ChainCatcher reported, citing data from Coinglass, that a transfer of 33 million USDT was detected on Oct. 13 at 11:07. The funds were moved out of Binance and sent to an unknown wallet. The source text did not provide additional details on the wallet address, the purpose of the transfer, or any related counterparties. This was published as a brief 7x24 market update.
Blockchain records show that a wallet linked to the CryptoBilis exchange security incident transferred 464 ETH, worth about $1.43 million, into Tornado Cash through one intermediary address and four deposit wallets. According to The Defiant, the routing pattern suggests an effort to launder stolen funds. On-chain data also indicates that the source wallet still holds about 700 ETH. The transfer adds a new traceable step in the movement of assets tied to the incident, with the use of Tornado Cash drawing attention because of its role as a privacy-focused transaction platform.
Blockchain security platform Phalcon said about $3.55 million in previously unclaimed cross-chain funds was claimed and transferred out roughly six hours before its post. The firm said the key question is whether the transactions were initiated by the rightful owner or by an attacker who obtained valid EIP-7702 authorization. On-chain records show the claim was submitted by address 0x24a9, whose funding came from Tornado Cash, and the execution was carried out through an EIP-7702 delegation on an externally owned account. The two transactions were worth $1.33 million and $2.22 million, and on-chain data confirmed that the authorization used in the process was valid. Phalcon also noted that several days earlier, on-chain researcher stuckfunds.eth had repeatedly sent messages to address 0x4943, informing the owner that the funds were still claimable. At this stage, on-chain data does not show whether the owner signed intentionally, was tricked into signing, or had a private key compromised.
Blockchain security firm BlockSec said an address that had previously received funds through Tornado Cash used EIP-7702 delegated execution roughly six hours earlier to claim and move about $3.55 million in unclaimed cross-chain bridge funds from another address. Before that, on-chain researcher stuckfunds.eth had repeatedly sent messages to the address, warning that funds were still available to be claimed. BlockSec said on-chain data confirms the authorization was valid, but it cannot yet determine whether the signature was made by the owner voluntarily, obtained through deception, or resulted from a private key compromise. The update was cited by Techub News and attributed in the item to Wu Blockchain.
On Oct. 6, BlockBeats reported that on-chain monitoring showed the U.S. government had just moved funds seized in the Bitfinex hack case. The transfer involved about 264.863 BTC, which the report valued at roughly $22.87 million, and the coins were sent to a new address. The update did not include additional details on the destination beyond describing it as a new address. The report cited on-chain tracking as the source of the movement.
Pump.fun’s fee wallet transferred 77,706 SOL to Kraken roughly four hours before the update, according to on-chain monitoring cited by BlockBeats on Sept. 12. Based on the price at the time of the transfer, the transaction was worth about $7.88 million. The wallet activity was tracked by EmberCN. No further details were provided in the source about the purpose of the transfer or any follow-up movements after the deposit to Kraken. The report focused on the size of the SOL transfer, the receiving exchange, and the estimated dollar value at the time the tokens were moved.
ChainCatcher reported that on-chain analyst Ember tracked a transfer from a Pump.fun team fee wallet to crypto exchange Kraken. According to the alert, the wallet labeled "2p23...v3q" moved 77,706 SOL about four hours earlier. The reported value of the transfer was $7.88 million. The update identified the sending wallet, the receiving exchange, the amount of SOL transferred, and the estimated dollar value. No additional details were disclosed in the brief.
On-chain detective Specter reports that Balancer may have been hit by a V1 attack, with an attacker continuously moving funds and netting $250,000 so far. The associated address is 0x112...E0aE.
