Share this article
FTX 'Hacker' Moved 15K ETH This Weekend
The moving funds, coming soon before FTX founder and former chief executive Sam Bankman-Fried goes on trial, deepens one of the ongoing mysteries around the exchange's collapse last year.
Updated Oct 2, 2023, 8:04 p.m. Published Oct 2, 2023, 7:47 a.m.
All 15,000 ether sitting in a wallet associated with last year's $600 million attack on FTX's wallets have now moved through privacy tools and bridges.
In November 2022, hours after FTX and its related companies filed for bankruptcy, an unknown party managed to drain various wallets of as much as $600 million. About $26 million worth of ETH – 15,000 ether – sat in a single wallet until earlier this weekend, when a first tranche of 2,500 ETH ($4 million) began moving, ultimately ending up at the Thorchain bridge, the Railgun privacy wallet, or intermediary addresses.
STORY CONTINUES BELOW
The remainder of these funds have now moved, with many of them similarly landing up at the Thorchain router. Some of these funds also went to a contract labeled "Metamask: Swap Router."
Railgun is a privacy wallet that lets users store tokens and use funds for decentralized financial services, such as lending and borrowing. These transactions are shielded, meaning the exact use of such funds is not known. On the other hand, Thorchain is a bridge that lets users freely swap tokens between different blockchains without the fear of getting their transfers blocked.
As such, addresses associated with the exploit may have moved over $32 million worth of ether using THORChain, as per estimates.
The moving funds, coming soon before FTX founder and former chief executive Sam Bankman-Fried goes on trial, deepens one of the ongoing mysteries around the exchange's collapse last year. The identity of the party or parties behind the attack was never identified.
Read more: Millions in Ether Tied to FTX 'Hacker' on The Move
After the exploit, several addresses amassed various tokens, such as ETH and the stablecoin, and swapped it all into 37,000 ether. The address held more than 288,000 ether at peak and was once the 35th-largest owner of the cryptocurrency, as previously reported.
Here's the hacks / stolen funds I identified so you can check my work:
— Tay 💖 (@tayvano_) October 1, 2023
1. FTX Accounts Drainer (Not DPRK)
Total: 19,944 ETH (~$32m)
7,499 ETH in 4 Txn - 0x6e0e8dac46c3ebffd67887097dfda10d11dcbab6
4,749 ETH in 3 Txn - 0x68cc13a43da1e1ba7de3002df8a07665ea8b5f5f
3,999 ETH in 3…
Bankman-Fried was charged with two counts of wire fraud and five counts of conspiracy to commit various forms of fraud by federal prosecutors last year, weeks after stepping down from his role at FTX. He resigned the same day FTX filed for bankruptcy.
With reporting by Bradley Keoun.
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Solana’s Drift Launches v3, With 10x Faster Trades
With v3, the team says that about 85% of market orders will fill in under half a second, and liquidity will deepen enough to bring slippage on larger trades down to around 0.02%.
What to know:
- Drift, one of the largest perpetuals trading platforms on Solana, has launched Drift v3, a major upgrade meant to make on-chain trading feel as fast and smooth as using a centralized exchange.
- The new version will deliver 10-times faster trade execution thanks to a rebuilt backend, marking the largest performance jump the project has made so far.
Top Stories
