Binance Attacker Moves Entire $293 Million in Stolen XRP, Launders $242 Million Through Tron
An attacker moved all 233.45 million XRP (worth $293 million) stolen from Binance to new wallets, according to on-chain data. The funds were split into six wallets, with five holding 40 million XRP each and one holding 33.46 million XRP. Additionally, $242 million was laundered through the Tron network. Binance covered 95% of the losses with its own funds.
How this was made

The 30-second read
Why it matters
The disclosed movements represent a sizable shock to the XRP and Tron ecosystems, likely prompting heightened security measures and short‑term price volatility.
Market read
First‑time reporting of a $293 M XRP theft and $242 M Tron laundering, creating immediate negative sentiment for both tokens.
What to watch
The speed of cross‑chain swaps could limit immediate price impact; exchanges may quickly freeze the funds.
Background
The article reports the first known on‑chain tracing of the Binance hack aftermath, detailing how the attacker moved stolen XRP and laundered proceeds via Tron.
Ticker impact
Large-scale movement of stolen XRP (≈293 M USD) disclosed for the first time, indicating laundering activity.
downward pressure as markets price in the large theft and potential regulatory response
The article reveals a fresh, massive transfer of XRP that was not previously reported, which typically triggers negative sentiment and price drops.
Attacker moved about $242 M through the Tron network as part of the same laundering scheme.
downward pressure as investors react to the laundering link and potential exchange scrutiny
The disclosed cross‑chain swaps and large TRX flows are new information that can negatively affect market perception.
Market effects
Crypto‑exchange security and AML compliance concerns may rise across the sector.
Potential regulatory focus in jurisdictions hosting major exchanges (e.g., US, Singapore).
Highlights systemic risk of large crypto thefts, relevant to global crypto market participants.
Counterpoint
Some traders may view the forced liquidation of stolen assets as a buying opportunity if price overshoots.
Key entities
- exchangeBinance
Private crypto exchange that suffered the hack.
- exchangeGate
Centralized exchange where attacker deposited $250k.




