Share this article
Hackers Are Turning Binance's Stolen Bitcoin Into Other Cryptocurrencies
Another tranche of stolen funds have hit exchanges and are being exchanged for other cryptos, according to a new analysis.
By John Biggs
Updated Sep 13, 2021, 11:11 a.m. Published Jul 16, 2019, 11:30 a.m.
UPDATE (16 July 2019, 14:51 UTC): A correction has been made to remove the suggestion that all of Binance's stolen BTC has been moved into fiat. Many of the associated exchanges do not offer fiat pairs.
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters
A new analysis by Coinfirm shows the movement of the bitcoin stolen from Binance into various wallets. The hack, which netted 7,000 BTC, happened on May 7, 2019 at 17:15:24 UTC and the hackers have been moving stolen bitcoin from wallet to wallet.
Now, however, Coinfirm has spotted some activity that suggests the hackers are moving their gains off of exchanges, potentially into other cryptocurrencies.
The first transaction happened here while other transactions followed. Most recently, however, it's become clear that the hacker has begun liquidating the BTC on various exchanges.
"Analysis of one of the mainchains used by the hacker in layering stolen funds shows that they were able to liquidate at least 1.8087 BTC (21,000.00 USD) on the following exchanges," said Coinfirm's Grant Blaisdell. The transfers happened as follows:
Bitfinex: 0,7934 BTC
Binance: 0,4294 BTC
Bitmex: 0,0022 BTC
KuCoin: 0,0713 BTC
Kuna: 0,2482 BTC
Bitmarket: 0,2560 BTC
Crypterra: 0,0072 BTC
Bitcoin.de: 0,0007 BTC
WazirX: 0,0003 BTC
While caveats apply, it's clear that the hacker moved an amount of BTC to each of these exchanges and there they either left the chain or remained dormant. This is obviously cold comfort to those who are watching their stolen crypto hop from exchange to exchange.
Hacker image via Shutterstock
More For You
What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Barclays Sees ‘Down-Year’ for Crypto in 2026 Without Big Catalysts
Spot trading volumes are cooling, and investor enthusiasm is fading amid a lack of structural growth drivers, analysts wrote in a new report.
What to know:
- Barclays forecasts lower crypto trading volumes in 2026, with no clear catalysts to revive market activity.
- Spot market slowdowns pose revenue challenges for retail-focused platforms like Coinbase and Robinhood, the bank said.
- Regulatory clarity, including pending market structure legislation, could shape long-term market growth despite near-term headwinds.
Top Stories
