# Over $1B in Ether and About $1.42B in Bitcoin Show Limited Movement

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/46782
Published: 2026-11-02T18:44:12.000Z
Updated: 2026-11-02T18:44:12.000Z
Section: Technology

> Other stolen funds moved through DeFi services and cross-chain bridges, with some cycling back to previously used addresses in thousands of transactions.

More than $1 billion in Ether (ETH) and about $1.42 billion in Bitcoin (BTC) tied to the Binance theft have seen little transfer activity since the incident. Other stolen funds moved quickly through decentralized finance (DeFi) services and cross-chain bridges.

Two different patterns emerged: limited movement in the named Ether and Bitcoin funds, and faster movement among other stolen funds. Some repeatedly returned to addresses used earlier, in activity spanning thousands of transactions.

The cycling differed from laundering behavior seen in previous cases involving North Korean hackers and may reflect automated operations. There was no evidence that attackers used artificial intelligence (AI); possible automation does not establish AI involvement.

Overall, the flows fit patterns associated with early-stage layering after North Korean hacker attacks.