Onchain Lens says $891m Moved after $6.34bn Binance hack
Onchain Lens estimates $2.85bn still held by attackers and $2.6bn frozen, with funds routed via THORChain and Chainflip.
Key takeaways
- 1$891m moved or laundered after Binance hack
- 2$2.85bn still under attackers' control
On 10 November 2026, analytics firm Onchain Lens said $891 million in assets linked to the earlier $6.34 billion Binance hack had been transferred or used for money laundering.
The firm estimates attackers still control about $2.85 billion, while $2.6 billion is frozen. In the last two to three days, the stolen funds were routed through cross-chain bridges THORChain and Chainflip, according to the on-chain data.
Binance is the world’s largest cryptocurrency exchange, handling billions of dollars daily. The 2026 hack, one of the biggest in crypto history, exposed vulnerabilities in custodial security. Onchain Lens tracks blockchain transactions and provides real-time estimates of illicit flows, making its findings relevant to regulators and market participants.
The continued movement of nearly a billion dollars suggests the perpetrators are still active and exploiting bridge protocols to obscure provenance. Authorities in major jurisdictions are likely to intensify monitoring of THORChain and Chainflip activity. Traders and custodians should watch for further freezes or law-enforcement seizures as investigations progress. The episode may also prompt exchanges to review bridge integrations and enhance AML controls.
Reported and edited by the YourKhabri desk under our editorial policy. Nothing here is investment advice.