入门 Binance hacker moves $38.82M ETH to new wallet while holding $1.12B
Quick answer
A hacker associated with the 2022 Binance hot wallet breach has moved $38.82 million worth of Ethereum (ETH) to a previously unused wallet address, according to on-chain tracking data reported by PANews on 2026-10-30. The actor retains control of approximately $1.12 billion in ETH across multiple wallets — a figure unchanged since at least mid-2025. This movement does not indicate liquidation or dispersal; it reflects internal reorganization within the hacker’s controlled addresses. No funds were sent to exchanges or decentralized applications known for laundering.
What triggered this transfer — and what does the $38.82M figure represent?
On-chain analysts observed the movement on October 29, 2026, when 11,247 ETH — valued at $38.82 million at the time of transfer — was sent from a long-dormant accumulation wallet to a newly generated address. The valuation is based on ETH’s spot price of $3,452.17 per coin, as recorded on CoinGecko’s aggregated feed on 2026-10-30 (PANews, 2026-10-30). This is not a new theft: all assets originated from the September 2022 Binance hot wallet incident, where 2.02 million BNB and ~115,000 ETH were compromised. The $38.82M amount represents just 9.8% of the hacker’s total ETH holdings — not a withdrawal, but a relocation.
How does this affect market structure and regulatory visibility?
The transfer increases on-chain traceability — not risk. Because the destination wallet has no prior transaction history and no interaction with centralized exchanges, it remains off-radar for most KYC-compliant platforms. That limits immediate liquidity pressure on ETH markets, unlike transfers to services like Coinbase or Kraken, which would trigger mandatory reporting under FATF Travel Rule guidelines. Still, U.S. Treasury’s OFAC and EU’s AMLD6 frameworks now classify such dormant, high-balance wallets as ‘high-risk exposure points’ for financial institutions conducting counterparty screening. As of 2026-Q3, over 42% of major crypto custodians have updated their blockchain monitoring rules to flag movements from legacy breach wallets — even if destinations are non-custodial (Chainalysis 2026 Regulatory Benchmark, published July 2026).
Why hasn’t this $1.12B been sold — and what uncertainty remains?
There is no evidence the hacker intends to liquidate. The $1.12 billion figure — representing 324,600 ETH — has remained stable across 14 separate wallet clusters since Q2 2025 (PANews, 2026-10-30). None of those clusters show outgoing trades, staking activity, or bridging to Layer 2s. This suggests either long-term holding, operational caution, or technical constraints — such as fragmented private key control across jurisdictions. Crucially, the source does not specify whether the $1.12B includes accrued staking rewards or only the original stolen balance. That ambiguity affects net asset valuations. Also unconfirmed: whether any portion resides in multisig contracts or hardware-signature environments that resist bulk movement.
Frequently asked questions
Why is this transfer notable if no money was lost?
This movement signals continued operational control over legacy breach assets — not new theft. It tests detection thresholds for compliance tools used by regulated entities. For readers tracking systemic risk, it confirms that large pre-2023 breach balances remain active and unmoved toward liquidity channels.
Does this mean ETH’s price could drop soon?
Not directly. Less than 3.5% of the hacker’s total ETH was relocated, and the receiving wallet has no exchange integrations or DeFi interactions. Historical precedent — including similar moves by the Poly Network and Ronin hackers — shows price impact only occurs when funds hit on-ramp services. Until then, this is a ledger-level event, not a market catalyst.
Risk warning and disclosure
Cryptocurrency investments carry substantial risk, including loss of principal, regulatory enforcement action, and irreversible transaction errors. This article reports observed on-chain activity only; it does not constitute financial advice, nor does it endorse any platform or strategy. The /go/binance-download/ link is a referral path — cryptodlhub receives compensation when users access Binance’s official mobile app via this route. We do not verify Binance’s security practices, nor do we guarantee compatibility with local laws in your jurisdiction. For foundational concepts, see our Glossary and News sections.
Risk warning and disclosure
Some outbound links may be affiliate links and we may earn a commission. This article is independent third-party information, not an official publication, and is not investment advice.
Related News
入门 Kanye West-linked wallet sells 1,390 ETH to avoid liquidation amid $317K loss
A wallet associated with Kanye West sold 1,390 ETH before October 30, 2026, to reduce loan-to-value pressure and prevent margin liquidation — realizing a…
入门 Pando Rings Hackers Buy 7,548 ETH Amid Broader Liquidity Shifts
Hackers linked to the 2025 Pando Rings bridge exploit acquired 7,548 ETH—worth ~$16.72 million—at market rates on October 30, 2026. This move signals stra…
入门 Binance and Bitget theft funds traced to same address via THORChain
On-chain investigator ZachXBT observed stolen funds from the October 2026 Binance and Bitget incidents converging into a single Ethereum address through T…
Follow the market on a major exchange
Download Binance or OKX from the official website to start trading.