Independent record. Not associated with, endorsed by or operated by Binance. This site is read-only: there is nothing to sign in to, pay for or connect.
Elliptic said the stolen USDT reached the attacker's main Ethereum wallet at 20:24 UTC, that Tether froze that wallet 37 minutes later locking 1.18 billion USDT, and that Circle froze the 823 million USDC in the same wallet three minutes after that.
This line is our short summary of the quote below. The quote is the evidence.
ReportedfreezeStatement 92
The stolen USDT reached the attacker's main Ethereum wallet at 20:24 UTC. Tether froze that wallet 37 minutes later, locking 1.18 billion USDT in place, and then followed the funds, freezing four more attacker addresses within 17 minutes. Circle froze the 823 million USDC in the same wallet three minutes after that.
Hacken's timeline (statement 19) lists Tether freezing 971.1M USDT at 21:01 UTC, 37 minutes after the Ethereum transaction. Elliptic (statement 92) says Tether froze the main attacker Ethereum wallet 37 minutes after 20:24 UTC, "locking 1.18 billion USDT in place". Both put the freeze at the same moment and give different amounts. TRM (statement 143) says Tether froze 971.1 million USDT in that wallet at 21:01 and that later sweeps landed in the frozen wallet, which now holds 1.175 billion USDT. The Elliptic text we hold does not say whether its 1.18 billion includes those later sweeps. Shown side by side, not reconciled. Compare with The page states that Tether froze 971.1M USDT at 21:01 UTC, 37 minutes after the Ethereum transaction. (Hacken). Side by side
The long preparation, the apparent targeting of staff and the use of Binance's own systems to sign transactions resemble earlier TraderTraitor thefts, including Bybit.
Elliptic has identified common service usage between those laundering the Binance funds and those behind three earlier thefts attributed to TraderTraitor, from BigONE, WOO X and AFX.