Wallet in Binance Hack-Linked Flow Sends 120 Million TRX Onward

One address in a TRON flow tied to funds from Binance’s Oct. 29 hot-wallet compromise sent 120 million TRON (TRX) onward Friday, Oct. 30, within a larger traced pool.

The split began at 6:15:21 a.m. ET (10:15:21 UTC) and finished at 6:20:18 a.m. ET (10:20:18 UTC). Four new addresses received 120 million TRX each, while a fifth received 158,200,900 TRX. One of the 120 million TRX recipients sent the full amount onward at 6:20:48 a.m. ET (10:20:48 UTC) to an address already in the traced flow.

The transfer was part of the 638.2 million TRX pool, not an additional withdrawal from Binance. The transactions do not identify who controls the addresses or show a sale or cash-out.

The pool followed a swap of about $234 million in Tether (USDT) for roughly 638 million TRX on SunSwap. An earlier on-chain tally of the roughly 638 million TRX pool showed no movement at that time.

Binance said its hot wallets were compromised around 4:05 p.m. ET Thursday, Oct. 29 (20:05 UTC), affecting about $6.3 billion in token assets. The exchange said it would cover all stolen funds and had set aside more than $6.34 billion in company funds. “At this stage, we have found no evidence that wallet private keys were leaked,” Binance said in its Oct. 30 security update. Binance said its investigation was ongoing.