Attacker Moves $242 Million Through Tron After Binance Attack

An attacker moved about $242 million through Tron-linked routes roughly two days after the Binance attack, with the funds passing through several services after Tether froze a large amount of USDT.

On-chain analyst SomaXBT tied the transfer to the attacker and listed Relay, THORChain, Chainflip and Symbiosis among the routes. Tether’s freeze totaled about $378.7 million in USDT.

About $41.7 million also passed through Bitget Wallet, though its destination was unconfirmed. In the same breakdown, about $7.5 million remained on Tron, while more than $3 billion held on other blockchains was largely untouched.

SomaXBT separately estimated that about $628 million in assets were stolen on Tron during the attack. That estimate describes the initial theft; the $242 million figure refers to later transfers, while the freeze and remaining balances are separate details in the account. The reported movements span an initial theft, a Tether freeze, transfers through named services and balances across multiple blockchains.