The Plot Thickens As DAO Attacker Trades Stolen Funds for Bitcoin

More than $100,000 worth of digital currency tied to ethereum’s biggest hack has been successfully converted into bitcoin.

AccessTimeIconOct 27, 2016 at 9:56 p.m. UTC
Updated Sep 11, 2021 at 12:35 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

The DAO hacker is one step closer to turning a real-world profit.

The saga that started in June with a high-profile hack on ethereum's most notable project, took another turn on Wednesday when nearly $100,000 worth of digital currency associated with the incident was converted into bitcoin.

Given the impact of the hack on the ethereum ecosystem (it sparked weeks of debate and led to a schism among the technology's supporters), the whereabouts of the funds have long been a matter of public interest. Funds first began moving in August and were reported to be in transit again in September.

Now, analysis from Bok Consulting founder Bok Khoo indicates that a portion of the funds have reached at least one major exchange.

Khoo, who has been tracking the theft for months, first determined that the hacker split the funds into 2,333 ETC chunks on Wednesday in an attempt to sidestep restrictions imposed by digital currency exchange ShapeShift. Next, he used the ShapeShift API to determine that those funds were converted into bitcoin and are now stored at this address.

Khoo's research would indicate that this is the first time the hacker may have tried to cash out of the digital currency.

Tracking the funds

Notably, these funds represent only a small portion of what was stolen, as more than $3.5m ether classics associated with the original DAO balance are still currently stored at this address.

However, Khoo's work may soon draw to a close.

Though the journey of the funds has so far been public, they might not be traceable forever if the hacker continues to move the funds between blockchains.

Khoo mentioned that the attacker might have converted the funds into bitcoin as part of an effort to preserve his or her anonymity.

He told CoinDesk:

"Bitcoin has mixers. Ethereum doesn't have any mixers or anonymous transfers yet."

Ecosystem impact

While the news is certainly a positive for the DAO attacker, the incident isn't likely to be relevant for blockchain development more broadly.

Ethereum's developers continue to assert that they support the move to edit the ethereum blockchain to return funds to DAO users.

At Money2020 this week, ethereum creator Vitalik Buterin argued that he doesn't believe the decision for developers to intervene affects the "immutability" of the ethereum ledger (as suggested by ethereum classic).

"Principles have to serve a social purpose," he said.

However, Buterin said that he continues to evaluate the decision, and that he now believes there needs to be "more supporting infrastructure" so that developers don't need to edit the blockchain when such an incident occurs.

Meanwhile, ethereum classic's supporters continue to believe their users should have confidence in any and all transactions that are valid on the ledger.

Ethereum classic supporter Avtar Sehra wrote on Twitter:

"The DAO attacker funds may be on the move, but it's not like they can disappear – this is ETC not Accenture's 'editable blockchain.'"

Pete Rizzo contributed reporting.

Piggy bank image via Shutterstock<


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.