Binance Hackers Convert Stolen Funds Amid Freezing Efforts
Written with artificial intelligence.

The recent $6.3 billion hack of Binance saw attackers quickly convert stolen stablecoins into cryptocurrencies that could not be frozen. Despite efforts from issuers like Tether and Circle to immobilize billions, hackers still control approximately $3.33 billion in assets.
Overview of the Binance Hack
The recent attack on Binance, estimated to be worth $6.3 billion, has been labeled the largest in crypto history. Initiated at 8:04 pm UTC on a Thursday, the hackers, believed to be linked to North Korean groups behind previous exploits, rapidly moved to convert stolen stablecoins into cryptocurrencies that are not subject to freezing by issuers.
Rapid Asset Conversion
In a strategic move, the attackers converted assets like USDT and USDC, which can be frozen, into decentralized cryptocurrencies such as Bitcoin (BTC) and Ether (ETH). Within less than an hour of the hack, approximately $500 million in USDT was traced to a single address, with $325 million sold for ETH shortly thereafter. This swift conversion was crucial as stablecoin issuers like Tether and Circle began blacklisting addresses related to the theft almost immediately.
Freezing Efforts and Impact
As of Friday, Binance reported that around $3 billion of the stolen assets had been frozen on-chain. Tether managed to immobilize approximately $1.567 billion in USDT, while Circle froze about $823 million in USDC just minutes after the theft began. Other entities, including Arbitrum, took precautions by moving $30.5 million in ARB and ETH to a frozen wallet.
Aave's Involvement
The decentralized lending protocol Aave added complexity to the situation when a wallet linked to the attackers deposited $60 million in USDT and borrowed $44.6 million in wrapped Ether (WETH) shortly before the first freezes occurred. Although Aave temporarily froze its markets to prevent further transactions, existing users retained the ability to withdraw and repay loans, and the protocol's risk assessments indicated that it remained safe from liquidation risks.
Current Status and Future Outlook
Despite the freezing efforts, the attackers still control approximately $3.33 billion in assets that cannot easily be immobilized. While Binance has committed to covering the losses using its Secure Asset Fund for Users (SAFU), the success of asset recovery remains uncertain. As emphasized by Binance's CEO, user assets are secure, and the exchange is actively working to recover stolen funds.
