Wallets Tied to Binance Hack Still Hold Estimated $5.45 Billion

Wallets linked to the Binance hack still held an estimated $5.45 billion in assets as of Nov. 10, according to a snapshot of the tracked addresses, while roughly $891 million of an estimated $6.34 billion total may have already been moved or laundered.

The number matters because it shows the bulk of the estimated stolen funds have not left the tracked wallets. The remaining balance splits into two very different buckets: about $2.85 billion that remains available, and $2.6 billion that has been frozen. Those two figures add up to the $5.45 billion still sitting in the wallets.

The gap tells the rest of the story. Subtract the $5.45 billion still held from the $6.34 billion estimated original total and you get the roughly $891 million described as potentially moved or laundered. That figure is labeled as a possible movement or laundering amount, not a confirmed loss — but it's the portion that has effectively slipped out of the tracked footprint.

Where did the moved funds go?

Funds moved through THORChain and Chainflip over the two to three days before the Nov. 10 snapshot, the tracking shows. That activity places both cross-chain networks directly in the path of the funds.

The detail is operationally significant. THORChain and Chainflip exist to swap assets across blockchains without centralized intermediaries, which makes them common rails for moving tainted funds between networks. Their appearance in the flow suggests whoever controls the wallets is actively testing routes for the available portion of the balance, not simply sitting on it.

What does the split between available and frozen mean?

Of the $5.45 billion retained, slightly more than half — about $2.85 billion — is still accessible. The remaining $2.6 billion has been frozen, likely through exchange freezes, stablecoin issuer blacklists or other interventions, though the snapshot does not break down the mechanism.

The frozen share is the clearest constraint on the operation. Even though the wallets nominally hold most of the estimated stolen amount, nearly half of that retained balance is out of reach. The practical ceiling for further movement sits at the $2.85 billion available figure, minus whatever additional freezes land.

The numbers also frame the recovery question. Every dollar frozen is a dollar that can potentially be returned to victims through legal process; every dollar routed through THORChain or Chainflip is harder to trace and claw back.

What happens next?

The $891 million already moved or laundered represents about 14% of the estimated total. Whether that share grows depends on how quickly issuers and exchanges can freeze more of the available $2.85 billion — and the pace of movement through cross-chain rails over the coming days will be the clearest signal of how much of the stolen funds remain recoverable.