About $20 Million in Binance Hack-Linked TRX Passed Through THORChain

About $20 million in Binance hack-linked TRON (TRX) passed through THORChain on Oct. 30 and 31, while a later balance snapshot accounted for only part of the swap proceeds.

The trace counted 64 million TRX, valued at about $20 million after refunds. A total of 3,600 Ether (ETH), worth about $8 million, was identified at two Ethereum addresses. A broader balance snapshot taken at 8:26 a.m. ET (13:26 UTC) Nov. 2 did not identify the remaining THORChain swap proceeds.

The FBI, U.S. Secret Service and IRS Criminal Investigation urged THORNode operators and other virtual-asset providers on Oct. 31 to block transactions involving listed addresses or funds derived from them. The FBI attributed the theft of more than $6 billion, which it said occurred on or about Oct. 29, to North Korea’s TraderTraitor activity. The agency’s list includes Ethereum, Bitcoin and Solana addresses, but no Tron section.

One estimate placed THORChain flows at about $44 million within roughly $242 million in Tron flows over about two days. A separate route estimate put the amount at $31 million, but conflicting observation cutoffs mean the figures are not directly comparable.

THORChain enables swaps of native assets across blockchains and operates through independently run nodes. TokenPost previously covered the FBI request to THORChain operators.