Stolen Binance Funds Still Being Laundered Through Mixers, Researchers Claim

Funds from Binance's May hack are still moving through a mixing service according to research firm Clain

AccessTimeIconAug 9, 2019 at 8:00 p.m. UTC
Updated Sep 13, 2021 at 11:18 a.m. UTC

Binance's recent hacker has been diligently washing funds stolen from the exchange back in May., a Luxembourg-cryptocurrency capital flows research team, says the 7,074 stolen coins are being laundered through mixing service Chipmixer. Clain says at least 4,836 bitcoins were laundered since June 12.

A bitcoin tumbling service mixes bitcoins with other users' coins. Since bitcoins are attached to the publicly verifiable blockchain, mixing services are used to obfuscate transaction histories that follow bitcoins around.

Chipmixer was overwhelmed with the funds, Clain states. From June 12 onward, the hacker dumped funds into the mixer with abandon.

"It was pretty straightforward to trace the hacker's subsequent steps as it is practically impossible to launder big volume of coins in a relatively short period of time. Thus, we were able to detect the initial pool of hacker's addresses," the company wrote.

Clain says that Chipmixer has never handled inflows of such high volume, leading them to conclude that most funds coming out of Chipmixer today are related to one owner, the Binance hacker.

Image via

Address analysis shows the hacker further breaking his loot into smaller sums of around 10 coins. Breaking the lump sum into small mixed batches is one way to prepare for off-ramping cryptocurrencies into fiat. Clain says 150 clusters were detected during the active mixing period and further believes some 5,300 bitcoin have been clustered overall.

Of the 4,836 coins tumbled, Clain has identified 183 bitcoins from the hacker with another 814 very likely to be from the hacker.

Clain's analysis shows little evidence to indicate any of the coins have hit the open market.

Image via CoinDesk archives


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

Learn more about Consensus 2024, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.