Analysts report about $242 million of stolen Binance funds moved through Tron in two days, laundering split across about 7,700 addresses

CHRONOS Cybersecurity & Infrastructure category illustration. Illustrative only, not specific to this event. — Illustrative image, not a photograph of this event.

Urgency: L3
: 68
: 80
: 40
: 50
: 85

At a glance

On Nov 1–2 onchain analysis showed about $242 million of funds stolen from Binance moved through the Tron blockchain over two days, and Elliptic reports most laundering has run through Tron where funds were split across about 7,700 addresses and bridged to Ethereum. This activity indicates active cross-chain laundering that complicates recovery and enforcement.

Nov 1–2 reports: about $242M moved through Tron in two days; Elliptic reports funds on Tron split across ~7,700 addresses and bridged to Ethereum.

CHRONOS Wire · November 2 · Alert 4

What happened

Onchain analysts found that about $242 million of the funds stolen from Binance moved through the Tron blockchain over two days, and analysts say most laundering activity has run through Tron and then been bridged to Ethereum using many addresses. This shows the attacker is actively moving funds across chains to obscure them.

Why it matters

Active large-value cross-chain laundering within days of the theft increases near-term risk of cashing out stolen funds and reduces time available for enforcement to intervene.

CHRONOS Bottom Line

Onchain reports dated Nov 1–2 show active, large-value routing of stolen Binance funds through Tron and onward to Ethereum, increasing complexity for recovery and enforcement efforts.

Full detail

What changed

On November 1–2 analysts reported that roughly $242 million of Binance theft proceeds were moved through the Tron network in two days, and that much of the laundering activity on Tron was split across about 7,700 addresses and bridged to Ethereum.

What is genuinely new

Analysts documented that about $242 million of the stolen funds moved through Tron over two days, and that funds routed via Tron were split across about 7,700 addresses and bridged to Ethereum.

Detailed analysis

On Nov 1 onchain analyst reporting cited by The Block indicated about $242 million of Binance theft proceeds moved through Tron within two days. Elliptic's Nov 2 analysis states that most laundering has run through Tron, split across about 7,700 addresses and bridged to Ethereum. These onchain observations indicate active post-theft layering and cross-chain bridging activity that complicates asset recovery.

U.S. Impact

U.S. Impact assessment pending.