Binance Attackers Route 486,970 SOL Into Bitcoin

What happened: Attackers behind the reported $6.3 billion Binance theft swapped 486,970 SOL, valued at approximately $46.4 million in the research, for Bitcoin through the Relay bridge, according to Chainalysis reporting. The activity followed approximately $500 million routed through Tron across more than 1,000 addresses and 3,000 deposits, while Gate said it froze two linked accounts after approximately $250,000 reached the exchange over a 12-hour window. Tether and Circle reportedly froze approximately $3 billion in stolen assets, although attackers still controlled approximately $3.5 billion; US investigators urged exchanges, swap operators and decentralized services to block flagged addresses.

Why it matters: The contrast between the reported $3 billion frozen and the subsequent 486,970 SOL conversion illustrates the uneven containment options across this incident: stablecoin issuers could restrict some assets, while other holdings continued moving through cross-chain services. Chainalysis described thousands of rapid, sequential transfers as evidence suggesting automation, which makes transaction volume a warning about investigative workload rather than proof that the trail has disappeared. Gate's account freezes show that exchange intervention remains relevant, but the reported $250,000 deposit is only a narrow part of a much larger recovery effort; freezing funds also should not be confused with returning them to users.

Sources: Cointelegraph; The Defiant.