KuCoin Maintains Wallet Freeze as Hackers Begin Laundering Stolen Crypto

The exchange's weekend thieves appear to be searching for buyers of their $281 million in stolen crypto.

AccessTimeIconSep 29, 2020 at 3:52 p.m. UTC
Updated Sep 14, 2021 at 10:02 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

KuCoin left its customers' accounts on lockdown Tuesday as the exchange's weekend hackers continued to slosh around millions of dollars in stolen cryptocurrency.

  • Transaction tracing twitter account Whale Alert flagged 18.4 million XRP tokens ($4.5 million) flowing into a "hack wallet" on Tuesday morning eastern time.
  • Hackers routed 17 million of that haul into a sub-wallet less than an hour later. Shortly after that, four batches of roughly four million tokens apiece flowed into yet more sub-wallets, where they appeared to sit at press time.
  • The XRP is only a drop of the $281 million in cryptocurrencies (especially bitcoin, Tron tokens, Stellar tokens and Ethereum tokens) that tracing firm Elliptic estimated was stolen from KuCoin over the weekend.
  • Ethereum-based tokens in particular dominate the haul. Hackers made off with $150 million total in tether, chainlink and other Ethereum-based tokens, Elliptic said.
  • The hackers have largely failed to sell those tokens on closely guarded centralized exchanges which quickly flag and often block hacked funds.
  • Still, by Monday, Elliptic said that hackers had already flipped millions of stolen tokens for $7.5 million in ethereum (ETH) on decentralized exchanges (DEX) Kyber Network and Uniswap.
  • Elliptic, which is now eyeing that ETH, said in its Monday blog post that the laundering will likely continue on DEXs.
  • KuCoin maintained its post-hack deposit and withdrawal freeze well into Tuesday. It began cancelling previously scheduled programming (including a trading competition) as a result.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.