Share this article

FTX Exploiter Transfers $200M in Ether to 12 Crypto Wallets

The exploiter had previously drained hundreds of millions of digital assets from FTX on the same day as the embattled crypto exchange filed for bankruptcy protection.

Updated Nov 21, 2022, 9:25 p.m. Published Nov 21, 2022, 5:36 p.m.
The FTX exploiter is back on the move. (Leon Neal/Getty Images)
The FTX exploiter is back on the move. (Leon Neal/Getty Images)

Blockchain data from Etherscan shows that a crypto account associated with the FTX exploiter moved a total of 180,000 ether (ETH) – worth roughly $200 million at current prices – to 12 crypto wallets Monday, with each wallet receiving 15,000 ETH over a period of minutes.

The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)
The FTX hacker transferred 180,000 ETH to twelve separate crypto accounts Monday. (Etherscan)
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

Failed crypto exchange FTX suffered an exploit on Nov. 11 – the same day it filed for bankruptcy protection in the U.S. – enduring about $600 million of unauthorized withdrawals.

Read more: 'FTX Has Been Hacked': Crypto Disaster Worsens as Exchange Sees Mysterious Outflows Exceeding $600M

Blockchain experts argued that the looter was likely an insider who had access to the exchange's cold wallets. The security team of crypto exchange Kraken said that they knew the identity of the exploiter, because they used their personal verified account to pay for transaction fees.

Blockchain intelligence firm Arkham Intelligence said the FTX exploiter is in a panic, and has lost a substantial amount of money in slippage and conversion fees attempting to cash out.

jwp-player-placeholder

The looter's move on Monday follows Sunday's conversion of funds to renBTC (a version of bitcoin on the Ren bridge). Ren is a blockchain bridge with close ties to Alameda Research, the corporate sibling of FTX. According to a report by blockchain analysis firm Elliptic, the Ren bridge has been previously used for laundering at least half a billion dollars of stolen funds.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

These Three Metrics Show Bitcoin Found Strong Support Near $80,000

True Market Mean (Glassnode)

Onchain data shows multiple cost basis metrics confirm heavy demand and investor conviction around the $80,000 price level.

What to know:

  • Bitcoin rebounded from the $80,000 region after a sharp correction from its October all time high, with price holding above the average entry levels of key metrics.
  • The convergence of the True Market Mean, U.S. ETF cost basis, and the 2024 yearly cost basis around the low $80,000 range highlights this zone as a major area of structural support.