The hacker behind the bankrupt cryptocurrency exchange FTX started transferring their Ether (ETH) holding to a new wallet address on Nov. 20. The FTX wallet drainer was the 27th largest ETH holder after the hack but dropped by 10 positions after the weekend ETH dump.

The FTX hacker drained nearly $447 million out of multiple FTX global and FTX.US exchange wallets just hours after the crypto exchange filed for Chapter 11 bankruptcy on Nov. 11. Majority of the stolen funds were in ETH, making the exploiter the 27th largest ETH whale.

On Nov.20, the FTX wallet drainer 1 transferred 50,000 ETH to a new address, 0x866E. The new wallet address then swapped the ETH for renBTC (ERC-20 version of BTC) and bridged to two wallets on the Bitcoin blockchain. One of the wallets bc1qvd…gpedg held 1,070 renBTC while another wallet bc1qa…n0702 held 2,444 renBTC.

Chart

Crypto analytic group CertiK later tracked the bridged renBTC on bc1qvd…gpedg address and found that the address employed a money laundering technique called peel chain to launder the renBTC.

A Peel chain is a technique to launder a large amount of cryptocurrency through a lengthy series of minor transactions. A small portion is ‘peeled’ from the subject’s address in a low-value transfer. These incremental laundered funds are often transferred to exchanges where they can be converted to fiat currency or other crypto assets.

At the time of the FTX hack, there were two parties involved, one black hat that managed to drain $447 million and a white hat that managed to move $186 million of FTX assets to cold storage. However, when Bahaman Securities and Exchange Commission released a notice suggesting they are trying to move assets from the FTX, it raised many eyebrows, with many claiming that the securities regulator was, in fact, the black hat behind the exploit.

On-chain analyst ZachXBT highlighted the token transfer pattern of the black hat wallet and said that the wallet was dumping tokens and bridging sporadically was a very different behavior from the other addresses that withdrew from FTX and instead sent to a multisig on chains like Ethereum or Tron.

Looking at the movement of funds and the techniques involved in the transfer of these funds, It’s unlikely that FTX wallet drainer 1 is under the control of the Bahamian government based on today’s on-chain activity. The BTC activity is consistent with a peel chain, a form of money laundering that would be highly unusual for a government agency to be involved in.


Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.

Join Telegram

Recommended content


Recommended Content

Editors’ Picks

Coinbase lists WIF perpetual futures contract as it unveils plans for Aevo, Ethena, and Etherfi

Coinbase lists WIF perpetual futures contract as it unveils plans for Aevo, Ethena, and Etherfi

Dogwifhat perpetual futures began trading on Coinbase International Exchange and Coinbase Advanced on Thursday. However, the futures contract failed to trigger a rally for the popular meme coin.

More Cryptocurrencies News

Stripe looks to bring back crypto payments as stablecoin market cap hits all-time high

Stripe looks to bring back crypto payments as stablecoin market cap hits all-time high

Stripe announced on Thursday that it would add support for USDC stablecoin, as the stablecoin market exploded in March, according to reports by Cryptocompare.

More Cryptocurrencies News

Ethereum cancels rally expectations as Consensys sues SEC over ETH security status

Ethereum cancels rally expectations as Consensys sues SEC over ETH security status

Ethereum (ETH) appears to have returned to its consolidating move on Thursday, canceling rally expectations. This comes after Consensys filed a lawsuit against the Securities & Exchange Commission (SEC) and insider sources informing Reuters of the unlikelihood of a spot ETH ETF approval in May.

More Ethereum News

FBI cautions against non-KYC Bitcoin and crypto money transmitting services as SEC goes after MetaMask

FBI cautions against non-KYC Bitcoin and crypto money transmitting services as SEC goes after MetaMask

US Federal Bureau of Investigations (FBI) has issued a caution to Bitcoiners and cryptocurrency market enthusiasts, coming on the same day as when the US Securities and Exchange Commission (SEC) is on the receiving end of a lawsuit, with a new player adding to the list of parties calling for the regulator to restrain its hand.

More Cryptocurrencies News

Bitcoin: BTC post-halving rally could be partially priced in Premium

Bitcoin: BTC post-halving rally could be partially priced in

Bitcoin (BTC) price briefly slipped below the $60,000 level for the last three days, attracting buyers in this area as the fourth BTC halving is due in a few hours. Is the halving priced in for Bitcoin? Or will the pioneer crypto note more gains in the coming days? 

Read full analysis

BTC

ETH

XRP