Share this article

FTX Exploiter Transfers $200M in Ether to 12 Crypto Wallets

The exploiter had previously drained hundreds of millions of digital assets from FTX on the same day as the embattled crypto exchange filed for bankruptcy protection.

Updated Nov 21, 2022, 9:25 p.m. Published Nov 21, 2022, 5:36 p.m.
The FTX exploiter is back on the move. (Leon Neal/Getty Images)
The FTX exploiter is back on the move. (Leon Neal/Getty Images)

Blockchain data from Etherscan shows that a crypto account associated with the FTX exploiter moved a total of 180,000 ether (ETH) – worth roughly $200 million at current prices – to 12 crypto wallets Monday, with each wallet receiving 15,000 ETH over a period of minutes.

The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)
The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Failed crypto exchange FTX suffered an exploit on Nov. 11 – the same day it filed for bankruptcy protection in the U.S. – enduring about $600 million of unauthorized withdrawals.

Read more: 'FTX Has Been Hacked': Crypto Disaster Worsens as Exchange Sees Mysterious Outflows Exceeding $600M

Blockchain experts argued that the looter was likely an insider who had access to the exchange's cold wallets. The security team of crypto exchange Kraken said that they knew the identity of the exploiter, because they used their personal verified account to pay for transaction fees.

Blockchain intelligence firm Arkham Intelligence said the FTX exploiter is in a panic, and has lost a substantial amount of money in slippage and conversion fees attempting to cash out.

jwp-player-placeholder

The looter's move on Monday follows Sunday's conversion of funds to renBTC (a version of bitcoin on the Ren bridge). Ren is a blockchain bridge with close ties to Alameda Research, the corporate sibling of FTX. According to a report by blockchain analysis firm Elliptic, the Ren bridge has been previously used for laundering at least half a billion dollars of stolen funds.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

Barclays Sees ‘Down-Year’ for Crypto in 2026 Without Big Catalysts

(Jose Marroquin/Unsplash)

Spot trading volumes are cooling, and investor enthusiasm is fading amid a lack of structural growth drivers, analysts wrote in a new report.

What to know:

  • Barclays forecasts lower crypto trading volumes in 2026, with no clear catalysts to revive market activity.
  • Spot market slowdowns pose revenue challenges for retail-focused platforms like Coinbase and Robinhood, the bank said.
  • Regulatory clarity, including pending market structure legislation, could shape long-term market growth despite near-term headwinds.