Markets › News › Bitcoin

Binance Theft: $3.1B Remains Unmoved as Hackers Shift XRP

Elliptic says most stolen funds remain in place, though hackers have begun shifting XRP and converting assets into bitcoin.

Elliptic says most stolen funds remain in place, though hackers have begun shifting XRP and converting assets into bitcoin. Bitcoin (BTC) is trading at $75,826.00. This is an original TLT brief synthesising 3 outlets (Bitcoin.com, Crypto Economy, Decrypt), with their figures cross-checked, plus live market data, as of Fri, 06 Nov 2026 20:45:02 UTC.

Why it matters

The movement of part of the stolen assets shows that the Binance theft remains active across multiple blockchains and services. The continued presence of $3.1 billion in linked wallets also gives investigators a large pool of identifiable assets to monitor or freeze.

Covered by 3 outlets over about 4.7 h — TLT synthesises them all into one brief
  1. Decrypt
    $3.1B in Stolen Binance Crypto Has Yet to Be Laundered: Elliptic ↗
  2. Bitcoin.com
    Stolen Binance Bitcoin, XRP on the Move as $3.1B Remains Unlaundered: Elliptic ↗
  3. Crypto Economy
    Elliptic: $3.1B in Stolen Binance Crypto Still Untouched ↗
Key takeaways
  • About $3.1 billion of the $6.4 billion Binance theft remains largely untouched.
  • Attackers used more than 20,000 wallets across 16 blockchains.
  • Bitcoin.com reports stolen XRP is moving and crypto is being converted into bitcoin.
  • Crypto Economy reports roughly $2.85 billion has been frozen or seized.
What the reporting agrees on

Bitcoin.com, Crypto Economy and Decrypt all report that approximately $3.1 billion of the roughly $6.4 billion stolen from Binance remains in wallets associated with the attack. They also agree that attackers have used more than 20,000 wallets spanning 16 blockchains, with most of the stolen bitcoin and ether still largely unmoved. Bitcoin.com provides the sharper detail that stolen XRP is being transferred and that some cryptocurrency is being converted into bitcoin, while Decrypt emphasizes that the bulk of the stolen ETH and BTC has not moved. Crypto Economy alone reports 36 services involved, that the remaining assets are primarily bitcoin and ether, and that around $2.85 billion has already been frozen or seized.

Blockchain analytics firm Elliptic estimates that approximately $3.1 billion of the $6.4 billion taken in the reported Binance theft remains in wallets linked to the attackers. Despite some movement among the proceeds, most of the identified bitcoin and ether has stayed in place, according to Bitcoin.com, Crypto Economy and Decrypt. The figure is independently consistent across all three outlets’ coverage.

The attack network is broad even though the movement of assets is limited. Elliptic has linked the activity to more than 20,000 wallets across 16 blockchains, with Crypto Economy counting 36 services in the funds’ movement chain. Bitcoin.com reports that hackers have started transferring stolen XRP and converting additional cryptocurrency into bitcoin, while Decrypt says the bulk of the stolen ETH and BTC remains unmoved.

The three outlets agree on the roughly $3.1 billion still held in linked wallets and on the scale of the infrastructure used by the attackers. Their emphasis differs: Bitcoin.com focuses on the new movement involving XRP and conversions into bitcoin; Crypto Economy adds that the untouched holdings are primarily bitcoin and ether and reports approximately $2.85 billion frozen or seized; and Decrypt stresses that the main pools of ETH and BTC have not shifted. No outlet identified in the supplied coverage contradicts the shared $3.1 billion estimate.

Elliptic’s findings describe an ongoing process rather than a completed transfer of the stolen assets. Crypto Economy identifies the attack as the October incident, while the broader reporting indicates that the remaining funds were still linked to wallets more than a week after the theft. The involvement of 16 blockchains, 36 services and more than 20,000 wallets complicates any attempt to move the full balance through one channel.

The wider crypto market was flat, with total capitalization at $2.62 trillion and the Fear & Greed index at 28, indicating fear. Bitcoin traded at $75,855, down 0.48% over 24 hours and 1.06% over seven days, with a $1.53 trillion market capitalization. XRP was weaker at $1.19, falling 4.51% over 24 hours and 4.39% over seven days, while its market capitalization stood at $75.31 billion. The next points to monitor are whether more of the identified wallets move, whether conversions into bitcoin accelerate, and whether additional assets are frozen or seized; the available figures do not establish how either side of the theft will develop.

Market reaction since this brief Live

Since this brief published about 3 hours ago, Bitcoin (BTC) has moved from $75,855.00 to $75,826.00 — -0.04%.

$75,822$75,831$75,841$75,850$75,859 published · $75,855 now · $75,826 (-0.04%) Nov 6 17:50 UTC Nov 6 20:45 UTC
BeforeSince publishPublished · $75,855.00
CoinAt publishNowSince publish
BTC$75,855.00$75,826.00-0.04%
XRP$1.19$1.18-0.84%

The chart plots BTC's price: grey is the move before this brief published, the vertical dashed line marks the moment it published, the horizontal dashed line is the price then, and the coloured area is the move since — from TLT's market data (daily resolution). It shows what happened after the news, not that the news caused it; many factors move prices. Not financial advice.

What this means in naira

At today's peer-to-peer rate, 1 BTC ≈ ₦104.63M (about $75,826.00), down 0.4% over 24 hours. The naira itself trades about 2.4% above the official rate on the P2P market, so a Nigerian buyer's effective cost differs from the headline dollar price.

Live market data

Current prices for the assets in this story — live, source-stamped, updated every 15 minutes.

#1
$75,826.00 ▼ 0.40%
7d -1.06%MCap $1.52TFull BTC data →
XRP
#5
$1.18 ▼ 5.12%
-0.84% since this brief published
7d -4.39%MCap $74.70BFull XRP data →
The market when this published · November 6, 2026
Total market cap$2.62T
Bitcoin 24h-0.48%
Ethereum 24h-0.95%
BTC dominance58.3%
Fear & Greed28 · Fear
Cross-source data check

1 key figure independently matched across 3 outlets reporting this story.

$3.1B3× corroboratedBitcoin.com, Crypto Economy, Decrypt

TLT extracts the figures each outlet reports and flags the ones that agree. Numbers cited by only one outlet are attributed in the brief, not shown as corroborated.

Binance Theft: $3.1B Remains Unmoved as Hackers Shift XRP — questions & answers

How much of the Binance theft remains unmoved?

Approximately $3.1 billion remains in wallets linked to the attack, according to Elliptic and all three outlets reporting the findings.

How many wallets and blockchains are involved?

Elliptic linked the activity to more than 20,000 wallets across 16 blockchains. Crypto Economy additionally reports 36 services involved.

How much of the stolen funds has been frozen?

Crypto Economy reports that around $2.85 billion has been frozen or seized. The other two outlets do not provide that figure.

How much is 1 Bitcoin worth in naira today?

About ₦104.63M at the live peer-to-peer (P2P) USDT rate, which is what Nigerians typically trade at — equivalent to roughly $75,826.00. The naira price moves with both BTC's US-dollar price and the USDT/NGN rate; use our Bitcoin in naira page for any amount.

Which outlets reported this story?

This is an original TLT brief that synthesises reporting from Bitcoin.com, Crypto Economy, Decrypt, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

In this storyBinance Company
TLT Newsdesk Data-stamped

TLT's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · November 6, 2026 ⛓ Timestamped at Bitcoin block #974,850 sha256:8584d82455d572da
Corroborated across 3 outlets, reported over about 4.7 h — this is an original TLT summary with live market data, not the original article.Decrypt · Nov 6 14:04 ↗Bitcoin.com · Nov 6 17:50 ↗Crypto Economy · Nov 6 18:45 ↗

Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.