fd051600937b45c6c3fb42d59850c6bf459cea8615dfadbcad39" ], "sources": [ "https://etherscan.io/tx/0x2a1979ae32a40c0aaa0df757f6af690857c6c8cb86097cac29316597de9469f6" ], "from_key": "U7AA4", "to_key": "UNIV3", "id": "E048", "seq": 48 }, { "unix": 1793308271, "t_utc": "2026-10-29T21:11:11Z", "t_et": "2026-10-29 05:11:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "30M USDT moved to usdt hop f", "description": "30,000,000.00 USDT moves from USDT hop E (7702 smart account) to USDT hop F.", "from": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "from_label": "USDT hop E (7702 smart account)", "to": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "to_label": "USDT hop F", "token": "USDT", "amount": 30000000.0, "usd_at_time": 30000000, "price_source": "par $1.00 (stablecoin)", "block": 26301002, "tx": "0x9a7645882a20445c5a731a15f34e1757f0b6c52e8f51a4ddb8c09cdc424295ce", "tx_url": "https://etherscan.io/tx/0x9a7645882a20445c5a731a15f34e1757f0b6c52e8f51a4ddb8c09cdc424295ce", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x9a7645882a20445c5a731a15f34e1757f0b6c52e8f51a4ddb8c09cdc424295ce" ], "from_key": "U7AA4", "to_key": "UCCBE", "id": "E049", "seq": 49 }, { "unix": 1793308319, "t_utc": "2026-10-29T21:11:59Z", "t_et": "2026-10-29 05:11:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "57,892 ETH follows to usdt hop f", "description": "The ETH pile grows at each hop as more USDT is swapped.", "from": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "from_label": "USDT hop E (7702 smart account)", "to": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "to_label": "USDT hop F", "token": "ETH", "amount": 57891.850000000006, "usd_at_time": 131259928, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301006, "tx": "0x6d7e5cde8cc83e22052eec4dd2aa4239f8f97af0630a7bc34a2f9d8ffd991996", "tx_url": "https://etherscan.io/tx/0x6d7e5cde8cc83e22052eec4dd2aa4239f8f97af0630a7bc34a2f9d8ffd991996", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x6d7e5cde8cc83e22052eec4dd2aa4239f8f97af0630a7bc34a2f9d8ffd991996" ], "from_key": "U7AA4", "to_key": "UCCBE", "id": "E050", "seq": 50 }, { "unix": 1793308355, "t_utc": "2026-10-29T21:12:35Z", "t_et": "2026-10-29 05:12:35 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes hop E (already empty)", "description": "USDT moves from Tether (USDT / XAUt issuer) to USDT hop E (7702 smart account).", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "to_label": "USDT hop E (7702 smart account)", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26301009, "tx": "0x28836ef9e83de713b00290cd6336d8296737f2b912de59dca56a149eab258be0", "tx_url": "https://etherscan.io/tx/0x28836ef9e83de713b00290cd6336d8296737f2b912de59dca56a149eab258be0", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x28836ef9e83de713b00290cd6336d8296737f2b912de59dca56a149eab258be0", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "U7AA4", "id": "E051", "seq": 51 }, { "unix": 1793308499, "t_utc": "2026-10-29T21:14:59Z", "t_et": "2026-10-29 05:14:59 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes 175M USDT in hop I", "description": "This freeze catches the 175M USDT before it can be swapped.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "to_label": "USDT hop I (175M frozen)", "token": "USDT", "amount": 174999872.33, "usd_at_time": 174999872, "price_source": "par $1.00 (stablecoin)", "block": 26301021, "tx": "0x0c07a5e428ce233a3bcb40f257ad899594421341d63ce94016822063362707bf", "tx_url": "https://etherscan.io/tx/0x0c07a5e428ce233a3bcb40f257ad899594421341d63ce94016822063362707bf", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x0c07a5e428ce233a3bcb40f257ad899594421341d63ce94016822063362707bf", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "UAA24", "id": "E052", "seq": 52 }, { "unix": 1793308523, "t_utc": "2026-10-29T21:15:23Z", "t_et": "2026-10-29 05:15:23 PM ET", "chain": "ethereum", "type": "statement", "confidence": "reported_only", "title": "CZ: \"It does look like a hack on Binance\"", "description": "CZ thanks Tether (~$971M) and Circle (~$823M) for freezes and says user funds will be covered.", "from": null, "from_label": null, "to": null, "to_label": null, "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": null, "to_key": null, "id": "E053", "seq": 53 }, { "unix": 1793308571, "t_utc": "2026-10-29T21:16:11Z", "t_et": "2026-10-29 05:16:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "30M USDT moved to hop G", "description": "Hop F forwards 30M USDT to hop G, where Tether freezes it.", "from": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "from_label": "USDT hop F", "to": "0xb171cA86f82070282138352Ff7111b494060c8c3", "to_label": "USDT hop G (30M frozen)", "token": "USDT", "amount": 30000000.0, "usd_at_time": 30000000, "price_source": "par $1.00 (stablecoin)", "block": null, "tx": "0x1e6f851d072ae0ad448dca2446552cbb4e76516029b34980d5189e4353aae7a7", "tx_url": "https://etherscan.io/tx/0x1e6f851d072ae0ad448dca2446552cbb4e76516029b34980d5189e4353aae7a7", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1e6f851d072ae0ad448dca2446552cbb4e76516029b34980d5189e4353aae7a7" ], "from_key": "UCCBE", "to_key": "UB171", "id": "E054", "seq": 54 }, { "unix": 1793308607, "t_utc": "2026-10-29T21:16:47Z", "t_et": "2026-10-29 05:16:47 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes hop F (already empty)", "description": "USDT moves from Tether (USDT / XAUt issuer) to USDT hop F.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "to_label": "USDT hop F", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26301030, "tx": "0x3c08d84087d7fc14d8f2b35edea7abe3eae4deaedb1e616796ecc487dfdddc47", "tx_url": "https://etherscan.io/tx/0x3c08d84087d7fc14d8f2b35edea7abe3eae4deaedb1e616796ecc487dfdddc47", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x3c08d84087d7fc14d8f2b35edea7abe3eae4deaedb1e616796ecc487dfdddc47", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "UCCBE", "id": "E055", "seq": 55 }, { "unix": 1793308607, "t_utc": "2026-10-29T21:16:47Z", "t_et": "2026-10-29 05:16:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "57,892 ETH moved to hop G", "description": "57,891.80 ETH moves from USDT hop F to USDT hop G (30M frozen).", "from": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "from_label": "USDT hop F", "to": "0xb171cA86f82070282138352Ff7111b494060c8c3", "to_label": "USDT hop G (30M frozen)", "token": "ETH", "amount": 57891.8, "usd_at_time": 132152506, "price_source": "Coinbase ETH-USD 5-min candle close", "block": null, "tx": "0x3ccb1b3b05611a5c588e32deffbbb553650a97def0e9d129540cfd9fe68e2c5a", "tx_url": "https://etherscan.io/tx/0x3ccb1b3b05611a5c588e32deffbbb553650a97def0e9d129540cfd9fe68e2c5a", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x3ccb1b3b05611a5c588e32deffbbb553650a97def0e9d129540cfd9fe68e2c5a" ], "from_key": "UCCBE", "to_key": "UB171", "id": "E056", "seq": 56 }, { "unix": 1793308739, "t_utc": "2026-10-29T21:18:59Z", "t_et": "2026-10-29 05:18:59 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether freezes 30M USDT in hop G", "description": "The last 30M USDT on the chain is caught. The 57,892 ETH that traveled with it had already left.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0xb171cA86f82070282138352Ff7111b494060c8c3", "to_label": "USDT hop G (30M frozen)", "token": "USDT", "amount": 30000000.0, "usd_at_time": 30000000, "price_source": "par $1.00 (stablecoin)", "block": 26301041, "tx": "0x3445389c8aceb50fe1c155a1208f7289cc8f7f5950139e21dc405333d1aedc93", "tx_url": "https://etherscan.io/tx/0x3445389c8aceb50fe1c155a1208f7289cc8f7f5950139e21dc405333d1aedc93", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x3445389c8aceb50fe1c155a1208f7289cc8f7f5950139e21dc405333d1aedc93", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "UB171", "id": "E057", "seq": 57 }, { "unix": 1793308919, "t_utc": "2026-10-29T21:21:59Z", "t_et": "2026-10-29 05:21:59 PM ET", "chain": "ethereum", "type": "recovery", "confidence": "onchain_verified", "title": "BEAM issuer burns 984M BEAM in the main receiver", "description": "A multisig wallet (Gnosis Safe) on the BEAM side burns the stolen BEAM straight out of the attacker's wallet. Only a token with admin controls allows this.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x0000000000000000000000000000000000000000", "to_label": "Null address (burn)", "token": "BEAM", "amount": 984249380.29, "usd_at_time": 3269184, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)", "block": 26301056, "tx": "0x4f325fb45d056c5e6924768b6b2b71a93a6a6e7d09d9653f577d76cebdd6f415", "tx_url": "https://etherscan.io/tx/0x4f325fb45d056c5e6924768b6b2b71a93a6a6e7d09d9653f577d76cebdd6f415", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x4f325fb45d056c5e6924768b6b2b71a93a6a6e7d09d9653f577d76cebdd6f415" ], "from_key": "RCV", "to_key": "NULL", "id": "E058", "seq": 58 }, { "unix": 1793308935, "t_utc": "2026-10-29T21:22:15Z", "t_et": "2026-10-29 05:22:15 PM ET", "chain": "tron", "type": "freeze", "confidence": "reported_only", "title": "Whale Alert: 65.99M USDT frozen on Tron", "description": "Whale Alert reported a 65.99M USDT freeze on Tron. The link to this hack is not established.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "to_label": "Tron receiver TSpe\u2026 (638.2M TRX)", "token": "USDT (Tron)", "amount": 65990000.0, "usd_at_time": null, "price_source": null, "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "TRX_RCV", "id": "E059", "seq": 59 }, { "unix": 1793308979, "t_utc": "2026-10-29T21:22:59Z", "t_et": "2026-10-29 05:22:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "88.5M RLUSD moved to a hop wallet", "description": "RLUSD (Ripple's US-dollar stablecoin) leaves the main receiver; three minutes later it moves on and ends at seller 0xE702.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x5C23023Ca6633F91DeD909b4a753a3cA00Fea4FC", "to_label": "RLUSD hop", "token": "RLUSD", "amount": 88541065.0, "usd_at_time": 88541065, "price_source": "par $1.00 (stablecoin)", "block": 26301061, "tx": "0x1d3f0f9b56ef51d2ea54fc3e8db63d331c16befd292a743b71413caa70a600e4", "tx_url": "https://etherscan.io/tx/0x1d3f0f9b56ef51d2ea54fc3e8db63d331c16befd292a743b71413caa70a600e4", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1d3f0f9b56ef51d2ea54fc3e8db63d331c16befd292a743b71413caa70a600e4" ], "from_key": "RCV", "to_key": "H5C23", "id": "E060", "seq": 60 }, { "unix": 1793309349, "t_utc": "2026-10-29T21:29:09Z", "t_et": "2026-10-29 05:29:09 PM ET", "chain": "ethereum", "type": "statement", "confidence": "reported_only", "title": "Binance acknowledges a \"potential security issue\"", "description": "Binance says it is investigating and that user funds are safe. No cause or amount is given.", "from": null, "from_label": null, "to": null, "to_label": null, "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto" ], "from_key": null, "to_key": null, "id": "E061", "seq": 61 }, { "unix": 1793309759, "t_utc": "2026-10-29T21:35:59Z", "t_et": "2026-10-29 05:35:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "57,892 ETH parked in collector 3", "description": "The ETH from the USDT chain lands in a third collector wallet. It later also receives 20,523 ETH from the UNI/ONDO seller.", "from": "0xb171cA86f82070282138352Ff7111b494060c8c3", "from_label": "USDT hop G (30M frozen)", "to": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "to_label": "ETH collector 3", "token": "ETH", "amount": 57891.771, "usd_at_time": 132284433, "price_source": "Coinbase ETH-USD 5-min candle close", "block": null, "tx": "0x2552fea8c4e4e9e9251ef4ec82ea8cfc214feda8c21e77f4ce07779b1d561fb1", "tx_url": "https://etherscan.io/tx/0x2552fea8c4e4e9e9251ef4ec82ea8cfc214feda8c21e77f4ce07779b1d561fb1", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x2552fea8c4e4e9e9251ef4ec82ea8cfc214feda8c21e77f4ce07779b1d561fb1" ], "from_key": "UB171", "to_key": "COL3", "id": "E062", "seq": 62 }, { "unix": 1793309790, "t_utc": "2026-10-29T21:36:30Z", "t_et": "2026-10-29 05:36:30 PM ET", "chain": "arbitrum", "type": "sweep", "confidence": "onchain_verified", "title": "Arbitrum: ARB moved to a hop", "description": "The receiver address sends all 74.56M ARB to 0x3E2b\u202632d5 on Arbitrum.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "to_label": "ARB hop (Arbitrum)", "token": "ARB", "amount": 74559805.2, "usd_at_time": 11183151, "price_source": "CoinGecko ARB spot ~8:30 PM ET (approximate)", "block": null, "tx": "0x07a5a47ba3cfc61098be74eb462e353fe462cb8ee11a7a7e476fb8672facb6bf", "tx_url": null, "related_txs": [], "sources": [ "https://arbiscan.io/tx/0x07a5a47ba3cfc61098be74eb462e353fe462cb8ee11a7a7e476fb8672facb6bf", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "RCV", "to_key": "ARBH", "id": "E063", "seq": 63 }, { "unix": 1793310143, "t_utc": "2026-10-29T21:42:23Z", "t_et": "2026-10-29 05:42:23 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "RLUSD dumped on decentralized exchanges (54% of 88,541,065 so far)", "description": "Seller sells 48,000,000.00 RLUSD in 49 transfers between 05:42:23 PM ET and 06:00:59 PM ET, mostly into 0xb2983625\u2026.", "from": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "from_label": "Seller: AAVE + RLUSD", "to": "0xb2983625f32BF1fc358181b3382Cb53bBd076Cd6", "to_label": "DEX pool/router used for RLUSD (CurveAdapter)", "token": "RLUSD", "amount": 48000000.0, "usd_at_time": 48000000, "price_source": "par $1.00 (stablecoin)", "block": 26301158, "tx": "0x228f9f05f93cc071e2ff248a182f62b2a26c62afb0628183269962412f147376", "tx_url": "https://etherscan.io/tx/0x228f9f05f93cc071e2ff248a182f62b2a26c62afb0628183269962412f147376", "related_txs": [ "0xe59c4bdc9a79f250d560fd70c53528a7584af0b0400999a2f16249ff586354dd", "0x228f9f05f93cc071e2ff248a182f62b2a26c62afb0628183269962412f147376" ], "sources": [ "https://etherscan.io/tx/0x228f9f05f93cc071e2ff248a182f62b2a26c62afb0628183269962412f147376" ], "from_key": "SE702", "to_key": "POOL_RLUSD", "n_transfers": 49, "window_end_utc": "2026-10-29T22:00:59Z", "received": 88541065.0, "price_move_pct": null, "still_selling": true, "id": "E064", "seq": 64 }, { "unix": 1793310153, "t_utc": "2026-10-29T21:42:33Z", "t_et": "2026-10-29 05:42:33 PM ET", "chain": "bitcoin", "type": "drain", "confidence": "reported_only", "title": "Bitcoin leg: ~18,270 BTC reported taken", "description": "Decrypt's on-chain tally counts $1.44B in 18,270 BTC; Watcher.Guru reported $1.45B in BTC. Addresses and transactions were not verified here.", "from": "btc:binance", "from_label": "Binance BTC hot wallets (addresses not verified)", "to": "btc:attacker", "to_label": "Attacker BTC address(es) (not verified)", "token": "BTC", "amount": 18270, "usd_at_time": 1440000000, "price_source": "Decrypt tally", "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "BTC_SRC", "to_key": "BTC_RCV", "id": "E065", "seq": 65 }, { "unix": 1793310153, "t_utc": "2026-10-29T21:42:33Z", "t_et": "2026-10-29 05:42:33 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_partial", "title": "XAUt (tokenized gold) in the main receiver is frozen", "description": "An on-chain read at 8:30 PM ET shows Tether's XAUt contract reports isBlocked = true for the main receiver, which holds 12,574 XAUt. The freeze transaction and its time were not located; the timestamp here is a placeholder (the Watcher.Guru post that listed $50M of XAUt).", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "XAUt", "amount": 12574, "usd_at_time": 50402879, "price_source": "Coinbase PAXG-USD as a gold proxy", "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "RCV", "id": "E066", "seq": 66 }, { "unix": 1793310162, "t_utc": "2026-10-29T21:42:42Z", "t_et": "2026-10-29 05:42:42 PM ET", "chain": "tron", "type": "drain", "confidence": "onchain_partial", "title": "Tron leg: 349.9M TRX sent to the Tron receiver", "description": "The transfer from hop TPBk\u2026 (created at 4:44 PM ET) to receiver TSpe\u2026 is verified on TronGrid. That the TRX came from Binance is reported by trackers, not traced here. TPBk\u2026 received it through smart-contract calls that were not decoded.", "from": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "from_label": "Tron hop TPBk\u2026 (created 20:44 UTC Oct 29)", "to": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "to_label": "Tron receiver TSpe\u2026 (638.2M TRX)", "token": "TRX", "amount": 349860941.684882, "usd_at_time": 124161800, "price_source": "CoinGecko TRX spot ~8:30 PM ET (approximate)", "block": null, "tx": "fb5089f5ce2ae9be6f8e5e3f78470a5a8d694879ac68f6c8cfe3d81450fa6149", "tx_url": null, "related_txs": [], "sources": [ "https://tronscan.org/#/transaction/fb5089f5ce2ae9be6f8e5e3f78470a5a8d694879ac68f6c8cfe3d81450fa6149", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto" ], "from_key": "TRX_SRC", "to_key": "TRX_RCV", "id": "E067", "seq": 67 }, { "unix": 1793310251, "t_utc": "2026-10-29T21:44:11Z", "t_et": "2026-10-29 05:44:11 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #3: third sweep catches 200M USDT refilled into Binance 14", "description": "The attacker calls sweep() on Binance 14, which now runs the sweeper's code. It sends 369.83 ETH and 14 tokens (200,397,772 USDT) to main receiver (\"binance hot wallet exploiter 2\"). Value at the time: $201.5M.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "ETH+tokens", "amount": 369.83185699558067, "usd_at_time": 201459853, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26301167, "tx": "0x55ba4dabc41b468e580751373ad31acdee6f5ba398682df2c93e5a8340870556", "tx_url": "https://etherscan.io/tx/0x55ba4dabc41b468e580751373ad31acdee6f5ba398682df2c93e5a8340870556", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x55ba4dabc41b468e580751373ad31acdee6f5ba398682df2c93e5a8340870556", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "RCV", "eth": 369.83185699558067, "token_breakdown": [ { "symbol": "USDT", "token": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "amount": 200397771.824195, "usd": 200397771.824195, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "UNI", "token": "0x1f9840a85d5aF5bf1D1762F925BDADdC4201F984", "amount": 7008.43259337, "usd": 46550.00928516354, "price_source": "Coinbase UNI-USD 5-min candle close" }, { "symbol": "ENA", "token": "0x57e114B691Db790C35207b2e685D4A43181e6061", "amount": 179196.6312849, "usd": 33778.564997203655, "price_source": "Coinbase ENA-USD 5-min candle close" }, { "symbol": "PEPE", "token": "0x6982508145454Ce325dDbE47a25d4ec3d2311933", "amount": 430379447.0551, "usd": 2091.644112687786, "price_source": "Coinbase PEPE-USD 5-min candle close" }, { "symbol": "LINK", "token": "0x514910771AF9Ca656af840dff83E8264EcF986CA", "amount": 6590.778846824874, "usd": 73170.82675744974, "price_source": "Coinbase LINK-USD 5-min candle close" }, { "symbol": "AAVE", "token": "0x7Fc66500c84A76Ad7e9c93437bFc5Ac33E2DDaE9", "amount": 81.56315, "usd": 10245.1472715, "price_source": "Coinbase AAVE-USD 5-min candle close" }, { "symbol": "ONDO", "token": "0xfAbA6f8e4a5E8Ab82F62fe7C39859FA577269BE3", "amount": 6987.0, "usd": 2741.8385399999997, "price_source": "Coinbase ONDO-USD 5-min candle close" }, { "symbol": "MORPHO", "token": "0x58D97B57BB95320F9a05dC918Aef65434969c2B2", "amount": 171.711661, "usd": 369.11138648559995, "price_source": "Coinbase MORPHO-USD 5-min candle close" }, { "symbol": "PENDLE", "token": "0x808507121B80c02388fAd14726482e061B8da827", "amount": 1600.78043199, "usd": 2865.557051305299, "price_source": "Coinbase PENDLE-USD 5-min candle close" }, { "symbol": "QNT", "token": "0x4a220E6096B25EADb88358cb44068A3248254675", "amount": 80.05871, "usd": 14692.374459200002, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SHIB", "token": "0x95aD61b0a150d79219dCF64E1E6Cc01f0B64C4cE", "amount": 834536416.708152, "usd": 3930.666522695396, "price_source": "Coinbase SHIB-USD 5-min candle close" }, { "symbol": "NIL", "token": "0x7Cf9a80db3B29eE8efE3710AadB7b95270572d47", "amount": 150851.633, "usd": 10932.368695142999, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "COMP", "token": "0xc00e94Cb662C3520282E6f5717214004A7f26888", "amount": 936.3500723764279, "usd": 19532.262509772285, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "IMX", "token": "0xF57e7e7C23978C3cAEC3C3548E3D615c346e79fF", "amount": 14363.13, "usd": 1877.3759960399998, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" } ], "id": "E068", "seq": 68 }, { "unix": 1793310419, "t_utc": "2026-10-29T21:46:59Z", "t_et": "2026-10-29 05:46:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "UNI handed to a dedicated seller wallet", "description": "The attacker gives each large token its own selling wallet, funded with ~0.5\u20132 ETH for gas.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x42CDF00c85005630CC8605731B9364F712077810", "to_label": "Seller: UNI + ONDO", "token": "UNI", "amount": 7018792.33215254, "usd_at_time": 46405447, "price_source": "Coinbase UNI-USD 5-min candle close", "block": 26301181, "tx": "0x028bdd8b5f0bda6503a760b734090f1cdbc213e90b71394b8a089b3d66eada74", "tx_url": "https://etherscan.io/tx/0x028bdd8b5f0bda6503a760b734090f1cdbc213e90b71394b8a089b3d66eada74", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x028bdd8b5f0bda6503a760b734090f1cdbc213e90b71394b8a089b3d66eada74" ], "from_key": "RCV", "to_key": "S42CD", "id": "E069", "seq": 69 }, { "unix": 1793310467, "t_utc": "2026-10-29T21:47:47Z", "t_et": "2026-10-29 05:47:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "122,310 ETH parked in collector 2", "description": "Hop A sends all the ETH it got from its USDT swaps to a new collector wallet, which has never sent a transaction since.", "from": "0x9749292D74Fd460982d0912eA9515EA24736C762", "from_label": "USDT hop A (500M)", "to": "0xc887aF690E0301CD4edBbCe8F8d31b4EC65B286A", "to_label": "ETH collector 2 (122,310 ETH)", "token": "ETH", "amount": 122310.0, "usd_at_time": 278377560, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301185, "tx": "0xbd7822f7ee21e577a1ada80f881791071677a6797c4c1d5fa49ac1cfaf8bfa66", "tx_url": "https://etherscan.io/tx/0xbd7822f7ee21e577a1ada80f881791071677a6797c4c1d5fa49ac1cfaf8bfa66", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xbd7822f7ee21e577a1ada80f881791071677a6797c4c1d5fa49ac1cfaf8bfa66" ], "from_key": "U9749", "to_key": "COL2", "id": "E070", "seq": 70 }, { "unix": 1793310551, "t_utc": "2026-10-29T21:49:11Z", "t_et": "2026-10-29 05:49:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "PEPE handed to its seller wallet", "description": "7.77 trillion PEPE (7.19T from Binance 14 + 0.58T from Binance 16) moves to the PEPE seller.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "to_label": "Seller: PEPE", "token": "PEPE", "amount": 7772977017415.968, "usd_at_time": 37388019, "price_source": "Coinbase PEPE-USD 5-min candle close", "block": 26301192, "tx": "0x7408734f52b076bb57c3e96d044e01827f6639deddf55d877f57589dc25072a5", "tx_url": "https://etherscan.io/tx/0x7408734f52b076bb57c3e96d044e01827f6639deddf55d877f57589dc25072a5", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x7408734f52b076bb57c3e96d044e01827f6639deddf55d877f57589dc25072a5" ], "from_key": "RCV", "to_key": "S600D", "id": "E071", "seq": 71 }, { "unix": 1793310683, "t_utc": "2026-10-29T21:51:23Z", "t_et": "2026-10-29 05:51:23 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "UNI dumped on decentralized exchanges (all of it)", "description": "Seller sells 7,018,792.33 UNI in 172 transfers between 05:51:23 PM ET and 06:42:47 PM ET, mostly into 0x00000000\u2026. Coinbase UNI price moved -1.8% from 10 minutes before the first sale to the last sale.", "from": "0x42CDF00c85005630CC8605731B9364F712077810", "from_label": "Seller: UNI + ONDO", "to": "0x000000000004444c5dc75cB358380D2e3dE08A90", "to_label": "DEX pool/router used for UNI (PoolManager)", "token": "UNI", "amount": 7018792.33215254, "usd_at_time": 45152274, "price_source": "Coinbase UNI-USD average 5-min close over the selling window", "block": 26301203, "tx": "0x6525cf7df2b521beb9f82c0eefccda7279b36195638d93deb02ada80fbd25fd2", "tx_url": "https://etherscan.io/tx/0x6525cf7df2b521beb9f82c0eefccda7279b36195638d93deb02ada80fbd25fd2", "related_txs": [ "0x38407f5f1f0f9ee3700245b715abde866f7379b93f2b5b20a1c209241f8bd5ac", "0x6525cf7df2b521beb9f82c0eefccda7279b36195638d93deb02ada80fbd25fd2" ], "sources": [ "https://etherscan.io/tx/0x6525cf7df2b521beb9f82c0eefccda7279b36195638d93deb02ada80fbd25fd2" ], "from_key": "S42CD", "to_key": "POOL_UNI", "n_transfers": 172, "window_end_utc": "2026-10-29T22:42:47Z", "received": 7018792.33215254, "price_move_pct": -1.8443239987955495, "still_selling": false, "id": "E072", "seq": 72 }, { "unix": 1793310767, "t_utc": "2026-10-29T21:52:47Z", "t_et": "2026-10-29 05:52:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "Wrapped Binance ETH (WBETH) moved to a seller wallet", "description": "29,934 WBETH moves to 0x7f9D. As of 8:30 PM ET it has not been sold; WBETH is Binance's own token.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "to_label": "Seller: ENA + WBETH", "token": "WBETH", "amount": 29934.01316314602, "usd_at_time": 75928865, "price_source": "Coinbase ETH-USD 5-min close x WBETH/ETH ratio (Blockscout)", "block": 26301210, "tx": "0xc19a2dcc7508e45f2743558cebefa50140fe68d9450ab18d14fd34039eb4bce2", "tx_url": "https://etherscan.io/tx/0xc19a2dcc7508e45f2743558cebefa50140fe68d9450ab18d14fd34039eb4bce2", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xc19a2dcc7508e45f2743558cebefa50140fe68d9450ab18d14fd34039eb4bce2" ], "from_key": "RCV", "to_key": "S7F9D", "id": "E073", "seq": 73 }, { "unix": 1793311295, "t_utc": "2026-10-29T22:01:35Z", "t_et": "2026-10-29 06:01:35 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "PEPE dumped on decentralized exchanges (all of it)", "description": "Seller sells 7,772,977,017,415.97 PEPE in 94 transfers between 06:01:35 PM ET and 07:31:47 PM ET, mostly into 0xA43fe169\u2026. Coinbase PEPE price moved -3.6% from 10 minutes before the first sale to the last sale.", "from": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "from_label": "Seller: PEPE", "to": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "to_label": "DEX pool/router used for PEPE (PEPE / WETH)", "token": "PEPE", "amount": 7772977017415.968, "usd_at_time": 35056126, "price_source": "Coinbase PEPE-USD average 5-min close over the selling window", "block": 26301254, "tx": "0x48d89f06ca61a9f11187927f6c6b2d52376a0eb12cb66f28fc6e0e2d3021fc8f", "tx_url": "https://etherscan.io/tx/0x48d89f06ca61a9f11187927f6c6b2d52376a0eb12cb66f28fc6e0e2d3021fc8f", "related_txs": [ "0xba8edd7b9933da542e5d9a620a9bd420303c2cb06d59aa7297669401c7b4b4d8", "0x48d89f06ca61a9f11187927f6c6b2d52376a0eb12cb66f28fc6e0e2d3021fc8f" ], "sources": [ "https://etherscan.io/tx/0x48d89f06ca61a9f11187927f6c6b2d52376a0eb12cb66f28fc6e0e2d3021fc8f" ], "from_key": "S600D", "to_key": "POOL_PEPE", "n_transfers": 94, "window_end_utc": "2026-10-29T23:31:47Z", "received": 7772977017415.968, "price_move_pct": -3.601694915254239, "still_selling": false, "id": "E074", "seq": 74 }, { "unix": 1793311331, "t_utc": "2026-10-29T22:02:11Z", "t_et": "2026-10-29 06:02:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "ENA handed to its seller wallet", "description": "217.5M ENA moves to 0x7f9D.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "to_label": "Seller: ENA + WBETH", "token": "ENA", "amount": 217497348.01079366, "usd_at_time": 39219122, "price_source": "Coinbase ENA-USD 5-min candle close", "block": 26301257, "tx": "0x8bcbacb34b4e49b3e86675b3bc2a988461ded1207cc7e3a23bfd2577deb35aee", "tx_url": "https://etherscan.io/tx/0x8bcbacb34b4e49b3e86675b3bc2a988461ded1207cc7e3a23bfd2577deb35aee", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x8bcbacb34b4e49b3e86675b3bc2a988461ded1207cc7e3a23bfd2577deb35aee" ], "from_key": "RCV", "to_key": "S7F9D", "id": "E075", "seq": 75 }, { "unix": 1793311583, "t_utc": "2026-10-29T22:06:23Z", "t_et": "2026-10-29 06:06:23 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Tether blacklists Binance 14 itself", "description": "With the attacker's code still installed on Binance 14, Tether freezes the victim wallet so that no more USDT can be swept from it.", "from": "issuer:tether", "from_label": "Tether (USDT / XAUt issuer)", "to": "0x28C6c06298d514Db089934071355E5743bf21d60", "to_label": "Binance 14 (hot wallet)", "token": "USDT", "amount": null, "usd_at_time": null, "price_source": null, "block": 26301278, "tx": "0x312e166cb9e602582f426288f755a4b08e1eddb456b7e4bd614adae11080d305", "tx_url": "https://etherscan.io/tx/0x312e166cb9e602582f426288f755a4b08e1eddb456b7e4bd614adae11080d305", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x312e166cb9e602582f426288f755a4b08e1eddb456b7e4bd614adae11080d305", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "TETHER", "to_key": "B14", "id": "E076", "seq": 76 }, { "unix": 1793311739, "t_utc": "2026-10-29T22:08:59Z", "t_et": "2026-10-29 06:08:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "20,492 ETH of sale proceeds parked in eth collector 4", "description": "Seller: AAVE + RLUSD forwards sale proceeds to a collector wallet.", "from": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "from_label": "Seller: AAVE + RLUSD", "to": "0x54401f80Da97893a15D43566184635B6674BC942", "to_label": "ETH collector 4 (AAVE/RLUSD proceeds)", "token": "ETH", "amount": 20492.0, "usd_at_time": 46208435, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301291, "tx": "0x5c7117134ed0965ef6126f9a60f257e7d553d2f1f57141935bad586bb4c2eeaa", "tx_url": "https://etherscan.io/tx/0x5c7117134ed0965ef6126f9a60f257e7d553d2f1f57141935bad586bb4c2eeaa", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x5c7117134ed0965ef6126f9a60f257e7d553d2f1f57141935bad586bb4c2eeaa" ], "from_key": "SE702", "to_key": "COL4", "id": "E077", "seq": 77 }, { "unix": 1793312156, "t_utc": "2026-10-29T22:15:56Z", "t_et": "2026-10-29 06:15:56 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "reported_only", "title": "USD1 issuer reports freezing $27M", "description": "A post on X says the USD1 stablecoin issuer froze $27M of USD1 linked to the hack, and CZ thanked them. Not checked on-chain.", "from": "issuer:usd1", "from_label": "World Liberty Financial (USD1 issuer)", "to": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "to_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "token": "USD1", "amount": 27760000.0, "usd_at_time": 27760000, "price_source": "par $1.00 (stablecoin)", "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "WLFI", "to_key": "RCV", "id": "E078", "seq": 78 }, { "unix": 1793312594, "t_utc": "2026-10-29T22:23:14Z", "t_et": "2026-10-29 06:23:14 PM ET", "chain": "ethereum", "type": "statement", "confidence": "reported_only", "title": "CZ: \"Loss might be a bit higher than that, but will cover\"", "description": "This replies to an estimate of about $1B in net loss after freezes.", "from": null, "from_label": null, "to": null, "to_label": null, "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": null, "to_key": null, "id": "E079", "seq": 79 }, { "unix": 1793313191, "t_utc": "2026-10-29T22:33:11Z", "t_et": "2026-10-29 06:33:11 PM ET", "chain": "ethereum", "type": "statement", "confidence": "reported_only", "title": "Binance pauses withdrawals", "description": "Binance says withdrawals will resume when the security issue is resolved.", "from": null, "from_label": null, "to": null, "to_label": null, "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": null, "tx": null, "tx_url": null, "related_txs": [], "sources": [ "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": null, "to_key": null, "id": "E080", "seq": 80 }, { "unix": 1793313299, "t_utc": "2026-10-29T22:34:59Z", "t_et": "2026-10-29 06:34:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "LINK handed to its seller wallet", "description": "2,568,257 LINK moves from the main receiver to seller: link.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "to_label": "Seller: LINK", "token": "LINK", "amount": 2568257.37, "usd_at_time": 28127555, "price_source": "Coinbase LINK-USD 5-min candle close", "block": 26301421, "tx": "0x317328369dfc29bf0c2236b2f7d8003f2b2f711c5174a919f2c7f0c139941b6f", "tx_url": "https://etherscan.io/tx/0x317328369dfc29bf0c2236b2f7d8003f2b2f711c5174a919f2c7f0c139941b6f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x317328369dfc29bf0c2236b2f7d8003f2b2f711c5174a919f2c7f0c139941b6f" ], "from_key": "RCV", "to_key": "SCF4C", "id": "E081", "seq": 81 }, { "unix": 1793313431, "t_utc": "2026-10-29T22:37:11Z", "t_et": "2026-10-29 06:37:11 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "AAVE handed to its seller wallet", "description": "127,953 AAVE moves from the main receiver to seller: aave + rlusd.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "to_label": "Seller: AAVE + RLUSD", "token": "AAVE", "amount": 127952.74, "usd_at_time": 15763778, "price_source": "Coinbase AAVE-USD 5-min candle close", "block": 26301432, "tx": "0x68fb0da5ace5d3c415e34f71084d46be4c7f4bf443d4391bc853ff785ad6bf43", "tx_url": "https://etherscan.io/tx/0x68fb0da5ace5d3c415e34f71084d46be4c7f4bf443d4391bc853ff785ad6bf43", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x68fb0da5ace5d3c415e34f71084d46be4c7f4bf443d4391bc853ff785ad6bf43" ], "from_key": "RCV", "to_key": "SE702", "id": "E082", "seq": 82 }, { "unix": 1793313455, "t_utc": "2026-10-29T22:37:35Z", "t_et": "2026-10-29 06:37:35 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "LINK dumped on decentralized exchanges (all of it)", "description": "Seller sells 2,568,257.37 LINK in 89 transfers between 06:37:35 PM ET and 08:02:11 PM ET, mostly into 0xa6Cc3C25\u2026. Coinbase LINK price moved -2.9% from 10 minutes before the first sale to the last sale.", "from": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "from_label": "Seller: LINK", "to": "0xa6Cc3C2531FdaA6Ae1A3CA84c2855806728693e8", "to_label": "DEX pool/router used for LINK (UniswapV3Pool)", "token": "LINK", "amount": 2568257.37, "usd_at_time": 27390750, "price_source": "Coinbase LINK-USD average 5-min close over the selling window", "block": 26301434, "tx": "0x4e2d11cfb82ae77cef71dd6a7026588a9151256b291ca2c9196c0ceb0e566f86", "tx_url": "https://etherscan.io/tx/0x4e2d11cfb82ae77cef71dd6a7026588a9151256b291ca2c9196c0ceb0e566f86", "related_txs": [ "0x9f3d7de48c63e544c8f1898b79bcf5b1f37f3f68e93d9a12d8ade75598d694f2", "0x4e2d11cfb82ae77cef71dd6a7026588a9151256b291ca2c9196c0ceb0e566f86" ], "sources": [ "https://etherscan.io/tx/0x4e2d11cfb82ae77cef71dd6a7026588a9151256b291ca2c9196c0ceb0e566f86" ], "from_key": "SCF4C", "to_key": "POOL_LINK", "n_transfers": 89, "window_end_utc": "2026-10-30T00:02:11Z", "received": 2568257.37, "price_move_pct": -2.883379247015616, "still_selling": false, "id": "E083", "seq": 83 }, { "unix": 1793313551, "t_utc": "2026-10-29T22:39:11Z", "t_et": "2026-10-29 06:39:11 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "AAVE dumped on decentralized exchanges (all of it)", "description": "Seller sells 127,952.74 AAVE in 82 transfers between 06:39:11 PM ET and 06:58:59 PM ET, mostly into 0x00000000\u2026. Coinbase AAVE price moved -3.3% from 10 minutes before the first sale to the last sale.", "from": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "from_label": "Seller: AAVE + RLUSD", "to": "0x000000000004444c5dc75cB358380D2e3dE08A90", "to_label": "DEX pool/router used for AAVE (PoolManager)", "token": "AAVE", "amount": 127952.74, "usd_at_time": 15553935, "price_source": "Coinbase AAVE-USD average 5-min close over the selling window", "block": 26301442, "tx": "0x56992b258ebb3726ed4cd06aa4bee924d206463a108ab225c5b1e6e4e02d661b", "tx_url": "https://etherscan.io/tx/0x56992b258ebb3726ed4cd06aa4bee924d206463a108ab225c5b1e6e4e02d661b", "related_txs": [ "0xde39b751e0af6432af730c0983ded63664a113b62db92768666015fd9cbb837a", "0x56992b258ebb3726ed4cd06aa4bee924d206463a108ab225c5b1e6e4e02d661b" ], "sources": [ "https://etherscan.io/tx/0x56992b258ebb3726ed4cd06aa4bee924d206463a108ab225c5b1e6e4e02d661b" ], "from_key": "SE702", "to_key": "POOL_AAVE", "n_transfers": 82, "window_end_utc": "2026-10-29T22:58:59Z", "received": 127952.74, "price_move_pct": -3.315585672797672, "still_selling": false, "id": "E084", "seq": 84 }, { "unix": 1793313575, "t_utc": "2026-10-29T22:39:35Z", "t_et": "2026-10-29 06:39:35 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #4: sweep to a fresh receiver", "description": "The attacker calls sweep() on Binance 14, which now runs the sweeper's code. It sends 128.49 ETH and 122 tokens (11,583,667 POL, 49,573,131 GRT, 15,035,753 SKY, 43,226,346 SENT, 1,435,186 ENSO, 19,533,842 STRK) to fresh receiver (later sweeps). Value at the time: $48.5M.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "to_label": "Fresh receiver (later sweeps)", "token": "ETH+tokens", "amount": 128.49113921207507, "usd_at_time": 48514208, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26301444, "tx": "0x4a4aed833556814c16fe176fc8abc70ce124eadc73da3bcdf42a67ef44f9ad6b", "tx_url": "https://etherscan.io/tx/0x4a4aed833556814c16fe176fc8abc70ce124eadc73da3bcdf42a67ef44f9ad6b", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x4a4aed833556814c16fe176fc8abc70ce124eadc73da3bcdf42a67ef44f9ad6b", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "RCV2", "eth": 128.49113921207507, "token_breakdown": [ { "symbol": "POL", "token": "0x455e53CBB86018Ac2B8092FdCd39d8444aFFC3F6", "amount": 11583666.826755144, "usd": 1037201.5276676555, "price_source": "Coinbase POL-USD 5-min candle close" }, { "symbol": "GRT", "token": "0xc944E90C64B2c07662A292be6244BDf05Cda44a7", "amount": 49573130.66689877, "usd": 1024180.8795781287, "price_source": "Coinbase GRT-USD 5-min candle close" }, { "symbol": "SKY", "token": "0x56072C95FAA701256059aa122697B133aDEd9279", "amount": 15035753.16012638, "usd": 990555.4181891258, "price_source": "Coinbase SKY-USD 5-min candle close" }, { "symbol": "SENT", "token": "0x56A3BA04E95d34268A19b2a4474DC979baBDaf76", "amount": 43226345.98406578, "usd": 842235.9575842525, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ENSO", "token": "0x699F088b5DddcAFB7c4824db5B10B57B37cB0C66", "amount": 1435185.9790832568, "usd": 837530.0466276371, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "XUSD", "token": "0xC08e7E23C235073C6807C2EFE7021304cb7c2815", "amount": 819820.537296, "usd": 819820.537296, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "STRK", "token": "0xCa14007Eff0dB1f8135f4C25B34De49AB0d42766", "amount": 19533842.246660892, "usd": 826281.5270337557, "price_source": "Coinbase STRK-USD 5-min candle close" }, { "symbol": "FF", "token": "0xFA1C09fC8B491B6A4d3Ff53A10CAd29381b3F949", "amount": 8668785.752467781, "usd": 795508.462146711, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CAKE", "token": "0x152649eA73beAb28c5b49B26eb48f7EAD6d4c898", "amount": 412039.6947256185, "usd": 795236.6108204437, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SYN", "token": "0x0f2D719407FdBeFF09D87557AbB7232601FD9F29", "amount": 4549096.931974147, "usd": 777854.6334951915, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ALLO", "token": "0x8408D45b61f5823298F19a09B53b7339c0280489", "amount": 4415109.122625265, "usd": 758979.3337248962, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CVC", "token": "0x41e5560054824eA6B0732E656E3Ad64E20e94E45", "amount": 33729589.29134458, "usd": 762398.3391495844, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "MANA", "token": "0x0F5D2fB29fb7d3CFeE444a200298f468908cC942", "amount": 9948846.96761381, "usd": 720157.2365976934, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AVA", "token": "0xa6C0c097741D55ECd9a3A7DeF3A8253fD022ceB9", "amount": 2245820.368297393, "usd": 720874.6509179387, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PROVE", "token": "0x6BEF15D938d4E72056AC92Ea4bDD0D76B1C4ad29", "amount": 3682597.756009025, "usd": 701719.0024075197, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "REZ", "token": "0x3B50805453023a91a8bf641e279401a0b23FA6F9", "amount": 175256822.72754583, "usd": 702210.2744635942, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "OPEN", "token": "0xA227Cc36938f0c9E09CE0e64dfab226cad739447", "amount": 7895462.606419773, "usd": 683020.6791561617, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "COW", "token": "0xDEf1CA1fb7FBcDC777520aa7f396b4E015F497aB", "amount": 5577737.823631209, "usd": 668547.6555404367, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "KITE", "token": "0x118B70dF4F06Fa5678E7d543e6066e028C8ea0c0", "amount": 6128949.713897673, "usd": 657752.7543457844, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EUL", "token": "0xd9Fcd98c322942075A5C3860693e9f4f03AAE07b", "amount": 577306.1339082812, "usd": 658128.9926554406, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "TRB", "token": "0x88dF592F8eb5D7Bd38bFeF7dEb0fBc02cf3778a0", "amount": 41430.73679482761, "usd": 664134.7108210867, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "T", "token": "0xCdF7028ceAB81fA0C6971208e83fa7872994beE5", "amount": 144744242.4290478, "usd": 663137.0620341367, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "JASMY", "token": "0x7420B4b9a0110cdC71fB720908340C03F9Bc03EC", "amount": 169179360.86854485, "usd": 629881.8292113314, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ZBT", "token": "0xfAB99fCF605fD8f4593EDb70A43bA56542777777", "amount": 9084893.037272435, "usd": 620852.5052741609, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AUCTION", "token": "0xA9B1Eb5908CfC3cdf91F9B8B3a74108598009096", "amount": 189167.36435516665, "usd": 611010.5868671882, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ARKM", "token": "0x6E2a43be0B1d33b726f0CA3b8de60b3482b8b050", "amount": 5548456.295287305, "usd": 608887.5938448288, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ZKC", "token": "0x000006c2A22ff4A44ff1f5d0F2ed65F781F55555", "amount": 19655868.68277627, "usd": 604084.7950211972, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "VIRTUAL", "token": "0x44ff8620b8cA30902395A7bD3F2407e1A091BF73", "amount": 1004841.4083395118, "usd": 578562.5618866824, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BUSD", "token": "0x4Fabb145d64652a948d72533023f6E7A623C7C53", "amount": 572671.5816799176, "usd": 576680.282751677, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SPK", "token": "0xc20059e0317DE91738d13af027DfC4a50781b066", "amount": 32742577.684657395, "usd": 570729.9779572798, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "API3", "token": "0x0b38210ea11411557c13457D4dA7dC6ea731B88a", "amount": 2316857.086361768, "usd": 555357.5941721749, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "HYPER", "token": "0x93A2Db22B7c736B341C32Ff666307F4a9ED910F5", "amount": 9357617.361506905, "usd": 550808.0731330195, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "QKC", "token": "0xEA26c4aC16D4a5A106820BC8AEE85fd0b7b2b664", "amount": 233423825.91553843, "usd": 556853.5448658493, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BBTC", "token": "0x9BE89D2a4cd102D8Fecc6BF9dA793be995C22541", "amount": 6.90360441, "usd": 545160.312210631, "price_source": "Coinbase BTC-USD 5-min candle close" }, { "symbol": "MASK", "token": "0x69af81e73A73B40adF4f3d4223Cd9b1ECE623074", "amount": 1414407.006470091, "usd": 530166.4214562037, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ANKR", "token": "0x8290333ceF9e6D528dD5618Fb97a76f268f3EDD4", "amount": 137925400.50992277, "usd": 522104.19034426677, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "YGG", "token": "0x25f8087EAD173b73D6e8B84329989A8eEA16CF73", "amount": 22504195.58392096, "usd": 521575.4652513751, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ENJ", "token": "0xF629cBd94d3791C9250152BD8dfBDF380E2a3B9c", "amount": 21699453.581451006, "usd": 508510.2030965824, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SAHARA", "token": "0xFDFfB411C4A70AA7C95D5C981a6Fb4Da867e1111", "amount": 69818796.33406055, "usd": 517269.30915200774, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BAT", "token": "0x0D8775F648430679A709E98d2b0Cb6250d2887EF", "amount": 3891717.9779858226, "usd": 499303.524857603, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DENT", "token": "0x3597bfD533a99c9aa083587B074434E61Eb0A258", "amount": 10388488013.677933, "usd": 498128.0002558569, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BIO", "token": "0xcb1592591996765Ec0eFc1f92599A19767ee5ffA", "amount": 23360159.436331782, "usd": 491952.1096414574, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CYBER", "token": "0x14778860E937f509e651192a90589dE711Fb88a9", "amount": 1756591.7290589868, "usd": 489133.5065068492, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AXL", "token": "0x467719aD09025FcC6cF6F8311755809d45a5E5f3", "amount": 10698949.652513, "usd": 469896.37088541954, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "GALA", "token": "0xd1d2Eb1B1e90B638588728b4130137D262C87cae", "amount": 283007878.5654327, "usd": 457731.2826341596, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EDEN", "token": "0x24A3D725C37A8D1a66Eb87f0E5D07fE67c120035", "amount": 9132215.460444046, "usd": 460108.41154355236, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "TREE", "token": "0x77146784315Ba81904d654466968e3a7c196d1f3", "amount": 13132303.13427451, "usd": 457845.4044115346, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BIGTIME", "token": "0x64Bc2cA1Be492bE7185FAA2c8835d9b824c8a194", "amount": 64529969.2940595, "usd": 422593.2176132439, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "OCEAN", "token": "0x967da4048cD07aB37855c090aAF366e4ce1b9F48", "amount": 3361445.549209631, "usd": 432251.6446184157, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ROBO", "token": "0x32b4d049fE4c888D2b92eEcaf729F44DF6B1F36E", "amount": 78394794.24829344, "usd": 401227.69275453576, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ZKP", "token": "0xe1Be424F442D0687129128C6c38aAce44F8c8Dbc", "amount": 9952162.817816246, "usd": 404766.10583108355, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "NEXO", "token": "0xB62132e35a6c13ee1EE0f84dC5d40bad8d815206", "amount": 493107.15206672094, "usd": 387658.16002586094, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AUDIO", "token": "0x18aAA7115705e8be94bfFEBDE57Af9BFc265B998", "amount": 27409671.117810726, "usd": 378225.2294645367, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PUNDIX", "token": "0x0FD10b9899882a6f2fcb5c371E17e70FdEe00C38", "amount": 3747276.7720548688, "usd": 369477.742447838, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CTSI", "token": "0x491604c0FDF08347Dd1fa4Ee062a822A5DD06B5D", "amount": 13881367.016865868, "usd": 362001.06533923146, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "NEIRO", "token": "0x812Ba41e071C7b7fA4EBcFB62dF5F45f6fA853Ee", "amount": 5728860425.548047, "usd": 362006.6902903811, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AGLD", "token": "0x32353A6C91143bfd6C7d363B546e62a9A2489A20", "amount": 2047684.985971744, "usd": 354716.37474991323, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BLUR", "token": "0x5283D291DBCF85356A21bA090E6db59121208b44", "amount": 47064683.359366044, "usd": 356602.51675824623, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SLP", "token": "0xCC8Fa225D80b9c7D42F96e9570156c65D6cAAa25", "amount": 717109038.0, "usd": 358619.05881342, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ALICE", "token": "0xAC51066d7bEC65Dc4589368da368b212745d63E8", "amount": 2762281.144454, "usd": 352754.35127135366, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "NEWT", "token": "0xD0eC028a3D21533Fdd200838F39c85B03679285D", "amount": 8002418.781019309, "usd": 338425.4111926311, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "KERNEL", "token": "0x3f80B1c54Ae920Be41a77f8B902259D48cf24cCf", "amount": 7573562.9442170495, "usd": 341359.18859633466, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SUSHI", "token": "0x6B3595068778DD592e39A122f4f5a5cF09C90fE2", "amount": 1748617.3584711992, "usd": 335911.1431796758, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BARD", "token": "0xf0DB65D17e30a966C2ae6A21f6BBA71cea6e9754", "amount": 3102719.864720412, "usd": 331922.76568806026, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AMP", "token": "0xfF20817765cB7f73d4bde2e66e067E58D11095C2", "amount": 495668535.3447698, "usd": 327289.9338881515, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BREV", "token": "0x086F405146Ce90135750Bbec9A063a8B20A8bfFb", "amount": 3920273.7408643817, "usd": 314986.15453097137, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WOO", "token": "0x4691937a7508860F876c9c0a2a617E7d9E945D4B", "amount": 31654227.742414653, "usd": 315210.90060530056, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ANIME", "token": "0x4DC26fC5854e7648a064a4ABD590bBE71724C277", "amount": 111178556.75026967, "usd": 300623.48209602665, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RARE", "token": "0xba5BDe662c17e2aDFF1075610382B9B691296350", "amount": 25997401.95855996, "usd": 298841.69535776426, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "GLM", "token": "0x7DD9c5Cba05E151C895FDe1CF355C9A1D5DA6429", "amount": 2852017.4936494525, "usd": 292371.72134397994, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "F", "token": "0x6e15A54B5EcAc17e58daDedDbe8506a7560252F9", "amount": 103201398.15947889, "usd": 289796.7501296879, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ARPA", "token": "0xBA50933C268F567BDC86E1aC131BE072C6B0b71a", "amount": 31465116.18334662, "usd": 288716.35447050456, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "IDRT", "token": "0x998FFE1E43fAcffb941dc337dD0468d52bA5b48A", "amount": 5549598659.9, "usd": 288967.60222099297, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "TURBO", "token": "0xA35923162C49cF95e6BF26623385eb431ad920D3", "amount": 363402600.6584501, "usd": 279932.6573132107, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "MDT", "token": "0x814e0908b12A99FeCf5BC101bB5d0b8B5cDf7d26", "amount": 47126774.28884364, "usd": 280192.2365343199, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ID", "token": "0x2dfF88A56767223A5529eA5960Da7A3F5f766406", "amount": 9532239.91917208, "usd": 276854.0902452363, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EPIC", "token": "0x94314a14Df63779c99C0764a30e0CD22fA78fC0E", "amount": 2651242.6895434107, "usd": 268409.15864668536, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CHZ", "token": "0x3506424F91fD33084466F402d5D97f05F8e3b4AF", "amount": 21956415.285051025, "usd": 265235.25315663917, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SXT", "token": "0xE6Bfd33F52d82Ccb5b37E16D3dD81f9FFDAbB195", "amount": 32050145.04741385, "usd": 251357.42905319927, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "HEI", "token": "0xF8F173E20e15f3b6CB686FB64724D370689De083", "amount": 2575357.5665551717, "usd": 246474.5959071627, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "POND", "token": "0x57B946008913B82E4dF85f501cbAeD910e58D26C", "amount": 171041883.011701, "usd": 251445.25137784137, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "POWR", "token": "0x595832F8FC6BF59c85C527fEC3740A1b7a361269", "amount": 4543599.805451, "usd": 241001.62088073193, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RLC", "token": "0x607F4C5BB672230e8672085532f7e901544a7375", "amount": 484884.123388849, "usd": 235476.21637782032, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ESP", "token": "0x031De51F3E8016514Bd0963d0B2AB825A591Db9A", "amount": 2936523.547424043, "usd": 232370.04483121197, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SKL", "token": "0x00c83aeCC790e8a4453e5dD3B0B4b3680501a7A7", "amount": 58207810.202832416, "usd": 221692.01217281361, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SSV", "token": "0x9D65fF81a3c488d585bBfb0Bfe3c7707c7917f54", "amount": 96402.94711130246, "usd": 225582.89624044774, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "USDP", "token": "0x8E870D67F660D95d5be530380D0eC0bd388289E1", "amount": 215657.6538641921, "usd": 215657.6538641921, "price_source": "par $1.00 (stablecoin)" }, { "symbol": "SOLV", "token": "0x169E36F327cAA83d004f5c2668AC25A1424C940d", "amount": 47352437.81857462, "usd": 216806.4512229912, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ZRX", "token": "0xE41d2489571d322189246DaFA5ebDe1F4699F498", "amount": 2086691.1490862407, "usd": 199631.65554193157, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SHELL", "token": "0xf2c88757f8d03634671208935974B60a2a28Bdb3", "amount": 8562488.319552582, "usd": 196494.2938289389, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DEXE", "token": "0xde4EE8057785A7e8e800Db58F9784845A5C2Cbd6", "amount": 127565.2709103799, "usd": 186245.29552915465, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ACH", "token": "0xEd04915c23f00A313a544955524EB7DBD823143d", "amount": 40687129.21826851, "usd": 187721.0561733707, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DUSK", "token": "0x940a2dB1B7008B6C776d4faaCa729d6d4A4AA551", "amount": 1892761.9511081898, "usd": 181194.101579587, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ENA", "token": "0x57e114B691Db790C35207b2e685D4A43181e6061", "amount": 980906.42056259, "usd": 177514.6349292119, "price_source": "Coinbase ENA-USD 5-min candle close" }, { "symbol": "FARM", "token": "0xa0246c9032bC3A600820415aE600c6388619A14D", "amount": 25396.383484789043, "usd": 181076.21424654586, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "NOM", "token": "0x6e6F6d696e61decd6605bD4a57836c5DB6923340", "amount": 113468436.6816185, "usd": 177274.00799642623, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DIA", "token": "0x84cA8bc7997272c7CfB4D0Cd3D55cd942B3c9419", "amount": 1308353.9106179539, "usd": 167259.96393339924, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "HEMI", "token": "0xEb964A1A6fAB73b8c72A0D15c7337fA4804F484d", "amount": 35881718.28997202, "usd": 157042.79880535475, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DODO", "token": "0x43Dfc4159D86F3A37A5A4B3D4580b888ad7d4DDd", "amount": 6392316.351922664, "usd": 156202.5784524187, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SPELL", "token": "0x090185f2135308BaD17527004364eBcC2D37e5F6", "amount": 2109125003.3379858, "usd": 160736.4165043879, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "KNC", "token": "0xdeFA4e8a7bcBA345F687a2f1456F5Edd9CE97202", "amount": 1410169.418783452, "usd": 159428.11380998194, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ILV", "token": "0x767FE9EDC9E0dF98E07454847909b5E959D7ca0E", "amount": 54450.26984321307, "usd": 156816.77714845364, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "PORTAL", "token": "0x1Bbe973BeF3a977Fc51CbED703E8ffDEfE001Fed", "amount": 12430758.721026469, "usd": 157698.84267151158, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "BICO", "token": "0xF17e65822b568B3903685a7c9F496CF7656Cc6C2", "amount": 9945183.187738517, "usd": 158593.8472582286, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "UMA", "token": "0x04Fa0d235C4abf4BcF4787aF4CF447DE572eF828", "amount": 462485.0012049939, "usd": 152708.84751787936, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "ACX", "token": "0x44108f0223A3C3028F5Fe7AEC7f9bb2E66beF82F", "amount": 3300339.795052011, "usd": 148581.75962081284, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "IQ", "token": "0x579CEa1889991f68aCc35Ff5c3dd0621fF29b0C9", "amount": 200430507.46593514, "usd": 149376.84860421214, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "AI", "token": "0x4d7078DDd6cCFED2F85dB5B7D3Ff16828d378d48", "amount": 7386003.49858551, "usd": 126918.27743836395, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "TLM", "token": "0x888888848B652B3E3a0f34c96E00EEC0F3a23F72", "amount": 114334242.0459, "usd": 123683.35301799324, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "EURI", "token": "0x9d1A7A3191102e9F900Faa10540837ba84dCBAE7", "amount": 113015.43343864263, "usd": 126577.28545127976, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "WXRP", "token": "0x39fBBABf11738317a448031930706cd3e612e1B9", "amount": 102229.06896288074, "usd": 145165.27792729065, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "HIGH", "token": "0x71Ab77b7dbB4fa7e017BC15090b2163221420282", "amount": 4921282.17451634, "usd": 125811.20083250136, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DOLO", "token": "0x0F81001eF0A83ecCE5ccebf63EB302c70a39a654", "amount": 5376971.899108231, "usd": 121675.55087463916, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "MEME", "token": "0xb131f4A55907B10d1F0A50d8ab8FA09EC342cd74", "amount": 273907172.96252424, "usd": 119538.56842430483, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "DAR", "token": "0x081131434f93063751813C619Ecca9C4dC7862a3", "amount": 3530547.655329, "usd": 111343.30507182932, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "CELR", "token": "0x4F9254C83EB525f9FCf346490bbb3ed28a81C667", "amount": 48991018.87290833, "usd": 113250.57868774729, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "SIGN", "token": "0x868FCEd65edBF0056c4163515dD840e9f287A4c3", "amount": 11146152.94697261, "usd": 113766.55389916005, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "RESOLV", "token": "0x259338656198eC7A76c729514D3CB45Dfbf768A1", "amount": 7175469.042060071, "usd": 110797.9960816388, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "LQTY", "token": "0x6DEA81C8171D0bA574754EF6F8b412F2Ed88c54D", "amount": 580061.5502796207, "usd": 104949.9562305415, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "TURTLE", "token": "0x66fD8de541c0594b4DccdFc13Bf3a390E50d3Afd", "amount": 3155489.861598789, "usd": 104562.42623214475, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "FTT", "token": "0x50D1c9771902476076eCFc8B2A83Ad6b9355a4c9", "amount": 445292.3663414534, "usd": 103176.02245078012, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" }, { "symbol": "HOT", "token": "0x6c6EE5e31d828De241282B9606C8e98Ea48526E2", "amount": 314140554.8596344, "usd": 103408.78784869445, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)" } ], "id": "E085", "seq": 85 }, { "unix": 1793313695, "t_utc": "2026-10-29T22:41:35Z", "t_et": "2026-10-29 06:41:35 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "WBTC handed to its seller wallet", "description": "167 WBTC moves from the main receiver to seller: wbtc + usde.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "to_label": "Seller: WBTC + USDe", "token": "WBTC", "amount": 167.14, "usd_at_time": 13179868, "price_source": "Coinbase BTC-USD 5-min candle close", "block": 26301454, "tx": "0x314928ff5fb72f708f77093c166dbb26a04709ac9c43ef19d2ed603d5543df66", "tx_url": "https://etherscan.io/tx/0x314928ff5fb72f708f77093c166dbb26a04709ac9c43ef19d2ed603d5543df66", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x314928ff5fb72f708f77093c166dbb26a04709ac9c43ef19d2ed603d5543df66" ], "from_key": "RCV", "to_key": "SB3DD", "id": "E086", "seq": 86 }, { "unix": 1793313827, "t_utc": "2026-10-29T22:43:47Z", "t_et": "2026-10-29 06:43:47 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "WBTC dumped on decentralized exchanges (all of it)", "description": "Seller sells 167.14 WBTC in 3 transfers between 06:43:47 PM ET and 06:45:35 PM ET, mostly into 0x4585FE77\u2026. Coinbase WBTC price moved -0.0% from 10 minutes before the first sale to the last sale.", "from": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "from_label": "Seller: WBTC + USDe", "to": "0x4585FE77225b41b697C938B018E2Ac67Ac5a20c0", "to_label": "DEX pool/router used for WBTC (UniswapV3Pool)", "token": "WBTC", "amount": 167.14, "usd_at_time": 13180441, "price_source": "Coinbase BTC-USD average 5-min close over the selling window", "block": 26301465, "tx": "0x6c3c24672fec2a204222cbd01651d874874000e9780ea95519965ccc043fce6e", "tx_url": "https://etherscan.io/tx/0x6c3c24672fec2a204222cbd01651d874874000e9780ea95519965ccc043fce6e", "related_txs": [ "0x0d23850e754ecf8d922287cb1d8f1a07b5eefccd87951f860a35d4f533bd37e4", "0x6c3c24672fec2a204222cbd01651d874874000e9780ea95519965ccc043fce6e" ], "sources": [ "https://etherscan.io/tx/0x6c3c24672fec2a204222cbd01651d874874000e9780ea95519965ccc043fce6e" ], "from_key": "SB3DD", "to_key": "POOL_WBTC", "n_transfers": 3, "window_end_utc": "2026-10-29T22:45:35Z", "received": 167.14, "price_move_pct": -0.04702201707723619, "still_selling": false, "id": "E087", "seq": 87 }, { "unix": 1793314295, "t_utc": "2026-10-29T22:51:35Z", "t_et": "2026-10-29 06:51:35 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "17,584 ETH of sale proceeds parked in eth collector 3", "description": "Seller: UNI + ONDO forwards sale proceeds to a collector wallet.", "from": "0x42CDF00c85005630CC8605731B9364F712077810", "from_label": "Seller: UNI + ONDO", "to": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "to_label": "ETH collector 3", "token": "ETH", "amount": 17584.0, "usd_at_time": 39929044, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301504, "tx": "0x1ef5fae0b671cb2727238df3b51a376d4bb944352a0fad1402b930166e09699c", "tx_url": "https://etherscan.io/tx/0x1ef5fae0b671cb2727238df3b51a376d4bb944352a0fad1402b930166e09699c", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x1ef5fae0b671cb2727238df3b51a376d4bb944352a0fad1402b930166e09699c" ], "from_key": "S42CD", "to_key": "COL3", "id": "E088", "seq": 88 }, { "unix": 1793314319, "t_utc": "2026-10-29T22:51:59Z", "t_et": "2026-10-29 06:51:59 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "ENA dumped on decentralized exchanges (61% of 217,497,348 so far)", "description": "Seller sells 132,931,686.20 ENA in 15 transfers between 06:51:59 PM ET and 08:29:59 PM ET, mostly into 0x08B8cebf\u2026. Coinbase ENA price moved -6.4% from 10 minutes before the first sale to the last sale.", "from": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "from_label": "Seller: ENA + WBETH", "to": "0x08B8cebfcA0f49A9303bab1cC4e2C25D280f2c00", "to_label": "DEX pool/router used for ENA (UniswapV3Pool)", "token": "ENA", "amount": 132931686.20169264, "usd_at_time": 23240447, "price_source": "Coinbase ENA-USD average 5-min close over the selling window", "block": 26301506, "tx": "0xf026ea88f995e66ebf2cc8c2195c4548b2b7a4b50b1983bc9522a980bbe5513d", "tx_url": "https://etherscan.io/tx/0xf026ea88f995e66ebf2cc8c2195c4548b2b7a4b50b1983bc9522a980bbe5513d", "related_txs": [ "0x00cd5fb8785c1921109cbc23c466af70ee02f10533618885d28d335a692efbb1", "0xf026ea88f995e66ebf2cc8c2195c4548b2b7a4b50b1983bc9522a980bbe5513d" ], "sources": [ "https://etherscan.io/tx/0xf026ea88f995e66ebf2cc8c2195c4548b2b7a4b50b1983bc9522a980bbe5513d" ], "from_key": "S7F9D", "to_key": "POOL_ENA", "n_transfers": 15, "window_end_utc": "2026-10-30T00:29:59Z", "received": 217497348.01079366, "price_move_pct": -6.440866185452521, "still_selling": true, "id": "E089", "seq": 89 }, { "unix": 1793314427, "t_utc": "2026-10-29T22:53:47Z", "t_et": "2026-10-29 06:53:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "ONDO handed to the UNI seller", "description": "21,851,871 ONDO moves from the main receiver to seller: uni + ondo.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x42CDF00c85005630CC8605731B9364F712077810", "to_label": "Seller: UNI + ONDO", "token": "ONDO", "amount": 21851870.65, "usd_at_time": 8443563, "price_source": "Coinbase ONDO-USD 5-min candle close", "block": 26301515, "tx": "0x6bf04dd89cd7fb70b2eb02762c8515f67dbdff0d9101507fa3cc01a7120ea023", "tx_url": "https://etherscan.io/tx/0x6bf04dd89cd7fb70b2eb02762c8515f67dbdff0d9101507fa3cc01a7120ea023", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x6bf04dd89cd7fb70b2eb02762c8515f67dbdff0d9101507fa3cc01a7120ea023" ], "from_key": "RCV", "to_key": "S42CD", "id": "E090", "seq": 90 }, { "unix": 1793314535, "t_utc": "2026-10-29T22:55:35Z", "t_et": "2026-10-29 06:55:35 PM ET", "chain": "ethereum", "type": "recovery", "confidence": "onchain_verified", "title": "Binance starts moving leftovers out of Binance 14", "description": "Using its own key, Binance sends Binance 14's remaining tokens one by one to Binance 8 / Hot Wallet 20. That is 45 transfers worth about $338K by 8:07 PM ET, and it was still running at 8:30 PM ET. USDT and WLFI transfers revert (USDT because Tether had frozen Binance 14).", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0xF977814e90dA44bFA03b6295A0616a897441aceC", "to_label": "Binance 8 / Hot Wallet 20 (Binance-held)", "token": "various", "amount": null, "usd_at_time": 337802, "price_source": "Blockscout exchange_rate snapshot (not time-of-event)", "block": null, "tx": "0x2943ea1b8f654c6a192c9b0f05037b9f31c68cb661fe41d732d9eeb7e978a2f7", "tx_url": "https://etherscan.io/tx/0x2943ea1b8f654c6a192c9b0f05037b9f31c68cb661fe41d732d9eeb7e978a2f7", "related_txs": [ "0x2943ea1b8f654c6a192c9b0f05037b9f31c68cb661fe41d732d9eeb7e978a2f7", "0x0f931d6f44e1db6cf2eb941f09dfab3fe435fc40d7f6077ec958514d1135726e", "0x7a7f579bbdc03c03322ab84b3184dd493fc93d0e52f5fc5fd1e95ace59ef111c", "0x11658adc59bc478e8afe93b04dd265fb09231581dd3192e9a18bc5fd8cc65e93", "0x2db0e14e31e88621dca32024cdcd003260d963cd4924c79db21e564729436df8", "0x7d05905f65ec9132272277f831d035515807e5189fc7e41a8b9b2d1fc65954bb", "0xc85a49fb363e1cc186dd7d8929bebc087b4cb97453ca73bb824155590a16f45b", "0xca02edfe0d8a8166b2f1c3fbe0d1060746648ee5b31890baca78197aca2a9e14", "0x8d786d225a3eb127aac726e48509e70bdc06e4176ace8a01b5ff58aa8dc0ef99", "0xcb12f6e356ea072592dc876f85fc50045a40b1d5ba1c62416919a03b5c1e5922", "0x5d216de58c12dee4c20c76995c2cf385727f5e313d54bd225075738b7537206f", "0xa7e6793c2de22a49542d3a0f4f7ace03cdecb4c99ad4c2c1d8276fcc3abf127c", "0x2cc51d9c3b19184abd5387efb88f4627412f478f3b8ad3723cc9b705ffbb74c7", "0x9513ff7bc922d16f1fa59aad4cbcf20473fe397f95a632c5d2f6ac1dc0d460ef", "0xd49300a8e286ccc548d2074e15e6bdfe75a3e3916a4308f27a8f386bde63da62", "0xace0e9a04001b7f56f5d2c7741e13bd1199e2397017157435b4645550443d445", "0xd3df01ad4b048fa60106e02187983254608b46c221f68b2c8712ba1c97995811", "0x512f3e6c90283b6bd462b8fedd0652b860728680caa07a8d1fad89f1a4775cc1", "0xfe101c5ee7d83ea0a6a9a632f5b8d5c4f794b8b5fb87689d4b5a5ba00962cadd", "0x89b2a52d41b62dfb0c7901c2de1b54f6c3bff73d2494ccea7e88198640814c64", "0x62aeea95464dcd2e289f38556f60c2ccc2248030e104d70620d0865762e73f6a", "0x6002ef3abaf2dbb287562e93f2227f0d5f871aae7be371ac7488f819e2e5a8c1", "0x76651f3d23712f6ac51460c15896a96d61e2f073329b7a22e6971f7bcd5853cd", "0x52749355495a69a60916d8d726038989f81b8d84116796b986f982957bc0b880", "0xec00912f134748bceb5f668861ced6127cd8a7d6302c501297ad8bb95c31e09d", "0xa1cc00e856dec8a73cd4ba4248580f96ea628a8fc32080def3fbb714cfdd2f5f", "0x308d4ea7325f08fc38c0b07dd2a41793082d10cbaaa69b7966cc2c3d1f882901", "0x8a74c7f7bcc5ef050e1ec9a10eddb19383ad20157d6f8d11f22d6c0051828439", "0x7c6dd07bb76b9383a53ad51ed1618985d983cadf1a980230a15e4dc11698cdec", "0x86550c11932cb72a6528714cc653f4011e54a082303ccde38786c59edf83122f", "0x33b534fce40ab0830cf6e269b1a6e3676762f1a431255d6f2a2563ddbecf1654", "0x169965be033fae73f943d4923cd442d4ef703c837c722cafa8a0dfbfe095dca7", "0x5a57886497bf5d08eae0195b0cef10effbadea66e7b820f43f96b4685ade8e50", "0xf2b0d976c958cbacdfccf217b8b6476499d0f17b1777309cfff65aaec512f721", "0xd5c4614004084905125d18e8ed30d280eaa127495686fbfe286b7d5d5ef72bf0", "0xe88c47fd8150d497876a6a22d4e8559e290c308825e894490badb9b5ea898874", "0xd73da12e236956ec49a0d44dfe924c686329edc15b3e9dec17d542ed59e58dd8", "0xe27fd0aa2d97bca00f7a989d321842c89f697b333a27be992e6c2a12f7cbbf9e", "0xfbc9e8afb0aba37678d681906a646d87495283ebb832c41ac3d8a82219d41f1b", "0x3fb9aa8cbc31249626c0ace777c6e9bca47d99c154d444cf74d6d31ca144316c", "0xad8a703117b713e4907f255313352c8611381a5d00814ebfadb20cee31755233", "0xc45b2b86acf9006370f04ba42e1c9228d532f420e8800e08c2a592b7b1265119", "0x1474de0189a54bf42d5bce57b88d1aa62b68932d23ddee60e3d803f3d88e3d73", "0x7c5b76b913643c0be453938863009bf4f34741feb53984ffd84ff9175c29c526", "0xe7039080c805c9cd3819a0402ca19a9bae0f29753179eaa7f5a251711e0ecc95" ], "sources": [ "https://etherscan.io/tx/0x2943ea1b8f654c6a192c9b0f05037b9f31c68cb661fe41d732d9eeb7e978a2f7", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "B8", "id": "E091", "seq": 91 }, { "unix": 1793314607, "t_utc": "2026-10-29T22:56:47Z", "t_et": "2026-10-29 06:56:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "USDe handed to the same seller", "description": "9,707,547 USDe moves from the main receiver to seller: wbtc + usde.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "to_label": "Seller: WBTC + USDe", "token": "USDe", "amount": 9707546.77, "usd_at_time": 9707547, "price_source": "par $1.00 (stablecoin)", "block": 26301530, "tx": "0xfc5eefa601d35a9d004ed166c704ccfb65d92ebc45912ace23493ba8e4c4cc4f", "tx_url": "https://etherscan.io/tx/0xfc5eefa601d35a9d004ed166c704ccfb65d92ebc45912ace23493ba8e4c4cc4f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xfc5eefa601d35a9d004ed166c704ccfb65d92ebc45912ace23493ba8e4c4cc4f" ], "from_key": "RCV", "to_key": "SB3DD", "id": "E092", "seq": 92 }, { "unix": 1793314715, "t_utc": "2026-10-29T22:58:35Z", "t_et": "2026-10-29 06:58:35 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "USDE dumped on decentralized exchanges (16% of 9,707,547 so far)", "description": "Seller sells 1,568,475.01 USDE in 90 transfers between 06:58:35 PM ET and 08:29:11 PM ET, mostly into 0xE6D7EbB9\u2026.", "from": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "from_label": "Seller: WBTC + USDe", "to": "0xE6D7EbB9f1a9519dc06D557e03C522d53520e76A", "to_label": "DEX pool/router used for USDE (UniswapV3Pool)", "token": "USDE", "amount": 1568475.0060836868, "usd_at_time": 1568475, "price_source": "par $1.00 (stablecoin)", "block": 26301539, "tx": "0x6a16ac52a7bccddcce02c490bd4884024e4ba86ded15196dc3bbcd435823ce96", "tx_url": "https://etherscan.io/tx/0x6a16ac52a7bccddcce02c490bd4884024e4ba86ded15196dc3bbcd435823ce96", "related_txs": [ "0x856898950d9266804b2f883a61c0edc0022c972d4c1a4bef54faf6c6d2575822", "0x6a16ac52a7bccddcce02c490bd4884024e4ba86ded15196dc3bbcd435823ce96" ], "sources": [ "https://etherscan.io/tx/0x6a16ac52a7bccddcce02c490bd4884024e4ba86ded15196dc3bbcd435823ce96" ], "from_key": "SB3DD", "to_key": "POOL_USDE", "n_transfers": 90, "window_end_utc": "2026-10-30T00:29:11Z", "received": 9707546.77, "price_move_pct": null, "still_selling": true, "id": "E093", "seq": 93 }, { "unix": 1793314919, "t_utc": "2026-10-29T23:01:59Z", "t_et": "2026-10-29 07:01:59 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "ONDO dumped on decentralized exchanges (all of it)", "description": "Seller sells 21,851,870.65 ONDO in 29 transfers between 07:01:59 PM ET and 07:19:11 PM ET, mostly into 0x7b1E5D98\u2026. Coinbase ONDO price moved -1.0% from 10 minutes before the first sale to the last sale.", "from": "0x42CDF00c85005630CC8605731B9364F712077810", "from_label": "Seller: UNI + ONDO", "to": "0x7b1E5D984A43eE732de195628d20d05CFaBc3cC7", "to_label": "DEX pool/router used for ONDO (UniswapV3Pool)", "token": "ONDO", "amount": 21851870.65, "usd_at_time": 8319881, "price_source": "Coinbase ONDO-USD average 5-min close over the selling window", "block": 26301556, "tx": "0xc10cc028d5987c9314d09186b5ba69c6f06390f11307d55e21a644452c012d08", "tx_url": "https://etherscan.io/tx/0xc10cc028d5987c9314d09186b5ba69c6f06390f11307d55e21a644452c012d08", "related_txs": [ "0xeb2fb8b3a577fd9d4dd71d70e80b46c0c9e4b5288cb536e6196a42ed8ad6c697", "0xc10cc028d5987c9314d09186b5ba69c6f06390f11307d55e21a644452c012d08" ], "sources": [ "https://etherscan.io/tx/0xc10cc028d5987c9314d09186b5ba69c6f06390f11307d55e21a644452c012d08" ], "from_key": "S42CD", "to_key": "POOL_ONDO", "n_transfers": 29, "window_end_utc": "2026-10-29T23:19:11Z", "received": 21851870.65, "price_move_pct": -0.9782608695652173, "still_selling": false, "id": "E094", "seq": 94 }, { "unix": 1793315027, "t_utc": "2026-10-29T23:03:47Z", "t_et": "2026-10-29 07:03:47 PM ET", "chain": "ethereum", "type": "recovery", "confidence": "onchain_verified", "title": "Synthetix claws back 8.4M SNX", "description": "A transaction sent by Synthetix governance moves 8,405,741.58 SNX out of the attacker's wallet into the Synthetix protocolDAO.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0xEb3107117FEAd7de89Cd14D463D340A2E6917769", "to_label": "Synthetix protocolDAO", "token": "SNX", "amount": 8405741.58, "usd_at_time": 1575009, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)", "block": 26301565, "tx": "0x0d4a20dd52946d5d15292161522daf475a6a971bff815dd5fb6623d23caf776f", "tx_url": "https://etherscan.io/tx/0x0d4a20dd52946d5d15292161522daf475a6a971bff815dd5fb6623d23caf776f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x0d4a20dd52946d5d15292161522daf475a6a971bff815dd5fb6623d23caf776f" ], "from_key": "RCV", "to_key": "SNXDAO", "id": "E095", "seq": 95 }, { "unix": 1793315147, "t_utc": "2026-10-29T23:05:47Z", "t_et": "2026-10-29 07:05:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "6,333 ETH of sale proceeds parked in eth collector 4", "description": "Seller: AAVE + RLUSD forwards sale proceeds to a collector wallet.", "from": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "from_label": "Seller: AAVE + RLUSD", "to": "0x54401f80Da97893a15D43566184635B6674BC942", "to_label": "ETH collector 4 (AAVE/RLUSD proceeds)", "token": "ETH", "amount": 6333.0, "usd_at_time": 14344182, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301575, "tx": "0x2c64a2e2225cd3443b513a1ea8dbfe3bc30d48d253e9e7543c3541dc7f031984", "tx_url": "https://etherscan.io/tx/0x2c64a2e2225cd3443b513a1ea8dbfe3bc30d48d253e9e7543c3541dc7f031984", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x2c64a2e2225cd3443b513a1ea8dbfe3bc30d48d253e9e7543c3541dc7f031984" ], "from_key": "SE702", "to_key": "COL4", "id": "E096", "seq": 96 }, { "unix": 1793315939, "t_utc": "2026-10-29T23:18:59Z", "t_et": "2026-10-29 07:18:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "5,700 ETH of sale proceeds parked in eth collector 5", "description": "Seller: WBTC + USDe forwards sale proceeds to a collector wallet.", "from": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "from_label": "Seller: WBTC + USDe", "to": "0x79e70d139fC05AA75F75611fDF2680E9952B544A", "to_label": "ETH collector 5 (WBTC/USDe proceeds)", "token": "ETH", "amount": 5700.0, "usd_at_time": 12904800, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301641, "tx": "0x9b3c5eda460d6b0ad33d0ac3e739c88323f101f61331d83b1ba55920ef460f71", "tx_url": "https://etherscan.io/tx/0x9b3c5eda460d6b0ad33d0ac3e739c88323f101f61331d83b1ba55920ef460f71", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x9b3c5eda460d6b0ad33d0ac3e739c88323f101f61331d83b1ba55920ef460f71" ], "from_key": "SB3DD", "to_key": "COL5", "id": "E097", "seq": 97 }, { "unix": 1793316083, "t_utc": "2026-10-29T23:21:23Z", "t_et": "2026-10-29 07:21:23 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "WLD handed to its seller wallet", "description": "17,317,869 WLD moves from the main receiver to seller: wld.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "to_label": "Seller: WLD", "token": "WLD", "amount": 17317869.01, "usd_at_time": 6679502, "price_source": "Coinbase WLD-USD 5-min candle close", "block": 26301653, "tx": "0xa4e909e76911170281927808ac29d0c4447ba92390190b62367006c8db7dc619", "tx_url": "https://etherscan.io/tx/0xa4e909e76911170281927808ac29d0c4447ba92390190b62367006c8db7dc619", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xa4e909e76911170281927808ac29d0c4447ba92390190b62367006c8db7dc619" ], "from_key": "RCV", "to_key": "S8C71", "id": "E098", "seq": 98 }, { "unix": 1793316287, "t_utc": "2026-10-29T23:24:47Z", "t_et": "2026-10-29 07:24:47 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "The \"approval\" that went viral on X", "description": "The PEPE seller approves Uniswap SwapRouter02 to spend its last 1.4586T PEPE. A post on X flagged it as a coming dump; the bag was sold within 7 minutes, and most of the PEPE had already been sold before the post.", "from": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "from_label": "Seller: PEPE", "to": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "to_label": "DEX pool/router used for PEPE (PEPE / WETH)", "token": "PEPE", "amount": 1458647465763.82, "usd_at_time": null, "price_source": null, "block": null, "tx": "0x35ba1df93439ab151a077ae661f72d567493d139c7801912c2f0b78a1b68eef7", "tx_url": "https://etherscan.io/tx/0x35ba1df93439ab151a077ae661f72d567493d139c7801912c2f0b78a1b68eef7", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x35ba1df93439ab151a077ae661f72d567493d139c7801912c2f0b78a1b68eef7", "https://x.com/0xasrequired/status/2115948328785744060" ], "from_key": "S600D", "to_key": "POOL_PEPE", "id": "E099", "seq": 99 }, { "unix": 1793316287, "t_utc": "2026-10-29T23:24:47Z", "t_et": "2026-10-29 07:24:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "2,939 ETH of sale proceeds parked in eth collector 3", "description": "Seller: UNI + ONDO forwards sale proceeds to a collector wallet.", "from": "0x42CDF00c85005630CC8605731B9364F712077810", "from_label": "Seller: UNI + ONDO", "to": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "to_label": "ETH collector 3", "token": "ETH", "amount": 2939.4800000000005, "usd_at_time": 6664095, "price_source": "Coinbase ETH-USD 5-min candle close", "block": 26301670, "tx": "0x654cb44f9b09321cc86fab010323473b33da2e5a8f6d362ba0d751ee8c158dd2", "tx_url": "https://etherscan.io/tx/0x654cb44f9b09321cc86fab010323473b33da2e5a8f6d362ba0d751ee8c158dd2", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x654cb44f9b09321cc86fab010323473b33da2e5a8f6d362ba0d751ee8c158dd2" ], "from_key": "S42CD", "to_key": "COL3", "id": "E100", "seq": 100 }, { "unix": 1793316431, "t_utc": "2026-10-29T23:27:11Z", "t_et": "2026-10-29 07:27:11 PM ET", "chain": "ethereum", "type": "recovery", "confidence": "onchain_partial", "title": "58.4M SAND moved out of the main receiver by a Safe", "description": "A Gnosis Safe transaction moves all 58.4M SAND from the attacker's wallet to Safe 0x84A9\u2026. Likely The Sandbox using an admin function; not confirmed.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x84A917f50B16d1564D53AC85C63d7c48b645D87D", "to_label": "Gnosis Safe that took SAND (issuer-side, unconfirmed)", "token": "SAND", "amount": 58397344.21, "usd_at_time": 2575323, "price_source": "Coinbase SAND-USD 5-min candle close", "block": 26301681, "tx": "0x0a68d2f422c51c5a9261a098f92d8c551445ffe8b20fbb86770704be2cab06a8", "tx_url": "https://etherscan.io/tx/0x0a68d2f422c51c5a9261a098f92d8c551445ffe8b20fbb86770704be2cab06a8", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x0a68d2f422c51c5a9261a098f92d8c551445ffe8b20fbb86770704be2cab06a8" ], "from_key": "RCV", "to_key": "SANDSAFE", "id": "E101", "seq": 101 }, { "unix": 1793316443, "t_utc": "2026-10-29T23:27:23Z", "t_et": "2026-10-29 07:27:23 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "WLD dumped on decentralized exchanges (all of it)", "description": "Seller sells 17,317,869.01 WLD in 18 transfers between 07:27:23 PM ET and 08:02:23 PM ET, mostly into 0x84182045\u2026. Coinbase WLD price moved -2.5% from 10 minutes before the first sale to the last sale.", "from": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "from_label": "Seller: WLD", "to": "0x841820459769cd629B10a36FD12E603938cc2679", "to_label": "DEX pool/router used for WLD (UniswapV3Pool)", "token": "WLD", "amount": 17317869.01, "usd_at_time": 6634909, "price_source": "Coinbase WLD-USD average 5-min close over the selling window", "block": 26301682, "tx": "0xff3f64220b0e5d1af141218ea8236893d298ddd135557c96b730fb7618677440", "tx_url": "https://etherscan.io/tx/0xff3f64220b0e5d1af141218ea8236893d298ddd135557c96b730fb7618677440", "related_txs": [ "0x03ff245f6f3404bc7f2966c1ee1964d9919537713d856c9207ea479e904ce080", "0xff3f64220b0e5d1af141218ea8236893d298ddd135557c96b730fb7618677440" ], "sources": [ "https://etherscan.io/tx/0xff3f64220b0e5d1af141218ea8236893d298ddd135557c96b730fb7618677440" ], "from_key": "S8C71", "to_key": "POOL_WLD", "n_transfers": 18, "window_end_utc": "2026-10-30T00:02:23Z", "received": 17317869.01, "price_move_pct": -2.4980685037342187, "still_selling": false, "id": "E102", "seq": 102 }, { "unix": 1793316527, "t_utc": "2026-10-29T23:28:47Z", "t_et": "2026-10-29 07:28:47 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "FUN handed to its seller wallet", "description": "714,911,344 FUN moves from the main receiver to seller: fun.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "to_label": "Seller: FUN", "token": "FUN", "amount": 714911344.0, "usd_at_time": 6237988, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)", "block": 26301689, "tx": "0x5ea2d646695ce9f2633355e2750995f91a13c8e505ea34fabcb70c77a7eef82f", "tx_url": "https://etherscan.io/tx/0x5ea2d646695ce9f2633355e2750995f91a13c8e505ea34fabcb70c77a7eef82f", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x5ea2d646695ce9f2633355e2750995f91a13c8e505ea34fabcb70c77a7eef82f" ], "from_key": "RCV", "to_key": "S06EA", "id": "E103", "seq": 103 }, { "unix": 1793316695, "t_utc": "2026-10-29T23:31:35Z", "t_et": "2026-10-29 07:31:35 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "FUN dumped on decentralized exchanges (2% of 714,911,344 so far)", "description": "Seller sells 15,375,007.64 FUN in 55 transfers between 07:31:35 PM ET and 08:27:47 PM ET, mostly into 0x05B0c1D8\u2026.", "from": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "from_label": "Seller: FUN", "to": "0x05B0c1D8839eF3a989B33B6b63D3aA96cB7Ec142", "to_label": "DEX pool/router used for FUN (JamUniswapV2Pair)", "token": "FUN", "amount": 15375007.63632895, "usd_at_time": 134155, "price_source": "Blockscout exchange_rate snapshot ~8 PM ET Oct 29 (not time-of-event)", "block": 26301703, "tx": "0x0300225544b637a221202aec010c4ddfb156f58b333113715c7d8b303c5e9c56", "tx_url": "https://etherscan.io/tx/0x0300225544b637a221202aec010c4ddfb156f58b333113715c7d8b303c5e9c56", "related_txs": [ "0x649ae8e01ca255bcf91ec657b0dfc239f390d9b02d89c78e9d1a4736b56bf4ee", "0x0300225544b637a221202aec010c4ddfb156f58b333113715c7d8b303c5e9c56" ], "sources": [ "https://etherscan.io/tx/0x0300225544b637a221202aec010c4ddfb156f58b333113715c7d8b303c5e9c56" ], "from_key": "S06EA", "to_key": "POOL_FUN", "n_transfers": 55, "window_end_utc": "2026-10-30T00:27:47Z", "received": 714911344.0, "price_move_pct": null, "still_selling": true, "id": "E104", "seq": 104 }, { "unix": 1793317007, "t_utc": "2026-10-29T23:36:47Z", "t_et": "2026-10-29 07:36:47 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Five empty sweep attempts", "description": "Between 7:36 and 7:54 PM ET the attacker calls sweep() five more times. The transactions succeed but move nothing, because Binance 14 is empty. The attacker is polling for fresh deposits.", "from": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "from_label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "to": "0x28C6c06298d514Db089934071355E5743bf21d60", "to_label": "Binance 14 (hot wallet)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26301729, "tx": "0x5059928573a6e4ed48dda491648cf619c2368e81fc6cce3f9e97a779ad521f1f", "tx_url": "https://etherscan.io/tx/0x5059928573a6e4ed48dda491648cf619c2368e81fc6cce3f9e97a779ad521f1f", "related_txs": [ "0x5059928573a6e4ed48dda491648cf619c2368e81fc6cce3f9e97a779ad521f1f", "0xe016ae73ea9226464435b2b6203bbbb8e10d3c2d68f4facee2d708a47606af23", "0x833202076503f1c27852294262343011815038c07708d362f5bb0d8104bc7bda", "0x698dac6c9133842177ceba0e8ba7faa6b39bc99cbc12910d33e690aae1f139f3", "0xac08e5693512be1090898f1c42e86fc9f32c6f3a326c8ade5b93af26b831da19" ], "sources": [ "https://etherscan.io/tx/0x5059928573a6e4ed48dda491648cf619c2368e81fc6cce3f9e97a779ad521f1f" ], "from_key": "ATK", "to_key": "B14", "id": "E105", "seq": 105 }, { "unix": 1793318015, "t_utc": "2026-10-29T23:53:35Z", "t_et": "2026-10-29 07:53:35 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Circle blacklists Binance 14", "description": "Circle does the same for USDC on the victim wallet.", "from": "issuer:circle", "from_label": "Circle (USDC issuer)", "to": "0x28C6c06298d514Db089934071355E5743bf21d60", "to_label": "Binance 14 (hot wallet)", "token": "USDC", "amount": null, "usd_at_time": null, "price_source": null, "block": 26301812, "tx": "0xb57c2143508019ac592a9dadb988b39003589f6f54c1924d4163f60520a784f5", "tx_url": "https://etherscan.io/tx/0xb57c2143508019ac592a9dadb988b39003589f6f54c1924d4163f60520a784f5", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xb57c2143508019ac592a9dadb988b39003589f6f54c1924d4163f60520a784f5", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "CIRCLE", "to_key": "B14", "id": "E106", "seq": 106 }, { "unix": 1793318099, "t_utc": "2026-10-29T23:54:59Z", "t_et": "2026-10-29 07:54:59 PM ET", "chain": "ethereum", "type": "freeze", "confidence": "onchain_verified", "title": "Circle blacklists Hot Wallet 34", "description": "Hot Wallet 34 (2.96M USDC left) is frozen, closing the route the attacker used to pull 823M USDC.", "from": "issuer:circle", "from_label": "Circle (USDC issuer)", "to": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "to_label": "Binance: Hot Wallet 34 (contract wallet)", "token": "USDC", "amount": null, "usd_at_time": null, "price_source": null, "block": 26301819, "tx": "0xf2faba0e8ab74e84dde0c7ded90effe20a4cedbde1653f0c98220d2f774eeebb", "tx_url": "https://etherscan.io/tx/0xf2faba0e8ab74e84dde0c7ded90effe20a4cedbde1653f0c98220d2f774eeebb", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xf2faba0e8ab74e84dde0c7ded90effe20a4cedbde1653f0c98220d2f774eeebb", "https://decrypt.co/382191/binance-suspected-hack-5-billion-tether-circle-freeze-crypto", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "CIRCLE", "to_key": "HW34", "id": "E107", "seq": 107 }, { "unix": 1793318207, "t_utc": "2026-10-29T23:56:47Z", "t_et": "2026-10-29 07:56:47 PM ET", "chain": "ethereum", "type": "drain", "confidence": "onchain_verified", "title": "Drain #5: sweeper grabs new deposits", "description": "The attacker calls sweep() on Binance 14, which now runs the sweeper's code. It sends 2,961.91 ETH to fresh receiver (later sweeps). Value at the time: $6.7M.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "to_label": "Fresh receiver (later sweeps)", "token": "ETH", "amount": 2961.9108209382853, "usd_at_time": 6659383, "price_source": "ETH: Coinbase 5-min close; tokens: see token_breakdown", "block": 26301828, "tx": "0x4395d51dc3f3c51230329efc3548f74edbced353ff3f795c517cc57fa650f89b", "tx_url": "https://etherscan.io/tx/0x4395d51dc3f3c51230329efc3548f74edbced353ff3f795c517cc57fa650f89b", "related_txs": [], "sources": [ "https://etherscan.io/tx/0x4395d51dc3f3c51230329efc3548f74edbced353ff3f795c517cc57fa650f89b", "https://dev.to/ghost_wayne/was-binance-hacked-what-the-onchain-data-shows-october-29-2026-50kl" ], "from_key": "B14", "to_key": "RCV2", "eth": 2961.9108209382853, "token_breakdown": [], "id": "E108", "seq": 108 }, { "unix": 1793318939, "t_utc": "2026-10-30T00:08:59Z", "t_et": "2026-10-29 08:08:59 PM ET", "chain": "ethereum", "type": "sweep", "confidence": "onchain_verified", "title": "ZAMA handed to its seller wallet", "description": "87,853,171 ZAMA moves from the main receiver to seller: zama.", "from": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "from_label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "to": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "to_label": "Seller: ZAMA", "token": "ZAMA", "amount": 87853170.57, "usd_at_time": 5745597, "price_source": "Coinbase ZAMA-USD 5-min candle close", "block": 26301888, "tx": "0xdd738cae58e604dccbe4ed7b35ec9df12f3858b0c350221c87f35baca0be126d", "tx_url": "https://etherscan.io/tx/0xdd738cae58e604dccbe4ed7b35ec9df12f3858b0c350221c87f35baca0be126d", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xdd738cae58e604dccbe4ed7b35ec9df12f3858b0c350221c87f35baca0be126d" ], "from_key": "RCV", "to_key": "S0084", "id": "E109", "seq": 109 }, { "unix": 1793319035, "t_utc": "2026-10-30T00:10:35Z", "t_et": "2026-10-29 08:10:35 PM ET", "chain": "ethereum", "type": "recovery", "confidence": "onchain_verified", "title": "Binance revokes the delegation on Binance 14", "description": "Binance 14 sends its own type-4 transaction with an authorization pointing to the zero address (nonce 18914904), which removes the attacker's sweeper code. An on-chain read at 8:23 PM ET confirms that Binance 14 has no code again. The sweeper had been live on Binance 14 for 3 hours 50 minutes.", "from": "0x28C6c06298d514Db089934071355E5743bf21d60", "from_label": "Binance 14 (hot wallet)", "to": "0x28C6c06298d514Db089934071355E5743bf21d60", "to_label": "Binance 14 (hot wallet)", "token": null, "amount": null, "usd_at_time": null, "price_source": null, "block": 26301896, "tx": "0xafbf94c92a8d749988411669fa14d4f8866d9b4420b4ebd299f28e958dac7209", "tx_url": "https://etherscan.io/tx/0xafbf94c92a8d749988411669fa14d4f8866d9b4420b4ebd299f28e958dac7209", "related_txs": [], "sources": [ "https://etherscan.io/tx/0xafbf94c92a8d749988411669fa14d4f8866d9b4420b4ebd299f28e958dac7209" ], "from_key": "B14", "to_key": "B14", "id": "E110", "seq": 110 }, { "unix": 1793319095, "t_utc": "2026-10-30T00:11:35Z", "t_et": "2026-10-29 08:11:35 PM ET", "chain": "ethereum", "type": "swap", "confidence": "onchain_verified", "title": "ZAMA dumped on decentralized exchanges (39% of 87,853,171 so far)", "description": "Seller sells 34,523,185.43 ZAMA in 19 transfers between 08:11:35 PM ET and 08:23:47 PM ET, mostly into 0x4d68B530\u2026. Coinbase ZAMA price moved -10.0% from 10 minutes before the first sale to the last sale.", "from": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "from_label": "Seller: ZAMA", "to": "0x4d68B530920D26c3b01C99fecC19e21011B72bBD", "to_label": "DEX pool/router used for ZAMA (UniswapV3Pool)", "token": "ZAMA", "amount": 34523185.428966925, "usd_at_time": 2121450, "price_source": "Coinbase ZAMA-USD average 5-min close over the selling window", "block": 26301901, "tx": "0x9f826154a943f3b91ee43b7ef3fe7843c931f9244f28255a3f52d72636323dcb", "tx_url": "https://etherscan.io/tx/0x9f826154a943f3b91ee43b7ef3fe7843c931f9244f28255a3f52d72636323dcb", "related_txs": [ "0xa6fd4c1406f0c7ce8399304802ddc1c708af252e516d3bc8d3fbcd9dc5af10e1", "0x9f826154a943f3b91ee43b7ef3fe7843c931f9244f28255a3f52d72636323dcb" ], "sources": [ "https://etherscan.io/tx/0x9f826154a943f3b91ee43b7ef3fe7843c931f9244f28255a3f52d72636323dcb" ], "from_key": "S0084", "to_key": "POOL_ZAMA", "n_transfers": 19, "window_end_utc": "2026-10-30T00:23:47Z", "received": 87853170.57, "price_move_pct": -10.03398847347421, "still_selling": true, "id": "E111", "seq": 111 }, { "unix": 1793319500, "t_utc": "2026-10-30T00:18:20Z", "t_et": "2026-10-29 08:18:20 PM ET", "chain": "arbitrum", "type": "sweep", "confidence": "onchain_verified", "title": "Arbitrum: ARB sent to address 0x\u20260DA0", "description": "The hop sends all 74.56M ARB to 0x0000\u20260DA0, an address with no code. Nobody is known to hold a key for it, so this looks like a deliberate burn or a mistake. Why is unknown.", "from": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "from_label": "ARB hop (Arbitrum)", "to": "0x0000000000000000000000000000000000000da0", "to_label": "0x\u20260DA0 (no code; ARB sink, purpose unknown)", "token": "ARB", "amount": 74559805.2, "usd_at_time": 11183151, "price_source": "CoinGecko ARB spot ~8:30 PM ET (approximate)", "block": null, "tx": "0x75e81a231a86e26a61e22dd2e6521504873a71a7ac1b2143c06e52796ceeedb6", "tx_url": null, "related_txs": [], "sources": [ "https://arbiscan.io/tx/0x75e81a231a86e26a61e22dd2e6521504873a71a7ac1b2143c06e52796ceeedb6" ], "from_key": "ARBH", "to_key": "ARBX", "id": "E112", "seq": 112 } ] }, "graph": { "meta": { "title": "Binance hot-wallet hack \u2014 on-chain timeline", "as_of_et": "2026-10-29 08:30 PM ET", "as_of_block": 26301992, "first": 1793173187, "last": 1793319500, "attack_start": 1793305259, "n_events": 112, "n_nodes": 67, "n_links": 106, "roles": { "mixer": 2, "attacker": 2, "sweeper": 2, "rehearsal": 3, "victim": 5, "receiver": 4, "hop": 12, "dex": 14, "collector": 5, "lending": 1, "issuer": 5, "burn": 2, "seller": 9, "cex": 1 }, "link_kinds": { "prep_funding": 6, "prep_deploy": 2, "prep_rehearsal": 9, "delegation": 1, "drain": 13, "sweep": 37, "swap": 18, "freeze": 15, "recovery": 5 }, "drained_usd_ethereum_arbitrum": 3802590039, "drained_eth": 200630.004562, "frozen_verified": { "USDT": 1380464583.4099998, "USDC": 823000000.0, "XAUt": 12574 }, "attacker_eth_held_now": 472831.77, "eth_price_now": 2205.18, "price_sources": { "ETH/BTC/listed tokens": "Coinbase Exchange public 5-minute candles (close of the candle containing the event)", "stablecoins": "par $1.00", "WBETH": "ETH candle x Blockscout WBETH/ETH ratio", "unlisted tokens": "Blockscout exchange_rate snapshot read ~8:00-8:30 PM ET (NOT time-of-event; flagged per row)", "ARB, TRX": "CoinGecko spot ~8:30 PM ET (approximate)" }, "role_legend": { "victim": "Binance hot wallet", "sweeper": "attacker contract installed via EIP-7702", "attacker": "attacker-controlled EOA", "rehearsal": "attacker test wallet", "mixer": "Tornado Cash pool", "receiver": "first-hop attacker receiver", "hop": "laundering hop", "seller": "per-token selling wallet", "collector": "ETH parking wallet", "dex": "DEX pool/router", "lending": "lending protocol", "issuer": "token issuer (freeze/clawback)", "cex": "Binance-held wallet", "burn": "burn/sink address" }, "scrubber_hint": "links carry ts (unix, UTC) and optional ts_end; nodes carry first_ts/last_ts; size by usd_in+usd_out or eth_now" }, "nodes": [ { "id": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "key": "TC01", "t": "mixer", "label": "Tornado Cash 0.1 ETH pool", "first_ts": 1793173187, "last_ts": 1793262191, "usd_in": 0, "usd_out": 915, "eth_in": 0.0, "eth_out": 0.39, "events": [ "E001", "E002", "E004", "E005" ], "frozen": false }, { "id": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "key": "ATK", "t": "attacker", "label": "Attacker / initiator (\"Binance Hot Wallet Exploiter\")", "first_ts": 1793173187, "last_ts": 1793317007, "usd_in": 3217, "usd_out": 0, "eth_in": 1.38, "eth_out": 0.0, "events": [ "E001", "E002", "E003", "E005", "E006", "E007", "E010", "E011", "E013", "E014", "E016", "E017", "E019", "E020", "E105" ], "eth_now": 1.17, "usd_now": 2590, "frozen": false }, { "id": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "key": "SWP0", "t": "sweeper", "label": "Sweeper v1 (rehearsal delegate)", "first_ts": 1793240939, "last_ts": 1793240939, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E003" ], "frozen": false }, { "id": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "key": "FUND2", "t": "attacker", "label": "Attacker gas wallet (Tornado-funded)", "first_ts": 1793257715, "last_ts": 1793298047, "usd_in": 2554, "usd_out": 4907, "eth_in": 2.09, "eth_out": 2.09, "events": [ "E004", "E012", "E015", "E018", "E019" ], "frozen": false }, { "id": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "key": "T1", "t": "rehearsal", "label": "Rehearsal wallet 1", "first_ts": 1793281895, "last_ts": 1793283599, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E006", "E008", "E010" ], "frozen": false }, { "id": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "key": "T2", "t": "rehearsal", "label": "Rehearsal wallet 2", "first_ts": 1793281919, "last_ts": 1793283851, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E007", "E009", "E011" ], "frozen": false }, { "id": "0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3c2936", "key": "TC1", "t": "mixer", "label": "Tornado Cash 1 ETH pool", "first_ts": 1793285687, "last_ts": 1793285687, "usd_in": 0, "usd_out": 2328, "eth_in": 0.0, "eth_out": 0.99, "events": [ "E012" ], "frozen": false }, { "id": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "key": "SWP", "t": "sweeper", "label": "Sweeper contract (EIP-7702 delegate)", "first_ts": 1793289551, "last_ts": 1793289551, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E013" ], "frozen": false }, { "id": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "key": "T3", "t": "rehearsal", "label": "Rehearsal wallet 3 (final sweeper test)", "first_ts": 1793290847, "last_ts": 1793292443, "usd_in": 2379, "usd_out": 0, "eth_in": 1.01, "eth_out": 1.0, "events": [ "E014", "E015", "E016", "E017", "E018" ], "frozen": false }, { "id": "0x28C6c06298d514Db089934071355E5743bf21d60", "key": "B14", "t": "victim", "label": "Binance 14 (hot wallet)", "first_ts": 1793305259, "last_ts": 1793319035, "usd_in": 0, "usd_out": 2794466304, "eth_in": 0.0, "eth_out": 172624.4, "events": [ "E020", "E021", "E042", "E068", "E076", "E085", "E091", "E105", "E106", "E108", "E110", "E110" ], "frozen": false }, { "id": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "key": "RCV", "t": "receiver", "label": "Main receiver (\"Binance Hot Wallet Exploiter 2\")", "first_ts": 1793305463, "last_ts": 1793318939, "usd_in": 3747416443, "usd_out": 1549438671, "eth_in": 197539.6, "eth_out": 195460.0, "events": [ "E021", "E022", "E023", "E024", "E025", "E027", "E028", "E034", "E036", "E042", "E043", "E058", "E060", "E063", "E066", "E068", "E069", "E071", "E073", "E075", "E078", "E081", "E082", "E086", "E090", "E092", "E095", "E098", "E101", "E103", "E109" ], "eth_now": 2071.4, "usd_now": 4567813, "frozen": true }, { "id": "0xDFd5293D8e347dFe59E90eFd55b2956a1343963d", "key": "B16", "t": "victim", "label": "Binance 16 (hot wallet)", "first_ts": 1793305487, "last_ts": 1793305487, "usd_in": 0, "usd_out": 174278381, "eth_in": 0.0, "eth_out": 28005.6, "events": [ "E022" ], "frozen": false }, { "id": "0x9749292D74Fd460982d0912eA9515EA24736C762", "key": "U9749", "t": "hop", "label": "USDT hop A (500M)", "first_ts": 1793305811, "last_ts": 1793310467, "usd_in": 500000000, "usd_out": 778377560, "eth_in": 0.0, "eth_out": 122310.0, "events": [ "E023", "E026", "E033", "E037", "E070" ], "frozen": false }, { "id": "0xb38e8c17e38363af6ebdcb3dae12e0243582891d", "key": "B54ARB", "t": "victim", "label": "Binance 54 (Arbitrum, label reported)", "first_ts": 1793305834, "last_ts": 1793305834, "usd_in": 0, "usd_out": 11183151, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E024" ], "frozen": false }, { "id": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "key": "U0DDF", "t": "hop", "label": "USDT hop B (200M)", "first_ts": 1793306003, "last_ts": 1793307707, "usd_in": 200000000, "usd_out": 208037714, "eth_in": 0.0, "eth_out": 3552.0, "events": [ "E025", "E029", "E030", "E031", "E038" ], "frozen": false }, { "id": "0x000000000004444c5dc75cB358380D2e3dE08A90", "key": "UNIV4", "t": "dex", "label": "Uniswap v4 PoolManager", "first_ts": 1793306063, "last_ts": 1793306063, "usd_in": 325000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E026" ], "frozen": false }, { "id": "0x8532FA14ACAf483729C449b8458aedDb900543D4", "key": "COL1", "t": "collector", "label": "ETH collector 1 (195,460 ETH)", "first_ts": 1793306327, "last_ts": 1793306327, "usd_in": 449468088, "usd_out": 0, "eth_in": 195460.0, "eth_out": 0.0, "events": [ "E027" ], "eth_now": 195460.0, "usd_now": 431024490, "frozen": false }, { "id": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "key": "HW34", "t": "victim", "label": "Binance: Hot Wallet 34 (contract wallet)", "first_ts": 1793306483, "last_ts": 1793318099, "usd_in": 0, "usd_out": 823000000, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E028", "E034", "E107" ], "frozen": false }, { "id": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "key": "UNIV3", "t": "dex", "label": "Uniswap v3 WETH/USDT pool", "first_ts": 1793306867, "last_ts": 1793308151, "usd_in": 110000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E029", "E044", "E048" ], "frozen": false }, { "id": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "key": "U8D53", "t": "hop", "label": "USDT hop C (\"Exploiter 3\"; Aave borrower)", "first_ts": 1793307179, "last_ts": 1793307767, "usd_in": 198037714, "usd_out": 242396075, "eth_in": 3552.0, "eth_out": 23314.5, "events": [ "E030", "E031", "E035", "E039", "E040", "E041" ], "frozen": false }, { "id": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "key": "TRX_SRC", "t": "hop", "label": "Tron hop TPBk\u2026 (created 20:44 UTC Oct 29)", "first_ts": 1793307372, "last_ts": 1793310162, "usd_in": 0, "usd_out": 226486945, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E032", "E067" ], "frozen": false }, { "id": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "key": "TRX_RCV", "t": "receiver", "label": "Tron receiver TSpe\u2026 (638.2M TRX)", "first_ts": 1793307372, "last_ts": 1793310162, "usd_in": 226486945, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E032", "E059", "E067" ], "frozen": false }, { "id": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "key": "U811F", "t": "hop", "label": "USDT hop H", "first_ts": 1793307551, "last_ts": 1793308103, "usd_in": 175000000, "usd_out": 175000000, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E033", "E047" ], "frozen": false }, { "id": "0x23878914EFE38d27C4D67Ab83ed1b93A74D4086a", "key": "AAVE", "t": "lending", "label": "Aave v3 (USDT reserve)", "first_ts": 1793307611, "last_ts": 1793307611, "usd_in": 60000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E035" ], "frozen": false }, { "id": "issuer:tether", "key": "TETHER", "t": "issuer", "label": "Tether (USDT / XAUt issuer)", "first_ts": 1793307695, "last_ts": 1793311583, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E036", "E037", "E038", "E041", "E051", "E052", "E055", "E057", "E059", "E066", "E076" ], "frozen": false }, { "id": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "key": "U77ED", "t": "hop", "label": "USDT hop D (7702 smart account)", "first_ts": 1793307719, "last_ts": 1793308055, "usd_in": 182396075, "usd_out": 223638120, "eth_in": 23314.5, "eth_out": 41397.81, "events": [ "E039", "E040", "E044", "E045", "E046" ], "frozen": false }, { "id": "issuer:circle", "key": "CIRCLE", "t": "issuer", "label": "Circle (USDC issuer)", "first_ts": 1793307899, "last_ts": 1793318099, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E043", "E106", "E107" ], "frozen": false }, { "id": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "key": "U7AA4", "t": "hop", "label": "USDT hop E (7702 smart account)", "first_ts": 1793308007, "last_ts": 1793308355, "usd_in": 173638120, "usd_out": 211259928, "eth_in": 41397.81, "eth_out": 57891.85, "events": [ "E045", "E046", "E048", "E049", "E050", "E051" ], "frozen": false }, { "id": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "key": "UAA24", "t": "hop", "label": "USDT hop I (175M frozen)", "first_ts": 1793308103, "last_ts": 1793308499, "usd_in": 175000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E047", "E052" ], "frozen": true }, { "id": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "key": "UCCBE", "t": "hop", "label": "USDT hop F", "first_ts": 1793308271, "last_ts": 1793308607, "usd_in": 161259928, "usd_out": 162152506, "eth_in": 57891.85, "eth_out": 57891.8, "events": [ "E049", "E050", "E054", "E055", "E056" ], "frozen": false }, { "id": "0xb171cA86f82070282138352Ff7111b494060c8c3", "key": "UB171", "t": "hop", "label": "USDT hop G (30M frozen)", "first_ts": 1793308571, "last_ts": 1793309759, "usd_in": 162152506, "usd_out": 132284433, "eth_in": 57891.8, "eth_out": 57891.77, "events": [ "E054", "E056", "E057", "E062" ], "frozen": true }, { "id": "0x0000000000000000000000000000000000000000", "key": "NULL", "t": "burn", "label": "Null address (burn)", "first_ts": 1793308919, "last_ts": 1793308919, "usd_in": 3269184, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E058" ], "frozen": false }, { "id": "0x5C23023Ca6633F91DeD909b4a753a3cA00Fea4FC", "key": "H5C23", "t": "hop", "label": "RLUSD hop", "first_ts": 1793308979, "last_ts": 1793308979, "usd_in": 88541065, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E060" ], "frozen": false }, { "id": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "key": "COL3", "t": "collector", "label": "ETH collector 3", "first_ts": 1793309759, "last_ts": 1793316287, "usd_in": 178877572, "usd_out": 0, "eth_in": 78415.25, "eth_out": 0.0, "events": [ "E062", "E088", "E100" ], "eth_now": 78415.25, "usd_now": 172919744, "frozen": false }, { "id": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "key": "ARBH", "t": "hop", "label": "ARB hop (Arbitrum)", "first_ts": 1793309790, "last_ts": 1793319500, "usd_in": 11183151, "usd_out": 11183151, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E063", "E112" ], "frozen": false }, { "id": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "key": "SE702", "t": "seller", "label": "Seller: AAVE + RLUSD", "first_ts": 1793310143, "last_ts": 1793315147, "usd_in": 15763778, "usd_out": 124106552, "eth_in": 0.0, "eth_out": 26825.0, "events": [ "E064", "E077", "E082", "E084", "E096" ], "frozen": false }, { "id": "0xb2983625f32BF1fc358181b3382Cb53bBd076Cd6", "key": "POOL_RLUSD", "t": "dex", "label": "DEX pool/router used for RLUSD (CurveAdapter)", "first_ts": 1793310143, "last_ts": 1793310143, "usd_in": 48000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E064" ], "frozen": false }, { "id": "btc:binance", "key": "BTC_SRC", "t": "victim", "label": "Binance BTC hot wallets (addresses not verified)", "first_ts": 1793310153, "last_ts": 1793310153, "usd_in": 0, "usd_out": 1440000000, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E065" ], "frozen": false }, { "id": "btc:attacker", "key": "BTC_RCV", "t": "receiver", "label": "Attacker BTC address(es) (not verified)", "first_ts": 1793310153, "last_ts": 1793310153, "usd_in": 1440000000, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E065" ], "frozen": false }, { "id": "0x42CDF00c85005630CC8605731B9364F712077810", "key": "S42CD", "t": "seller", "label": "Seller: UNI + ONDO", "first_ts": 1793310419, "last_ts": 1793316287, "usd_in": 54849010, "usd_out": 100065294, "eth_in": 0.0, "eth_out": 20523.48, "events": [ "E069", "E072", "E088", "E090", "E094", "E100" ], "frozen": false }, { "id": "0xc887aF690E0301CD4edBbCe8F8d31b4EC65B286A", "key": "COL2", "t": "collector", "label": "ETH collector 2 (122,310 ETH)", "first_ts": 1793310467, "last_ts": 1793310467, "usd_in": 278377560, "usd_out": 0, "eth_in": 122310.0, "eth_out": 0.0, "events": [ "E070" ], "eth_now": 122310.0, "usd_now": 269715567, "frozen": false }, { "id": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "key": "S600D", "t": "seller", "label": "Seller: PEPE", "first_ts": 1793310551, "last_ts": 1793316287, "usd_in": 37388019, "usd_out": 35056126, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E071", "E074", "E099" ], "eth_now": 14049.92, "usd_now": 30982594, "frozen": false }, { "id": "0x000000000004444c5dc75cB358380D2e3dE08A90", "key": "POOL_UNI", "t": "dex", "label": "DEX pool/router used for UNI (PoolManager)", "first_ts": 1793310683, "last_ts": 1793310683, "usd_in": 45152274, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E072" ], "frozen": false }, { "id": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "key": "S7F9D", "t": "seller", "label": "Seller: ENA + WBETH", "first_ts": 1793310767, "last_ts": 1793314319, "usd_in": 115147987, "usd_out": 23240447, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E073", "E075", "E089" ], "eth_now": 9346.36, "usd_now": 20610407, "frozen": false }, { "id": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "key": "POOL_PEPE", "t": "dex", "label": "DEX pool/router used for PEPE (PEPE / WETH)", "first_ts": 1793311295, "last_ts": 1793316287, "usd_in": 35056126, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E074", "E099" ], "frozen": false }, { "id": "0x54401f80Da97893a15D43566184635B6674BC942", "key": "COL4", "t": "collector", "label": "ETH collector 4 (AAVE/RLUSD proceeds)", "first_ts": 1793311739, "last_ts": 1793315147, "usd_in": 60552617, "usd_out": 0, "eth_in": 26825.0, "eth_out": 0.0, "events": [ "E077", "E096" ], "eth_now": 26825.0, "usd_now": 59153953, "frozen": false }, { "id": "issuer:usd1", "key": "WLFI", "t": "issuer", "label": "World Liberty Financial (USD1 issuer)", "first_ts": 1793312156, "last_ts": 1793312156, "usd_in": 0, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E078" ], "frozen": false }, { "id": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "key": "SCF4C", "t": "seller", "label": "Seller: LINK", "first_ts": 1793313299, "last_ts": 1793313455, "usd_in": 28127555, "usd_out": 27390750, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E081", "E083" ], "eth_now": 11560.92, "usd_now": 25493919, "frozen": false }, { "id": "0xa6Cc3C2531FdaA6Ae1A3CA84c2855806728693e8", "key": "POOL_LINK", "t": "dex", "label": "DEX pool/router used for LINK (UniswapV3Pool)", "first_ts": 1793313455, "last_ts": 1793313455, "usd_in": 27390750, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E083" ], "frozen": false }, { "id": "0x000000000004444c5dc75cB358380D2e3dE08A90", "key": "POOL_AAVE", "t": "dex", "label": "DEX pool/router used for AAVE (PoolManager)", "first_ts": 1793313551, "last_ts": 1793313551, "usd_in": 15553935, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E084" ], "frozen": false }, { "id": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "key": "RCV2", "t": "receiver", "label": "Fresh receiver (later sweeps)", "first_ts": 1793313575, "last_ts": 1793318207, "usd_in": 55173591, "usd_out": 0, "eth_in": 3090.4, "eth_out": 0.0, "events": [ "E085", "E108" ], "eth_now": 3090.4, "usd_now": 6814893, "frozen": false }, { "id": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "key": "SB3DD", "t": "seller", "label": "Seller: WBTC + USDe", "first_ts": 1793313695, "last_ts": 1793315939, "usd_in": 22887415, "usd_out": 27653716, "eth_in": 0.0, "eth_out": 5700.0, "events": [ "E086", "E087", "E092", "E093", "E097" ], "eth_now": 429.92, "usd_now": 948053, "frozen": false }, { "id": "0x4585FE77225b41b697C938B018E2Ac67Ac5a20c0", "key": "POOL_WBTC", "t": "dex", "label": "DEX pool/router used for WBTC (UniswapV3Pool)", "first_ts": 1793313827, "last_ts": 1793313827, "usd_in": 13180441, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E087" ], "frozen": false }, { "id": "0x08B8cebfcA0f49A9303bab1cC4e2C25D280f2c00", "key": "POOL_ENA", "t": "dex", "label": "DEX pool/router used for ENA (UniswapV3Pool)", "first_ts": 1793314319, "last_ts": 1793314319, "usd_in": 23240447, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E089" ], "frozen": false }, { "id": "0xF977814e90dA44bFA03b6295A0616a897441aceC", "key": "B8", "t": "cex", "label": "Binance 8 / Hot Wallet 20 (Binance-held)", "first_ts": 1793314535, "last_ts": 1793314535, "usd_in": 337802, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E091" ], "frozen": false }, { "id": "0xE6D7EbB9f1a9519dc06D557e03C522d53520e76A", "key": "POOL_USDE", "t": "dex", "label": "DEX pool/router used for USDE (UniswapV3Pool)", "first_ts": 1793314715, "last_ts": 1793314715, "usd_in": 1568475, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E093" ], "frozen": false }, { "id": "0x7b1E5D984A43eE732de195628d20d05CFaBc3cC7", "key": "POOL_ONDO", "t": "dex", "label": "DEX pool/router used for ONDO (UniswapV3Pool)", "first_ts": 1793314919, "last_ts": 1793314919, "usd_in": 8319881, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E094" ], "frozen": false }, { "id": "0xEb3107117FEAd7de89Cd14D463D340A2E6917769", "key": "SNXDAO", "t": "issuer", "label": "Synthetix protocolDAO", "first_ts": 1793315027, "last_ts": 1793315027, "usd_in": 1575009, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E095" ], "frozen": false }, { "id": "0x79e70d139fC05AA75F75611fDF2680E9952B544A", "key": "COL5", "t": "collector", "label": "ETH collector 5 (WBTC/USDe proceeds)", "first_ts": 1793315939, "last_ts": 1793315939, "usd_in": 12904800, "usd_out": 0, "eth_in": 5700.0, "eth_out": 0.0, "events": [ "E097" ], "eth_now": 5700.0, "usd_now": 12569526, "frozen": false }, { "id": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "key": "S8C71", "t": "seller", "label": "Seller: WLD", "first_ts": 1793316083, "last_ts": 1793316443, "usd_in": 6679502, "usd_out": 6634909, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E098", "E102" ], "eth_now": 2726.3, "usd_now": 6011977, "frozen": false }, { "id": "0x84A917f50B16d1564D53AC85C63d7c48b645D87D", "key": "SANDSAFE", "t": "issuer", "label": "Gnosis Safe that took SAND (issuer-side, unconfirmed)", "first_ts": 1793316431, "last_ts": 1793316431, "usd_in": 2575323, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E101" ], "frozen": false }, { "id": "0x841820459769cd629B10a36FD12E603938cc2679", "key": "POOL_WLD", "t": "dex", "label": "DEX pool/router used for WLD (UniswapV3Pool)", "first_ts": 1793316443, "last_ts": 1793316443, "usd_in": 6634909, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E102" ], "frozen": false }, { "id": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "key": "S06EA", "t": "seller", "label": "Seller: FUN", "first_ts": 1793316527, "last_ts": 1793316695, "usd_in": 6237988, "usd_out": 134155, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E103", "E104" ], "eth_now": 39.77, "usd_now": 87708, "frozen": false }, { "id": "0x05B0c1D8839eF3a989B33B6b63D3aA96cB7Ec142", "key": "POOL_FUN", "t": "dex", "label": "DEX pool/router used for FUN (JamUniswapV2Pair)", "first_ts": 1793316695, "last_ts": 1793316695, "usd_in": 134155, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E104" ], "frozen": false }, { "id": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "key": "S0084", "t": "seller", "label": "Seller: ZAMA", "first_ts": 1793318939, "last_ts": 1793319095, "usd_in": 5745597, "usd_out": 2121450, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E109", "E111" ], "eth_now": 805.35, "usd_now": 1775937, "frozen": false }, { "id": "0x4d68B530920D26c3b01C99fecC19e21011B72bBD", "key": "POOL_ZAMA", "t": "dex", "label": "DEX pool/router used for ZAMA (UniswapV3Pool)", "first_ts": 1793319095, "last_ts": 1793319095, "usd_in": 2121450, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E111" ], "frozen": false }, { "id": "0x0000000000000000000000000000000000000da0", "key": "ARBX", "t": "burn", "label": "0x\u20260DA0 (no code; ARB sink, purpose unknown)", "first_ts": 1793319500, "last_ts": 1793319500, "usd_in": 11183151, "usd_out": 0, "eth_in": 0.0, "eth_out": 0.0, "events": [ "E112" ], "frozen": false } ], "links": [ { "source": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "target": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "k": "prep_funding", "token": "ETH", "amount": 0.09825699656315, "eth": 0.0983, "usd": 231, "ts": 1793173187, "ts_end": null, "tx": "0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008", "event": "E001", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tornado Cash withdrawal funds the attacker" }, { "source": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "target": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "k": "prep_funding", "token": "ETH", "amount": 0.09789260928915, "eth": 0.0979, "usd": 231, "ts": 1793177639, "ts_end": null, "tx": "0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a", "event": "E002", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tornado Cash withdrawal funds the attacker" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x19beE294A6DaAb49c9e5Ab69A5Da6C035C70f2bf", "k": "prep_deploy", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793240939, "ts_end": null, "tx": "0x6b76e8748ba1c6bc81e674c830a0b3603db6bde04ec4bd4a2d3126c1a12706d8", "event": "E003", "confidence": "onchain_verified", "chain": "ethereum", "label": "Attacker deploys sweeper v1 (rehearsal contract)" }, { "source": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "target": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "k": "prep_funding", "token": "ETH", "amount": 0.09794177986075, "eth": 0.0979, "usd": 226, "ts": 1793257715, "ts_end": null, "tx": "0x976630d1104ef15d6ab65a0a93f64014a92e0606fb109ec907f94004934707b6", "event": "E004", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tornado Cash withdrawal funds a second attacker wallet" }, { "source": "0x12D66f87A04A9E220743712cE6d9bB1B5616B8Fc", "target": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "k": "prep_funding", "token": "ETH", "amount": 0.09794285280185, "eth": 0.0979, "usd": 227, "ts": 1793262191, "ts_end": null, "tx": "0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae", "event": "E005", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tornado Cash withdrawal funds the attacker" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793281895, "ts_end": null, "tx": "0x16b5acc35a82d194aadb21a4a56d666310fe83982c387c974f4796275f499dca", "event": "E006", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal: EIP-7702 delegation on rehearsal wallet 1" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793281919, "ts_end": null, "tx": "0xec5af21dc34fc8a3ac131f694aa0df5b27c0525ea3a71d97daa7e597abcb21d9", "event": "E007", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal: EIP-7702 delegation on rehearsal wallet 2" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x837810E3Be7a3E89C570E7A01A13d3B566aaFBc3", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793283599, "ts_end": null, "tx": "0xa2e0cd4123cf4463cf43685232142d680e9994f5bd29f0540bf977a158216c4c", "event": "E010", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal sweep" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x9C29BA2DE4b2d6c3630685650663cFE7B70dbB6B", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793283851, "ts_end": null, "tx": "0x6aaae5bcb5e0bafd1e79e70670864f8f726624d50d99d16152c5e684f571ddf4", "event": "E011", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal sweep" }, { "source": "0x47CE0C6eD5B0Ce3d3A51fdb1C52DC66a7c3c2936", "target": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "k": "prep_funding", "token": "ETH", "amount": 0.994396360882, "eth": 0.9944, "usd": 2328, "ts": 1793285687, "ts_end": null, "tx": "0xf18e081599b0059de76a02f0013f51b053e4bd6916e959a6ed1fd3a58cd4cbc1", "event": "E012", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tornado Cash withdrawal funds a second attacker wallet" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x63e842B054Bd624a465454D533C33F573e9c6fAe", "k": "prep_deploy", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793289551, "ts_end": null, "tx": "0x97408e7562eb2b28efcd24ba01609607b5749bc89448d007fa8b50ecf290329c", "event": "E013", "confidence": "onchain_verified", "chain": "ethereum", "label": "Attacker deploys the final sweeper contract" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793290847, "ts_end": null, "tx": "0xb2148eb825cac75efe0ae7fb5c319e6b66df62631738ba252185960e50dc5782", "event": "E014", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal: delegation to the final sweeper" }, { "source": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "target": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "k": "prep_rehearsal", "token": "ETH", "amount": 1.01, "eth": 1.01, "usd": 2379, "ts": 1793291051, "ts_end": null, "tx": "0xfd3f9dd90ff7b7b5a3f5b9abed20afc3ac517f74d0f5edf3e77b2ecd9d9917cd", "event": "E015", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal wallet loaded with 1.01 ETH" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793291159, "ts_end": null, "tx": "0x7c5206cb7aa77ce5b54f030e94ad127af0184e856689526602ffcd21a238e95d", "event": "E016", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal: delegation to the final sweeper" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "k": "prep_rehearsal", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793291411, "ts_end": null, "tx": "0x9c2dbed15322072e35e767c0c9b4cd962abf58fe51937e62a7020c742b834f2f", "event": "E017", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal sweep through the final sweeper" }, { "source": "0x43AEdb9BAD6219677a2C8D6858321C16988404BD", "target": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "k": "prep_rehearsal", "token": "ETH", "amount": 1.0, "eth": 1.0, "usd": 0, "ts": 1793292443, "ts_end": null, "tx": "0x2b8eb62a32408e96bd7cb6740ede11a054549581534de5d5111289c47355f58f", "event": "E018", "confidence": "onchain_verified", "chain": "ethereum", "label": "Rehearsal ETH pulled back out" }, { "source": "0xe4F9070e1316de2988fc6f869feaD8fb99cC74cd", "target": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "k": "prep_funding", "token": "ETH", "amount": 1.082218220676984, "eth": 1.0822, "usd": 2528, "ts": 1793298047, "ts_end": null, "tx": "0x96cae1ec044b4b3e34c1f2113a7bcd1b0d3257370788f5d8a2b91e9c99c0ebe5", "event": "E019", "confidence": "onchain_verified", "chain": "ethereum", "label": "Gas wallet tops up the attacker" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x28C6c06298d514Db089934071355E5743bf21d60", "k": "delegation", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793305259, "ts_end": null, "tx": "0xad99264d5532ae0dd04b2004eebda05f25657e70dacb764f7ac8d4ccd051298b", "event": "E020", "confidence": "onchain_verified", "chain": "ethereum", "label": "Binance 14 is delegated to the attacker's sweeper (EIP-7702)" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "ETH+tokens", "amount": 167464.24785655882, "eth": 167464.2479, "usd": 2529293143, "ts": 1793305463, "ts_end": null, "tx": "0x53bd38b816c23e74134786c29a8c18d792777998a3b9326047b583100e88e2f3", "event": "E021", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #1: Binance 14 swept to the main receiver" }, { "source": "0xDFd5293D8e347dFe59E90eFd55b2956a1343963d", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "ETH+tokens", "amount": 28005.600000000002, "eth": 28005.6, "usd": 174278381, "ts": 1793305487, "ts_end": null, "tx": "0x51f263fa50966df6bbd7f8c6e6e99e3791c94444f7c4343b2fef1ee2d62fd39f", "event": "E022", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #1b: Binance 16 sends 28,005.6 ETH and 8 tokens" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x9749292D74Fd460982d0912eA9515EA24736C762", "k": "sweep", "token": "USDT", "amount": 500000000.0, "eth": 0, "usd": 500000000, "ts": 1793305811, "ts_end": null, "tx": "0x68d7d69deaeb9750c38020b4f8d3728146ca8d2267eba1e38cf9b56722ad659a", "event": "E023", "confidence": "onchain_verified", "chain": "ethereum", "label": "500M USDT split off to hop A" }, { "source": "0xb38e8c17e38363af6ebdcb3dae12e0243582891d", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "ARB", "amount": 74559805.2, "eth": 0, "usd": 11183151, "ts": 1793305834, "ts_end": null, "tx": "0xa18e57027dae90de066ac093bbb4ae3d63598accbe5175cdf4195c686462edff", "event": "E024", "confidence": "onchain_verified", "chain": "arbitrum", "label": "Arbitrum leg: 74.56M ARB sent to the same receiver address" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "k": "sweep", "token": "USDT", "amount": 200000000.0, "eth": 0, "usd": 200000000, "ts": 1793306003, "ts_end": null, "tx": "0x1fc0ef33a767132edad434834a5555b30fcb5a171206c03b86175ef6dafac81c", "event": "E025", "confidence": "onchain_verified", "chain": "ethereum", "label": "200M USDT split off to hop B" }, { "source": "0x9749292D74Fd460982d0912eA9515EA24736C762", "target": "0x000000000004444c5dc75cB358380D2e3dE08A90", "k": "swap", "token": "USDT", "amount": 325000000.0, "eth": 0, "usd": 325000000, "ts": 1793306063, "ts_end": "2026-10-29T20:57:23Z", "tx": "0x290e94a9d14294b1c22bbc5d167343fd91fe91233e89434f20532fe5fe7e8668", "event": "E026", "confidence": "onchain_verified", "chain": "ethereum", "label": "Hop A swaps 325M USDT into ETH" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x8532FA14ACAf483729C449b8458aedDb900543D4", "k": "sweep", "token": "ETH", "amount": 195460.0, "eth": 195460.0, "usd": 449468088, "ts": 1793306327, "ts_end": null, "tx": "0x551d7961652e6d9835b11988908adf86ebe480badb4ce2d7d52193b2b1b02c76", "event": "E027", "confidence": "onchain_verified", "chain": "ethereum", "label": "195,460 ETH parked in a fresh collector wallet" }, { "source": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "USDC", "amount": 780000000.0, "eth": 0, "usd": 780000000, "ts": 1793306483, "ts_end": null, "tx": "0xdc102dd89dded5a83f1008906883ffb7c81ff3b7d7965d8c7277d170b5e17481", "event": "E028", "confidence": "onchain_verified", "chain": "ethereum", "label": "780M USDC pulled out of Binance Hot Wallet 34" }, { "source": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "target": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "k": "swap", "token": "USDT", "amount": 10000000.0, "eth": 0, "usd": 10000000, "ts": 1793306867, "ts_end": null, "tx": "0x152e005f6dcccd941e0a2c7156b955c6baad08a347685bcf5518776dab04f8cc", "event": "E029", "confidence": "onchain_verified", "chain": "ethereum", "label": "Hop B swaps 10M USDT on Uniswap" }, { "source": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "target": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "k": "sweep", "token": "USDT", "amount": 190000000.0, "eth": 0, "usd": 190000000, "ts": 1793307179, "ts_end": null, "tx": "0xc0fab33d0ec562d3feef6b23946402b1af80dade21ab4f5fbea7384cc4615183", "event": "E030", "confidence": "onchain_verified", "chain": "ethereum", "label": "190M USDT moved to hop C" }, { "source": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "target": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "k": "sweep", "token": "ETH", "amount": 3552.0, "eth": 3552.0, "usd": 8037714, "ts": 1793307239, "ts_end": null, "tx": "0x121cd104644b775c8a8c990c5871f79872cf7ebc5f03b93d3a8562f2c48262b2", "event": "E031", "confidence": "onchain_verified", "chain": "ethereum", "label": "3,552 ETH follows to hop C" }, { "source": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "target": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "k": "drain", "token": "TRX", "amount": 288330000.0, "eth": 0, "usd": 102325145, "ts": 1793307372, "ts_end": null, "tx": "4b329d4495bcdd8df40117cd478f13c5027988147c7deb9add5e4aee3b8107c4", "event": "E032", "confidence": "onchain_partial", "chain": "tron", "label": "Tron leg: 288.3M TRX sent to the Tron receiver" }, { "source": "0x9749292D74Fd460982d0912eA9515EA24736C762", "target": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "k": "sweep", "token": "USDT", "amount": 175000000.0, "eth": 0, "usd": 175000000, "ts": 1793307551, "ts_end": null, "tx": "0x1fb992f92a45afec23d7d5740c7958a644fb90ef0cba19ca39bd2c6534fb670b", "event": "E033", "confidence": "onchain_verified", "chain": "ethereum", "label": "175M USDT moved to hop H" }, { "source": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "USDC", "amount": 43000000.0, "eth": 0, "usd": 43000000, "ts": 1793307587, "ts_end": null, "tx": "0x3b9625b33788daeba68420459ae15bf05c5b3639ccfb8e92067e84b560479ca7", "event": "E034", "confidence": "onchain_verified", "chain": "ethereum", "label": "43M USDC pulled out of Binance Hot Wallet 34" }, { "source": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "target": "0x23878914EFE38d27C4D67Ab83ed1b93A74D4086a", "k": "swap", "token": "USDT", "amount": 60000000.0, "eth": 0, "usd": 60000000, "ts": 1793307611, "ts_end": null, "tx": "0x65bd82f19985a569ef87b3926dd5f2247ba7bd06640141060f1b2d9ddedec3f6", "event": "E035", "confidence": "onchain_verified", "chain": "ethereum", "label": "Hop C deposits 60M USDT in Aave and borrows 19,762 WETH" }, { "source": "issuer:tether", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "freeze", "token": "USDT", "amount": 1175464711.08, "eth": 0, "usd": 1175464711, "ts": 1793307695, "ts_end": null, "tx": "0x7baba482077843514d9c72bac0110ba0916b0814288a72917e2c3bb27a9d8659", "event": "E036", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes the main receiver" }, { "source": "issuer:tether", "target": "0x9749292D74Fd460982d0912eA9515EA24736C762", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793307695, "ts_end": null, "tx": "0x64a3f49742f4daf1d33b5440cb90bbc13de93bf53f00f5532d6e67967cb1b7de", "event": "E037", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes hop A (already empty)" }, { "source": "issuer:tether", "target": "0x0Ddf0480016e6bCb2C1F5d190D221FBA1320697e", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793307707, "ts_end": null, "tx": "0xdb6b11fe4bad377b6945379d8fb0d0b642d3ca1ea366e1e8628e79e77ee0b0f3", "event": "E038", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes hop B (already empty)" }, { "source": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "target": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "k": "sweep", "token": "USDT", "amount": 130000000.0, "eth": 0, "usd": 130000000, "ts": 1793307719, "ts_end": null, "tx": "0xd2e7e5e6ee32a3552de469d97e90d83b707d314ffe7b8747786de92daa3fc3d8", "event": "E039", "confidence": "onchain_verified", "chain": "ethereum", "label": "130M USDT moved to hop D" }, { "source": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "target": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "k": "sweep", "token": "ETH", "amount": 23314.5, "eth": 23314.5, "usd": 52396075, "ts": 1793307755, "ts_end": null, "tx": "0x9e776556cf486ec516e12eeaf38fbd4ddd820f3f7e19cb999f9465a14c0c4673", "event": "E040", "confidence": "onchain_verified", "chain": "ethereum", "label": "23,314 ETH follows to hop D" }, { "source": "issuer:tether", "target": "0x8d53903625b8e839b9DF4bd28B0EFb1CD6b8639A", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793307767, "ts_end": null, "tx": "0xe48d47c64d9aebbdc2eb17161edbb430841490ee05141d902c3d11032b5dcff4", "event": "E041", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes hop C (already empty)" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "ETH+tokens", "amount": 1699.9228879153704, "eth": 1699.9229, "usd": 8201915, "ts": 1793307863, "ts_end": null, "tx": "0x31c4c9fe287d54fb9d3b79980477a8c793a11f774b98d0a9a92de1dad888a91d", "event": "E042", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #2: second Binance 14 sweep" }, { "source": "issuer:circle", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "freeze", "token": "USDC", "amount": 823000000.0, "eth": 0, "usd": 823000000, "ts": 1793307899, "ts_end": null, "tx": "0xc954c86f118e8e410e6a3eb9e3b38ff4a95fbdae9d2d58e13166afb7a1f4fc5f", "event": "E043", "confidence": "onchain_verified", "chain": "ethereum", "label": "Circle freezes 823M USDC in the main receiver" }, { "source": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "target": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "k": "swap", "token": "USDT", "amount": 50000000.0, "eth": 0, "usd": 50000000, "ts": 1793307959, "ts_end": null, "tx": "0xcb8075f1d07bc56e54e59ccd4477d75b6a7b21f265dabe2ee86beeb3f3b38a9d", "event": "E044", "confidence": "onchain_verified", "chain": "ethereum", "label": "USDT hop D (7702 smart account) swaps 50M USDT into ETH" }, { "source": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "target": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "k": "sweep", "token": "USDT", "amount": 80000000.0, "eth": 0, "usd": 80000000, "ts": 1793308007, "ts_end": null, "tx": "0x279d12e9a7f594eeaf0eb83fe649f7f2cdf82ced156a82f85014dc56369b36d8", "event": "E045", "confidence": "onchain_verified", "chain": "ethereum", "label": "80M USDT moved to usdt hop e (7702 smart account)" }, { "source": "0x77EDEf23FBd05921c26FE29fcc3A65e14D2ac3eb", "target": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "k": "sweep", "token": "ETH", "amount": 41397.810000000005, "eth": 41397.81, "usd": 93638120, "ts": 1793308055, "ts_end": null, "tx": "0x1171d7baec803ba6b62efb979e49e9dc6183235060af54570a7630e54737ceea", "event": "E046", "confidence": "onchain_verified", "chain": "ethereum", "label": "41,398 ETH follows to usdt hop e (7702 smart account)" }, { "source": "0x811f15855476156Ebf86ba3b84faFb8Ceaa4e84C", "target": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "k": "sweep", "token": "USDT", "amount": 175000000.0, "eth": 0, "usd": 175000000, "ts": 1793308103, "ts_end": null, "tx": "0xb6d7d3ffcbdd0465e1ab743a8d943218176cac7b15edefa7b7bcd5e853e4266f", "event": "E047", "confidence": "onchain_verified", "chain": "ethereum", "label": "175M USDT lands in hop I" }, { "source": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "target": "0x4e68Ccd3E89f51C3074ca5072bbAC773960dFa36", "k": "swap", "token": "USDT", "amount": 50000000.0, "eth": 0, "usd": 50000000, "ts": 1793308151, "ts_end": null, "tx": "0x2a1979ae32a40c0aaa0df757f6af690857c6c8cb86097cac29316597de9469f6", "event": "E048", "confidence": "onchain_verified", "chain": "ethereum", "label": "USDT hop E (7702 smart account) swaps 50M USDT into ETH" }, { "source": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "target": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "k": "sweep", "token": "USDT", "amount": 30000000.0, "eth": 0, "usd": 30000000, "ts": 1793308271, "ts_end": null, "tx": "0x9a7645882a20445c5a731a15f34e1757f0b6c52e8f51a4ddb8c09cdc424295ce", "event": "E049", "confidence": "onchain_verified", "chain": "ethereum", "label": "30M USDT moved to usdt hop f" }, { "source": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "target": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "k": "sweep", "token": "ETH", "amount": 57891.850000000006, "eth": 57891.85, "usd": 131259928, "ts": 1793308319, "ts_end": null, "tx": "0x6d7e5cde8cc83e22052eec4dd2aa4239f8f97af0630a7bc34a2f9d8ffd991996", "event": "E050", "confidence": "onchain_verified", "chain": "ethereum", "label": "57,892 ETH follows to usdt hop f" }, { "source": "issuer:tether", "target": "0x7Aa4D3029e4C6A8E916300014Ad95B6d6C03BFd1", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793308355, "ts_end": null, "tx": "0x28836ef9e83de713b00290cd6336d8296737f2b912de59dca56a149eab258be0", "event": "E051", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes hop E (already empty)" }, { "source": "issuer:tether", "target": "0xAa246BF639586a6Ba46762D378CE50cA4fc654a0", "k": "freeze", "token": "USDT", "amount": 174999872.33, "eth": 0, "usd": 174999872, "ts": 1793308499, "ts_end": null, "tx": "0x0c07a5e428ce233a3bcb40f257ad899594421341d63ce94016822063362707bf", "event": "E052", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes 175M USDT in hop I" }, { "source": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "target": "0xb171cA86f82070282138352Ff7111b494060c8c3", "k": "sweep", "token": "USDT", "amount": 30000000.0, "eth": 0, "usd": 30000000, "ts": 1793308571, "ts_end": null, "tx": "0x1e6f851d072ae0ad448dca2446552cbb4e76516029b34980d5189e4353aae7a7", "event": "E054", "confidence": "onchain_verified", "chain": "ethereum", "label": "30M USDT moved to hop G" }, { "source": "issuer:tether", "target": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793308607, "ts_end": null, "tx": "0x3c08d84087d7fc14d8f2b35edea7abe3eae4deaedb1e616796ecc487dfdddc47", "event": "E055", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes hop F (already empty)" }, { "source": "0xCcBEF95633ADB5Cd2b5038DB5a38d77E726cA263", "target": "0xb171cA86f82070282138352Ff7111b494060c8c3", "k": "sweep", "token": "ETH", "amount": 57891.8, "eth": 57891.8, "usd": 132152506, "ts": 1793308607, "ts_end": null, "tx": "0x3ccb1b3b05611a5c588e32deffbbb553650a97def0e9d129540cfd9fe68e2c5a", "event": "E056", "confidence": "onchain_verified", "chain": "ethereum", "label": "57,892 ETH moved to hop G" }, { "source": "issuer:tether", "target": "0xb171cA86f82070282138352Ff7111b494060c8c3", "k": "freeze", "token": "USDT", "amount": 30000000.0, "eth": 0, "usd": 30000000, "ts": 1793308739, "ts_end": null, "tx": "0x3445389c8aceb50fe1c155a1208f7289cc8f7f5950139e21dc405333d1aedc93", "event": "E057", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether freezes 30M USDT in hop G" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x0000000000000000000000000000000000000000", "k": "recovery", "token": "BEAM", "amount": 984249380.29, "eth": 0, "usd": 3269184, "ts": 1793308919, "ts_end": null, "tx": "0x4f325fb45d056c5e6924768b6b2b71a93a6a6e7d09d9653f577d76cebdd6f415", "event": "E058", "confidence": "onchain_verified", "chain": "ethereum", "label": "BEAM issuer burns 984M BEAM in the main receiver" }, { "source": "issuer:tether", "target": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "k": "freeze", "token": "USDT (Tron)", "amount": 65990000.0, "eth": 0, "usd": 0, "ts": 1793308935, "ts_end": null, "tx": null, "event": "E059", "confidence": "reported_only", "chain": "tron", "label": "Whale Alert: 65.99M USDT frozen on Tron" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x5C23023Ca6633F91DeD909b4a753a3cA00Fea4FC", "k": "sweep", "token": "RLUSD", "amount": 88541065.0, "eth": 0, "usd": 88541065, "ts": 1793308979, "ts_end": null, "tx": "0x1d3f0f9b56ef51d2ea54fc3e8db63d331c16befd292a743b71413caa70a600e4", "event": "E060", "confidence": "onchain_verified", "chain": "ethereum", "label": "88.5M RLUSD moved to a hop wallet" }, { "source": "0xb171cA86f82070282138352Ff7111b494060c8c3", "target": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "k": "sweep", "token": "ETH", "amount": 57891.771, "eth": 57891.771, "usd": 132284433, "ts": 1793309759, "ts_end": null, "tx": "0x2552fea8c4e4e9e9251ef4ec82ea8cfc214feda8c21e77f4ce07779b1d561fb1", "event": "E062", "confidence": "onchain_verified", "chain": "ethereum", "label": "57,892 ETH parked in collector 3" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "k": "sweep", "token": "ARB", "amount": 74559805.2, "eth": 0, "usd": 11183151, "ts": 1793309790, "ts_end": null, "tx": "0x07a5a47ba3cfc61098be74eb462e353fe462cb8ee11a7a7e476fb8672facb6bf", "event": "E063", "confidence": "onchain_verified", "chain": "arbitrum", "label": "Arbitrum: ARB moved to a hop" }, { "source": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "target": "0xb2983625f32BF1fc358181b3382Cb53bBd076Cd6", "k": "swap", "token": "RLUSD", "amount": 48000000.0, "eth": 0, "usd": 48000000, "ts": 1793310143, "ts_end": "2026-10-29T22:00:59Z", "tx": "0x228f9f05f93cc071e2ff248a182f62b2a26c62afb0628183269962412f147376", "event": "E064", "confidence": "onchain_verified", "chain": "ethereum", "label": "RLUSD dumped on decentralized exchanges (54% of 88,541,065 so far)" }, { "source": "btc:binance", "target": "btc:attacker", "k": "drain", "token": "BTC", "amount": 18270, "eth": 0, "usd": 1440000000, "ts": 1793310153, "ts_end": null, "tx": null, "event": "E065", "confidence": "reported_only", "chain": "bitcoin", "label": "Bitcoin leg: ~18,270 BTC reported taken" }, { "source": "issuer:tether", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "freeze", "token": "XAUt", "amount": 12574, "eth": 0, "usd": 50402879, "ts": 1793310153, "ts_end": null, "tx": null, "event": "E066", "confidence": "onchain_partial", "chain": "ethereum", "label": "XAUt (tokenized gold) in the main receiver is frozen" }, { "source": "tron:TPBkSjkCMn2ckrMuAP8n2J1jdjbw76bKN4", "target": "tron:TSpe5HC3PRD2svJcr1YoGszhHk2mtkyZ8A", "k": "drain", "token": "TRX", "amount": 349860941.684882, "eth": 0, "usd": 124161800, "ts": 1793310162, "ts_end": null, "tx": "fb5089f5ce2ae9be6f8e5e3f78470a5a8d694879ac68f6c8cfe3d81450fa6149", "event": "E067", "confidence": "onchain_partial", "chain": "tron", "label": "Tron leg: 349.9M TRX sent to the Tron receiver" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "drain", "token": "ETH+tokens", "amount": 369.83185699558067, "eth": 369.8319, "usd": 201459853, "ts": 1793310251, "ts_end": null, "tx": "0x55ba4dabc41b468e580751373ad31acdee6f5ba398682df2c93e5a8340870556", "event": "E068", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #3: third sweep catches 200M USDT refilled into Binance 14" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x42CDF00c85005630CC8605731B9364F712077810", "k": "sweep", "token": "UNI", "amount": 7018792.33215254, "eth": 0, "usd": 46405447, "ts": 1793310419, "ts_end": null, "tx": "0x028bdd8b5f0bda6503a760b734090f1cdbc213e90b71394b8a089b3d66eada74", "event": "E069", "confidence": "onchain_verified", "chain": "ethereum", "label": "UNI handed to a dedicated seller wallet" }, { "source": "0x9749292D74Fd460982d0912eA9515EA24736C762", "target": "0xc887aF690E0301CD4edBbCe8F8d31b4EC65B286A", "k": "sweep", "token": "ETH", "amount": 122310.0, "eth": 122310.0, "usd": 278377560, "ts": 1793310467, "ts_end": null, "tx": "0xbd7822f7ee21e577a1ada80f881791071677a6797c4c1d5fa49ac1cfaf8bfa66", "event": "E070", "confidence": "onchain_verified", "chain": "ethereum", "label": "122,310 ETH parked in collector 2" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "k": "sweep", "token": "PEPE", "amount": 7772977017415.968, "eth": 0, "usd": 37388019, "ts": 1793310551, "ts_end": null, "tx": "0x7408734f52b076bb57c3e96d044e01827f6639deddf55d877f57589dc25072a5", "event": "E071", "confidence": "onchain_verified", "chain": "ethereum", "label": "PEPE handed to its seller wallet" }, { "source": "0x42CDF00c85005630CC8605731B9364F712077810", "target": "0x000000000004444c5dc75cB358380D2e3dE08A90", "k": "swap", "token": "UNI", "amount": 7018792.33215254, "eth": 0, "usd": 45152274, "ts": 1793310683, "ts_end": "2026-10-29T22:42:47Z", "tx": "0x6525cf7df2b521beb9f82c0eefccda7279b36195638d93deb02ada80fbd25fd2", "event": "E072", "confidence": "onchain_verified", "chain": "ethereum", "label": "UNI dumped on decentralized exchanges (all of it)" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "k": "sweep", "token": "WBETH", "amount": 29934.01316314602, "eth": 0, "usd": 75928865, "ts": 1793310767, "ts_end": null, "tx": "0xc19a2dcc7508e45f2743558cebefa50140fe68d9450ab18d14fd34039eb4bce2", "event": "E073", "confidence": "onchain_verified", "chain": "ethereum", "label": "Wrapped Binance ETH (WBETH) moved to a seller wallet" }, { "source": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "target": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "k": "swap", "token": "PEPE", "amount": 7772977017415.968, "eth": 0, "usd": 35056126, "ts": 1793311295, "ts_end": "2026-10-29T23:31:47Z", "tx": "0x48d89f06ca61a9f11187927f6c6b2d52376a0eb12cb66f28fc6e0e2d3021fc8f", "event": "E074", "confidence": "onchain_verified", "chain": "ethereum", "label": "PEPE dumped on decentralized exchanges (all of it)" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "k": "sweep", "token": "ENA", "amount": 217497348.01079366, "eth": 0, "usd": 39219122, "ts": 1793311331, "ts_end": null, "tx": "0x8bcbacb34b4e49b3e86675b3bc2a988461ded1207cc7e3a23bfd2577deb35aee", "event": "E075", "confidence": "onchain_verified", "chain": "ethereum", "label": "ENA handed to its seller wallet" }, { "source": "issuer:tether", "target": "0x28C6c06298d514Db089934071355E5743bf21d60", "k": "freeze", "token": "USDT", "amount": null, "eth": 0, "usd": 0, "ts": 1793311583, "ts_end": null, "tx": "0x312e166cb9e602582f426288f755a4b08e1eddb456b7e4bd614adae11080d305", "event": "E076", "confidence": "onchain_verified", "chain": "ethereum", "label": "Tether blacklists Binance 14 itself" }, { "source": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "target": "0x54401f80Da97893a15D43566184635B6674BC942", "k": "sweep", "token": "ETH", "amount": 20492.0, "eth": 20492.0, "usd": 46208435, "ts": 1793311739, "ts_end": null, "tx": "0x5c7117134ed0965ef6126f9a60f257e7d553d2f1f57141935bad586bb4c2eeaa", "event": "E077", "confidence": "onchain_verified", "chain": "ethereum", "label": "20,492 ETH of sale proceeds parked in eth collector 4" }, { "source": "issuer:usd1", "target": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "k": "freeze", "token": "USD1", "amount": 27760000.0, "eth": 0, "usd": 27760000, "ts": 1793312156, "ts_end": null, "tx": null, "event": "E078", "confidence": "reported_only", "chain": "ethereum", "label": "USD1 issuer reports freezing $27M" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "k": "sweep", "token": "LINK", "amount": 2568257.37, "eth": 0, "usd": 28127555, "ts": 1793313299, "ts_end": null, "tx": "0x317328369dfc29bf0c2236b2f7d8003f2b2f711c5174a919f2c7f0c139941b6f", "event": "E081", "confidence": "onchain_verified", "chain": "ethereum", "label": "LINK handed to its seller wallet" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "k": "sweep", "token": "AAVE", "amount": 127952.74, "eth": 0, "usd": 15763778, "ts": 1793313431, "ts_end": null, "tx": "0x68fb0da5ace5d3c415e34f71084d46be4c7f4bf443d4391bc853ff785ad6bf43", "event": "E082", "confidence": "onchain_verified", "chain": "ethereum", "label": "AAVE handed to its seller wallet" }, { "source": "0xCF4cA2bdF21Bc3a467A00B6AFE72B833982723E0", "target": "0xa6Cc3C2531FdaA6Ae1A3CA84c2855806728693e8", "k": "swap", "token": "LINK", "amount": 2568257.37, "eth": 0, "usd": 27390750, "ts": 1793313455, "ts_end": "2026-10-30T00:02:11Z", "tx": "0x4e2d11cfb82ae77cef71dd6a7026588a9151256b291ca2c9196c0ceb0e566f86", "event": "E083", "confidence": "onchain_verified", "chain": "ethereum", "label": "LINK dumped on decentralized exchanges (all of it)" }, { "source": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "target": "0x000000000004444c5dc75cB358380D2e3dE08A90", "k": "swap", "token": "AAVE", "amount": 127952.74, "eth": 0, "usd": 15553935, "ts": 1793313551, "ts_end": "2026-10-29T22:58:59Z", "tx": "0x56992b258ebb3726ed4cd06aa4bee924d206463a108ab225c5b1e6e4e02d661b", "event": "E084", "confidence": "onchain_verified", "chain": "ethereum", "label": "AAVE dumped on decentralized exchanges (all of it)" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "k": "drain", "token": "ETH+tokens", "amount": 128.49113921207507, "eth": 128.4911, "usd": 48514208, "ts": 1793313575, "ts_end": null, "tx": "0x4a4aed833556814c16fe176fc8abc70ce124eadc73da3bcdf42a67ef44f9ad6b", "event": "E085", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #4: sweep to a fresh receiver" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "k": "sweep", "token": "WBTC", "amount": 167.14, "eth": 0, "usd": 13179868, "ts": 1793313695, "ts_end": null, "tx": "0x314928ff5fb72f708f77093c166dbb26a04709ac9c43ef19d2ed603d5543df66", "event": "E086", "confidence": "onchain_verified", "chain": "ethereum", "label": "WBTC handed to its seller wallet" }, { "source": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "target": "0x4585FE77225b41b697C938B018E2Ac67Ac5a20c0", "k": "swap", "token": "WBTC", "amount": 167.14, "eth": 0, "usd": 13180441, "ts": 1793313827, "ts_end": "2026-10-29T22:45:35Z", "tx": "0x6c3c24672fec2a204222cbd01651d874874000e9780ea95519965ccc043fce6e", "event": "E087", "confidence": "onchain_verified", "chain": "ethereum", "label": "WBTC dumped on decentralized exchanges (all of it)" }, { "source": "0x42CDF00c85005630CC8605731B9364F712077810", "target": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "k": "sweep", "token": "ETH", "amount": 17584.0, "eth": 17584.0, "usd": 39929044, "ts": 1793314295, "ts_end": null, "tx": "0x1ef5fae0b671cb2727238df3b51a376d4bb944352a0fad1402b930166e09699c", "event": "E088", "confidence": "onchain_verified", "chain": "ethereum", "label": "17,584 ETH of sale proceeds parked in eth collector 3" }, { "source": "0x7f9DC988B46336aD536828fAD50fa8fA1E5415E3", "target": "0x08B8cebfcA0f49A9303bab1cC4e2C25D280f2c00", "k": "swap", "token": "ENA", "amount": 132931686.20169264, "eth": 0, "usd": 23240447, "ts": 1793314319, "ts_end": "2026-10-30T00:29:59Z", "tx": "0xf026ea88f995e66ebf2cc8c2195c4548b2b7a4b50b1983bc9522a980bbe5513d", "event": "E089", "confidence": "onchain_verified", "chain": "ethereum", "label": "ENA dumped on decentralized exchanges (61% of 217,497,348 so far)" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x42CDF00c85005630CC8605731B9364F712077810", "k": "sweep", "token": "ONDO", "amount": 21851870.65, "eth": 0, "usd": 8443563, "ts": 1793314427, "ts_end": null, "tx": "0x6bf04dd89cd7fb70b2eb02762c8515f67dbdff0d9101507fa3cc01a7120ea023", "event": "E090", "confidence": "onchain_verified", "chain": "ethereum", "label": "ONDO handed to the UNI seller" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0xF977814e90dA44bFA03b6295A0616a897441aceC", "k": "recovery", "token": "various", "amount": null, "eth": 0, "usd": 337802, "ts": 1793314535, "ts_end": null, "tx": "0x2943ea1b8f654c6a192c9b0f05037b9f31c68cb661fe41d732d9eeb7e978a2f7", "event": "E091", "confidence": "onchain_verified", "chain": "ethereum", "label": "Binance starts moving leftovers out of Binance 14" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "k": "sweep", "token": "USDe", "amount": 9707546.77, "eth": 0, "usd": 9707547, "ts": 1793314607, "ts_end": null, "tx": "0xfc5eefa601d35a9d004ed166c704ccfb65d92ebc45912ace23493ba8e4c4cc4f", "event": "E092", "confidence": "onchain_verified", "chain": "ethereum", "label": "USDe handed to the same seller" }, { "source": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "target": "0xE6D7EbB9f1a9519dc06D557e03C522d53520e76A", "k": "swap", "token": "USDE", "amount": 1568475.0060836868, "eth": 0, "usd": 1568475, "ts": 1793314715, "ts_end": "2026-10-30T00:29:11Z", "tx": "0x6a16ac52a7bccddcce02c490bd4884024e4ba86ded15196dc3bbcd435823ce96", "event": "E093", "confidence": "onchain_verified", "chain": "ethereum", "label": "USDE dumped on decentralized exchanges (16% of 9,707,547 so far)" }, { "source": "0x42CDF00c85005630CC8605731B9364F712077810", "target": "0x7b1E5D984A43eE732de195628d20d05CFaBc3cC7", "k": "swap", "token": "ONDO", "amount": 21851870.65, "eth": 0, "usd": 8319881, "ts": 1793314919, "ts_end": "2026-10-29T23:19:11Z", "tx": "0xc10cc028d5987c9314d09186b5ba69c6f06390f11307d55e21a644452c012d08", "event": "E094", "confidence": "onchain_verified", "chain": "ethereum", "label": "ONDO dumped on decentralized exchanges (all of it)" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0xEb3107117FEAd7de89Cd14D463D340A2E6917769", "k": "recovery", "token": "SNX", "amount": 8405741.58, "eth": 0, "usd": 1575009, "ts": 1793315027, "ts_end": null, "tx": "0x0d4a20dd52946d5d15292161522daf475a6a971bff815dd5fb6623d23caf776f", "event": "E095", "confidence": "onchain_verified", "chain": "ethereum", "label": "Synthetix claws back 8.4M SNX" }, { "source": "0xE7024aB80143b1EF843EFE6a58368696Cb87958d", "target": "0x54401f80Da97893a15D43566184635B6674BC942", "k": "sweep", "token": "ETH", "amount": 6333.0, "eth": 6333.0, "usd": 14344182, "ts": 1793315147, "ts_end": null, "tx": "0x2c64a2e2225cd3443b513a1ea8dbfe3bc30d48d253e9e7543c3541dc7f031984", "event": "E096", "confidence": "onchain_verified", "chain": "ethereum", "label": "6,333 ETH of sale proceeds parked in eth collector 4" }, { "source": "0xB3ddeC0cCC5C3ba733FCdf5a15f98c95Ec5a5FdB", "target": "0x79e70d139fC05AA75F75611fDF2680E9952B544A", "k": "sweep", "token": "ETH", "amount": 5700.0, "eth": 5700.0, "usd": 12904800, "ts": 1793315939, "ts_end": null, "tx": "0x9b3c5eda460d6b0ad33d0ac3e739c88323f101f61331d83b1ba55920ef460f71", "event": "E097", "confidence": "onchain_verified", "chain": "ethereum", "label": "5,700 ETH of sale proceeds parked in eth collector 5" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "k": "sweep", "token": "WLD", "amount": 17317869.01, "eth": 0, "usd": 6679502, "ts": 1793316083, "ts_end": null, "tx": "0xa4e909e76911170281927808ac29d0c4447ba92390190b62367006c8db7dc619", "event": "E098", "confidence": "onchain_verified", "chain": "ethereum", "label": "WLD handed to its seller wallet" }, { "source": "0x600d6F00eadAbDb514561Ceeb43730a7103e8298", "target": "0xA43fe16908251ee70EF74718545e4FE6C5cCEc9f", "k": "swap", "token": "PEPE", "amount": 1458647465763.82, "eth": 0, "usd": 0, "ts": 1793316287, "ts_end": null, "tx": "0x35ba1df93439ab151a077ae661f72d567493d139c7801912c2f0b78a1b68eef7", "event": "E099", "confidence": "onchain_verified", "chain": "ethereum", "label": "The \"approval\" that went viral on X" }, { "source": "0x42CDF00c85005630CC8605731B9364F712077810", "target": "0x897C80d1a9729E94460e2Bd93178bD5215158DF3", "k": "sweep", "token": "ETH", "amount": 2939.4800000000005, "eth": 2939.48, "usd": 6664095, "ts": 1793316287, "ts_end": null, "tx": "0x654cb44f9b09321cc86fab010323473b33da2e5a8f6d362ba0d751ee8c158dd2", "event": "E100", "confidence": "onchain_verified", "chain": "ethereum", "label": "2,939 ETH of sale proceeds parked in eth collector 3" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x84A917f50B16d1564D53AC85C63d7c48b645D87D", "k": "recovery", "token": "SAND", "amount": 58397344.21, "eth": 0, "usd": 2575323, "ts": 1793316431, "ts_end": null, "tx": "0x0a68d2f422c51c5a9261a098f92d8c551445ffe8b20fbb86770704be2cab06a8", "event": "E101", "confidence": "onchain_partial", "chain": "ethereum", "label": "58.4M SAND moved out of the main receiver by a Safe" }, { "source": "0x8c7111E9a3270457B76f0Bd137209089047a6aa4", "target": "0x841820459769cd629B10a36FD12E603938cc2679", "k": "swap", "token": "WLD", "amount": 17317869.01, "eth": 0, "usd": 6634909, "ts": 1793316443, "ts_end": "2026-10-30T00:02:23Z", "tx": "0xff3f64220b0e5d1af141218ea8236893d298ddd135557c96b730fb7618677440", "event": "E102", "confidence": "onchain_verified", "chain": "ethereum", "label": "WLD dumped on decentralized exchanges (all of it)" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "k": "sweep", "token": "FUN", "amount": 714911344.0, "eth": 0, "usd": 6237988, "ts": 1793316527, "ts_end": null, "tx": "0x5ea2d646695ce9f2633355e2750995f91a13c8e505ea34fabcb70c77a7eef82f", "event": "E103", "confidence": "onchain_verified", "chain": "ethereum", "label": "FUN handed to its seller wallet" }, { "source": "0x06ea1aB3eCf570029Eb1f94dbB9Eac06BC79685f", "target": "0x05B0c1D8839eF3a989B33B6b63D3aA96cB7Ec142", "k": "swap", "token": "FUN", "amount": 15375007.63632895, "eth": 0, "usd": 134155, "ts": 1793316695, "ts_end": "2026-10-30T00:27:47Z", "tx": "0x0300225544b637a221202aec010c4ddfb156f58b333113715c7d8b303c5e9c56", "event": "E104", "confidence": "onchain_verified", "chain": "ethereum", "label": "FUN dumped on decentralized exchanges (2% of 714,911,344 so far)" }, { "source": "0x7C8601d4645b93cea45F71e118A729332e6B5CA0", "target": "0x28C6c06298d514Db089934071355E5743bf21d60", "k": "drain", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793317007, "ts_end": null, "tx": "0x5059928573a6e4ed48dda491648cf619c2368e81fc6cce3f9e97a779ad521f1f", "event": "E105", "confidence": "onchain_verified", "chain": "ethereum", "label": "Five empty sweep attempts" }, { "source": "issuer:circle", "target": "0x28C6c06298d514Db089934071355E5743bf21d60", "k": "freeze", "token": "USDC", "amount": null, "eth": 0, "usd": 0, "ts": 1793318015, "ts_end": null, "tx": "0xb57c2143508019ac592a9dadb988b39003589f6f54c1924d4163f60520a784f5", "event": "E106", "confidence": "onchain_verified", "chain": "ethereum", "label": "Circle blacklists Binance 14" }, { "source": "issuer:circle", "target": "0xEe7aE85f2Fe2239E27D9c1E23fFFe168D63b4055", "k": "freeze", "token": "USDC", "amount": null, "eth": 0, "usd": 0, "ts": 1793318099, "ts_end": null, "tx": "0xf2faba0e8ab74e84dde0c7ded90effe20a4cedbde1653f0c98220d2f774eeebb", "event": "E107", "confidence": "onchain_verified", "chain": "ethereum", "label": "Circle blacklists Hot Wallet 34" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0xa97bf7836f8a08f9ed91d41453d371493fae8d10", "k": "drain", "token": "ETH", "amount": 2961.9108209382853, "eth": 2961.9108, "usd": 6659383, "ts": 1793318207, "ts_end": null, "tx": "0x4395d51dc3f3c51230329efc3548f74edbced353ff3f795c517cc57fa650f89b", "event": "E108", "confidence": "onchain_verified", "chain": "ethereum", "label": "Drain #5: sweeper grabs new deposits" }, { "source": "0x5227f603C1eE34CE3C06eFe6477003BDfCCB2f8c", "target": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "k": "sweep", "token": "ZAMA", "amount": 87853170.57, "eth": 0, "usd": 5745597, "ts": 1793318939, "ts_end": null, "tx": "0xdd738cae58e604dccbe4ed7b35ec9df12f3858b0c350221c87f35baca0be126d", "event": "E109", "confidence": "onchain_verified", "chain": "ethereum", "label": "ZAMA handed to its seller wallet" }, { "source": "0x28C6c06298d514Db089934071355E5743bf21d60", "target": "0x28C6c06298d514Db089934071355E5743bf21d60", "k": "recovery", "token": null, "amount": null, "eth": 0, "usd": 0, "ts": 1793319035, "ts_end": null, "tx": "0xafbf94c92a8d749988411669fa14d4f8866d9b4420b4ebd299f28e958dac7209", "event": "E110", "confidence": "onchain_verified", "chain": "ethereum", "label": "Binance revokes the delegation on Binance 14" }, { "source": "0x0084847BB9384D2fc5E8836E663689467E3e4C81", "target": "0x4d68B530920D26c3b01C99fecC19e21011B72bBD", "k": "swap", "token": "ZAMA", "amount": 34523185.428966925, "eth": 0, "usd": 2121450, "ts": 1793319095, "ts_end": "2026-10-30T00:23:47Z", "tx": "0x9f826154a943f3b91ee43b7ef3fe7843c931f9244f28255a3f52d72636323dcb", "event": "E111", "confidence": "onchain_verified", "chain": "ethereum", "label": "ZAMA dumped on decentralized exchanges (39% of 87,853,171 so far)" }, { "source": "0x3E2bf1ac6bf0934BBba6456C341c2EcbCED632d5", "target": "0x0000000000000000000000000000000000000da0", "k": "sweep", "token": "ARB", "amount": 74559805.2, "eth": 0, "usd": 11183151, "ts": 1793319500, "ts_end": null, "tx": "0x75e81a231a86e26a61e22dd2e6521504873a71a7ac1b2143c06e52796ceeedb6", "event": "E112", "confidence": "onchain_verified", "chain": "arbitrum", "label": "Arbitrum: ARB sent to address 0x\u20260DA0" } ] } }